"Homegrown" Chinese spamhaus, possibly taken over by Western spammers, but certainly boosted by them. Specializes in bulletproof hosting and DNS in China. Rotates DNS domains routinely as hosts are discovered and published in ROKSO. Many, many SBL listings (and nukes).
Hua Tan (tel: 13335606905)
Cai Fu, Liu (tel: +86.05163233657)
267 Huaihe River Sea Route
Xuzhou, Jiangsu Province
Agent for Service of Process
MARIO J IRZZARY <-- not the owner
2135 E VALLEY PKWY #42
ESCONDIDO, CA 92027
Typo on the last name, should be:
Mario Irizarry, (760) 739-0829, , Escondido, CA 92025
MailTrain is moving to hosting outside of China, as well as associating with other ROKSO spammers.
220.127.116.11 spidernet.net.in sbl : ok MailTrain
18.104.22.168 spidernet.net.in sbl : ok MailTrain
22.214.171.124 spidernet.net.in sbl : ok MailTrain
126.96.36.199 7starnetworks.com SBL9068 Bonnie Dukarossa - Bullet9 Communications
Recently spam from MailTrain has shown significant cross-over with other spammers. Both Glen Hannifin, and the "Five-Elements" spamhaus have been using them to host spamvertized sites. 188.8.131.52 is associated with Hannifin in addition to Mailtrain, and 184.108.40.206 with Five-Elements and MailTrain. Also, http://www.guilt1.com/users/ks link to www.topharm.biz [220.127.116.11] (Peter Francis-MacCrae).
Chinese agent: zhangjiang or "Zhang Jiang"
Bulk Email Sending Server
Bullet Proof Dedicated Hosting Server
BP Shared Hosting
BP Domain Hosting
Email Lists for sale
Yahoo messenger: email@example.com
MSN messenger: firstname.lastname@example.org
AOL instant messenger: bphstserver2007
Email Customer Support: email@example.com
Partner In Spam: elogic.cc (ROKSO dormant; probably the same outfit)
The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.