您现在的位置: 青羽科技 >> 最新动态 >> 公司公告通知 >> 最新动态正文

 

 

网通210.51段IP地址列入Spamhaus

尊敬的客户,
经过我们的日志监测系统分析,中国网通的210.51.0.0/16段IP被英国反垃圾组织Spamhaus(www.spamhaus.org)列入到SBL黑名单中,因为Spamhaus的SBL被各大国内外尤其是国外邮件服务商广泛应用,所以如果邮件服务器地址在210.51段,发到国外的邮件会被拒绝或者被隔离,因为靠谱企业邮箱采用多点数据中心中继转发,虽然我们的网通服务器也列在其中,但通过海外多路中继,企业邮件服务几乎未受影响。

如您有其他邮件系统或者合作伙伴无法发送海外邮件,请和我们的业务部联系,提供7天免费中继转发服务。

自2008年2月17日,此次列入的中国网通IP高达数万个,是近年来Spamhaus采取的非常严厉的制裁,我们已经联系网通有关部门正在协商处理。

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL63236

青羽科技
20080218

Ref: SBL63236

210.51.0.0/16 is listed on the Spamhaus Block List (SBL)

16-Feb-2008 08:57 GMT | SR02

flowexpo and other bulletproof hosting (escalation)

IMPORTANT:

If your mail is rejected with a URL pointing to http://www.spamhaus.org/sbl/sbl.lasso?query=SBL63236, then please contact CNCGroup-BJ network or your IDC or ISP. They can assist you further. Spamhaus cannot assist users of this range, only your IDC or CNCGroup-BJ can assist you.

More than 170 total SBL listings in this /16. We expected CNCGroup-BJ to learn to not host spammers, to prevent spammers from getting accounts, and to promptly remove spammers after they snuck on and disobeyed the rules. But that is not the case. CNCGroup-BJ continues to allow spammers, year after year, to only enforce their policy slowly if at all, and to allow persistent long-term spammers like "Flowexpo" to continue to abuse other networks for years.

More "Flowexpo" spam, note how Flowexpo changes their domain name with spaces so as to evade content filters and SURBL/URIBL lists.



These are still live in 210.51/16:

210.51.168.0/24
Live cncgroup-bj SR02
2008-01-19 06:00:11
SBL62646 shibo.com (FlowExpo spammer)

210.51.170.0/32
Live xinnet SR08
2008-01-03 14:06:40
SBL62267 DNS to nyqbw.com

87.210.51.217/32
Live versatel.net SR08
2007-12-04 18:54:59
SBL61348 419 Nigerian scam source

210.51.168.9/32
Live xinnet SR02
2007-11-27 07:51:20
SBL61081 shibo.com (flowexpo)

210.51.171.72/32
Live xinnet SR20
2007-11-12 17:41:11
SBL60553 Yambo Financials
Yambo botnet nameservers/webhosts (compromised systems)

210.51.162.250/32
Live china-netcom.com SR02
2008-01-01 01:48:03
SBL58197 HerbalKing
HerbalKing back again!

210.51.170.140/32
Live xinnet SR02
2007-03-20 06:19:34
SBL52570 Qingdao Yilufa Group Co. Ltd.

210.51.170.0/32
Live xinnet SR08
2007-12-05 22:48:57
SBL48814 DNS to italian scammers

210.51.168.23/32
Live xinnet SR02
2007-11-27 07:52:06
SBL48755 flowexpo.com




These are other listings for "FLOWEXPO":

218.19.138.19/32
Live chinanet-gd
2008-02-16 08:55:09
SBL63269 Flowexpo / www.Shibo.com spam source

202.108.12.68/32
Live tom.com
2008-01-29 09:04:24
SBL62831 sxfzzm@tom.com, the FlowExpo spammer

210.51.168.0/24
Live cncgroup-bj
2008-01-19 06:00:11
SBL62646 shibo.com (FlowExpo spammer)

61.137.93.123/32
Removed chinanet-hn
2007-12-07 05:02:59
SBL61082 spam source, shibo.com (flowexpo) (chinanet-hn*)

210.51.168.9/32
Live xinnet
2007-11-27 07:51:20
SBL61081 shibo.com (flowexpo)

211.147.208.0/32
Removed chinacomm.com.cn
2007-06-11 23:57:47
SBL54059 xinnet escalation

61.142.239.67/32
Removed chinanet-gd
2007-03-16 08:44:55
SBL51825 flowexpo spam source

210.77.145.110/32
Removed abitcool.com
2007-06-12 00:00:24
SBL50192 xinnet.com (ns3.icpcn.net)

210.51.172.0/23
Removed xinnet
2007-05-17 08:54:52
SBL50004 dirty block

61.137.93.0/32
Removed chinanet-hn
2007-02-05 05:41:45
SBL49966 spam source, no rDNS (flowexpo)

219.133.36.180/32
Removed chinanet-gd
2007-01-16 02:34:35
SBL49763 mail.2adnet.com

210.51.168.0/22
Removed xinnet
2007-05-17 08:54:35
SBL49762 dirty block - Xinnet ignoring Spamhaus! (escalation)

219.159.68.234/32
Removed chinanet-gx
2007-05-16 06:44:18
SBL49016 spam source

210.51.168.23/32
Live xinnet
2007-11-27 07:52:06
SBL48755 flowexpo.com

210.51.170.0/32
Removed xinnet
2007-05-11 11:29:05
SBL38821 xinnet.cn (NS for spammers)

202.106.124.194/31
Removed cncgroup-bj
2006-03-10 06:36:25
SBL28722 ns.xinnet.cn (moved)

210.51.170.0/24
Removed china-netcom.com
2005-07-28 06:44:45
SBL28721 ns.xinnetdns.com




$ host www.shibo.com
www.shibo.com is an alias for wins2-web-g13.xinnetdns.com.
wins2-web-g13.xinnetdns.com has address 210.51.168.9

[whois.apnic.net]

inetnum: 210.51.160.0 - 210.51.175.255
netname: CNC-BJ-IDC2
country: CN
descr: Beijing YiZhuang IDC of China Netcom
admin-c: CH140-AP
tech-c: TJ35-AP
status: ALLOCATED NON-PORTABLE
changed: cncipaddr@china-netcom.com 20040414
mnt-by: MAINT-CN-ZM28
mnt-lower: MAINT-CN-BJIDC
source: APNIC

route: 210.51.0.0/16
descr: CNC Group CncNet
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060330
source: APNIC

role: CNCIDC hostmaster
address: No.1,Beihuan Donglu,BDA,Beijing,China
country: CN
phone: +8610 6787 5599
fax-no: +8610 6787 8624
e-mail: cncipaddr@china-netcom.com
trouble: send spam and abuse reports to tech-group@china-netcom.com
trouble: Please include detailed information and times in UTC
admin-c: TJ35-AP
tech-c: TC254-AP
nic-hdl: Ch140-AP
notify: cncipaddr@china-netcom.com
mnt-by: MAINT-CN-ZM28
changed: hm-changed@apnic.net 20040226
source: APNIC

person: Tao Jiang
nic-hdl: TJ35-AP
e-mail: bjidc-ipaddr@china-netcom.com
address: No.1,Beihuan Donglu,BDA,Beijing,China
phone: +8610-67875599-7274
fax-no: +8610-67878624
country: CN
changed: cncipaddr@china-netcom.com 20040227
mnt-by: MAINT-CN-BJIDC
source: APNIC





To: [CNCGroup Backbone Network]
Subject: Re: PBL Listing SBL63236 210.51.0.0/16 SR02
From: The Spamhaus Project - SBL Removals <sbl-removals@spamhaus.org>
Date: Fri, 15 Feb 2008 08:49:49 +0000

Hello xxxxx,

Please remove all the other SBL listings within 210.51.0.0/16. A list of
those listings is included below. After all of those problems are
resolved, then we can remove SBL63236. Removing spammers in a timely
manner, and updating Spamhaus about those SBL listings, is a good way to
avoid such escalated listings, as I'm sure you know by now.

For all cncgroup-bj SBL listings we notified
spam-solve@publicf.bta.net.cn,yangxiaokang@bjtelecom.com.cn,sec-bj@china-netcom.com
at the time of the listing.

For all xinnet SBL listings we notified
abuse@xinnet.com,postmaster@xinnetdns.com at the time of the listing.

Xinnet not only continues to host persistent spammers, but they also
provide thousands of domains per week to Russian botnet spam gangs. We
have notified Xinnet dozens of times, and while they sometimes will
"HOLD" the spammer domains which we identify, they continue to provide
registration services to the spammers. Please insist that Xinnet shape
up their policies to actively prohibit spammers.

Also, as we discussed last autumn, CNCGroup continues to route traffic
for completely rogue networks such as Newspeed 116.199.128.0/19. While
not directly related to SBL63236, Spamhaus sees the "safe haven" hosting
of such criminals as further evidence that CNCGroup does not respect
other networks which are the targets of the abuse by those criminals.

Please note that there are presently 51 Live SBL listings for "CNCGroup"
networks. If we listed all of CNCGroup as a single network instead of
breaking it down by provinces, that would be a worse record than any
other ISP in our "Top Ten" list:
http://www.spamhaus.org/statistics/networks.lasso

Here is a list of those province network's SBL listings. Please contact
those administrators and insist that they remove the spammers and update
Spamhaus about those listings:

http://www.spamhaus.org/sbl/listings.lasso?isp=china-netcom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-bj
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-cq
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gu
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-ha
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-he
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hi
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-jl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-js
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-ln
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-nm
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sc
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-tj
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-yn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-zj

Here is a list of SBL listings in 210.51.0.0/16. The sooner these spam
problems are shut down, the sooner we can remove SBL63236.

210.51.168.0/24
Live cncgroup-bj
2008-01-19 06:00:11
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62646
shibo.com (FlowExpo spammer)

210.51.170.0/32
Live xinnet
2008-01-03 14:06:40
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62267
DNS to nyqbw.com

210.51.168.9/32
Live xinnet
2007-11-27 07:51:20
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL61081
shibo.com (flowexpo)

210.51.171.72/32
Live xinnet
2007-11-12 17:41:11
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL60553
Yambo Financials
Yambo botnet nameservers/webhosts (compromised systems)

210.51.162.250/32
Live china-netcom.com
2008-01-01 01:48:03
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL58197
HerbalKing
HerbalKing back again!

210.51.170.140/32
Live xinnet
2007-03-20 06:19:34
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52570
Qingdao Yilufa Group Co. Ltd.

210.51.170.0/32
Live xinnet
2007-12-05 22:48:57
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48814
DNS to italian scammers

210.51.168.23/32
Live xinnet
2007-11-27 07:52:06
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48755
flowexpo.com



Sincerely,

--
Spamhaus Project Team

PS - If CNCGroup will null route 210.51.160.0/20 at its borders until
the spam problems are fixed, then we can remove 210.51.0.0/16 right
away. That choice is up to CNCGroup, you can fix the problem quickly
that way. Let us know.




Return-Path: 
Received: from web15709.mail.cnb.yahoo.com ([202.165.102.76])
	by x
	for ; Thu, 14 Feb 2008 21:xx:xx -0500 (EST)
Received: (qmail 64012 invoked by uid 60001); 15 Feb 2008 02:xx:xx -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com.cn;  h=Received:Date:From:Subject:To:MIME-Version:Content-Type:
Content-Transfer-Encoding:Message-ID; b=R0YlKlHy07yRDHthKLFjzwLeCxUkhkyLWq0J4DzU9sgBvRti5bWHtgR/uktYx2kGgMyWK7xGUArVibP8uxHVynyXRasDA
OfUbXDhbIhW8l9eXQJ1mVLmuYCi7iSKumADwtVeiLirtt7TP0bpERi0uSxqs0Hah5rrV5ltAEiVoCE=; Received: from [218.19.138.88] by web15709.mail.cnb.yahoo.com via HTTP; Fri, 15 Feb 2008 10:xx:xx CST Date: Fri, 15 Feb 2008 10:xx:xx +0800 (CST) From: sjbdvx cdvgp Subject: =?gb2312?q?Valves=20Trade=20Fair=20=20=B7=A7=C3=C5=D5=B9=2057ej7ZH9wA1SA8?= =?gb2312?q?WI8Eh5UK4S84448N?= To: x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, x, flowexpochina@gmail.com MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-680891414-1203042855=:63554" Content-Transfer-Encoding: 8bit Message-ID: <209087.63554.qm@web15709.mail.cnb.yahooxxxxxxx> --0-680891414-1203042855=:63554 Content-Type: text/plain; charset=gb2312 Content-Transfer-Encoding: 8bit st1\:*{behavior:url(#ieooui) } J 7 5 G X E y h 0 g 2 e O Y e U C b A Z m d FxLkOSWiEPXOP5OK C J e C 0 8 q U R a f The 11th International Trade Fair for Valves, Pipelines, Fluid Engineerings and Process Industries T n F 7 B H j H 3 o X March 26-28,2008 Guangzhou Gymnasium No.783,BaiYundadao,BaiYun Area,Guangzhou ,China http : // www . Shibo . com Dear Mr. / Ms, You are welcome to attend our FLOWEXPO! FLOWEXPO , which is International Exhibition on Valves, Pipelines, Fluid Engineering
and Process Industry , was founded in March,1997. We can attend this expo once a year at GUANGZHOU .
The Expo date is the last Wednesday in March every year, and it will last 3 days. z 8 R f M Z D z i p o Exhibit profile  valves for general industrial use gate valves, butterfly valves, globe valves, ball and plug valves, diaphragm valves, other shut-off valves,
check valves, regulators and control valves, pressure, temperature and level limit valves,
separators and dischargers, fittings, pipe expansion joints and connection devices, valve actuators
 valves for special industrial or similar use  valves for use in domestic appliances and similar installations  Multi-turn Valves or Linear Motion Valves  QUARTER TURN VALVES OR ROTARY  SELF-ACTUATED VALVES  CONTROL VALVES  SPECIALTY VALVES  COMMON TYPES OF ACTUATORS  Pipelines, Pipes, Piping, Tubing, Fittings, Hoses, Pipes  Systems for Fluid Engineerings and Process Industries J f C b d q n X A K i We will invite our audience from all kinds of trades such as petrol and chemistry,
petrol-making, energy resources, electric power, pulping  paper-making, pharmacy, foodstuff, drinks, beer, light-industry, construct material  mining, metallurgy,
water-supplying, steam-supplying, heat-supplying, environment-protecting, water-handling, industry equipment installing project, the long pipeline of petrol and natural gas
project, architecture  water-supplying and draining  air condition  fire-fighting  gas-installed project and so on. The audience and exhibitors come from more than 30
countries and areas such as America, Germany, French, Italy, Australia, Canada, Japan, Denmark, Spanish, Norway, Korea, Singapore and so on. C H f S Y G 7 x z D O FLOWEXPO will provide you with good favor in exploiting market and seeking commerce
opportunity! We can make sure that our exhibition will achieve greater effect , both the businessman and audience this year! If you want to book our showcase  please apply
for it in advance; if you want to visit our exhibition ,you are welcome to register. Please contact with us as soon as possible. for further information on FLOWEXPO,
visit the FLOWEXPO website at http : // www . shibo . com Yours faithfully Faye Liu Guangzhou Flow Expo Co., Ltd., ADD505 Lifeng Center,7 Qingnian Rood,GETDD,Guangzhou,china P.C.510730 TEL+86-20-82220077822200618222715582088331 C 602 FAX+86-20-62614523 E-mail flowexpo @ hotmail . com http : // www .shibo . com L 6 S S 2 Q V E h t E ---------------------------------  --0-680891414-1203042855=:63554 Content-Type: text/html; charset=gb2312 Content-Transfer-Encoding: 8bit
J  7 5 G X E y h 0 g 2
e  O Y e U C b A Z m d
FxLkOSWiEPXOP5OK
C  J e C 0 8 q U R a f
The 11th International Trade Fair for Valves, Pipelines,
Fluid Engineerings and Process Industries
T  n F 7 B H j H 3 o X
March 26-28,2008
Guangzhou Gymnasium
No.783,BaiYundadao,BaiYun Area,Guangzhou ,China
http : // www . Shibo . com

Dear Mr. / Ms,

You are welcome to attend our FLOWEXPO!
 FLOWEXPO , which is International Exhibition on Valves, Pipelines, Fluid Engineering and Process Industry , was founded in March,1997.
We can attend this expo once a year at GUANGZHOU .
The Expo date is the last Wednesday in March every year, and it will last 3 days.
z  8 R f M Z D z i p o
 
Exhibit profile
 valves for general industrial use
gate valves, butterfly valves, globe valves, ball and plug valves, diaphragm valves, other shut-off valves, check valves,
regulators and control valves, pressure, temperature and level limit valves, separators and dischargers,
fittings, pipe expansion joints and connection devices, valve actuators

 valves for special industrial or similar use
 valves for use in domestic appliances and similar installations
 Multi-turn Valves or Linear Motion Valves
 QUARTER TURN VALVES OR ROTARY
 SELF-ACTUATED VALVES
 CONTROL VALVES
 SPECIALTY VALVES
 COMMON TYPES OF ACTUATORS
 Pipelines, Pipes, Piping, Tubing, Fittings, Hoses, Pipes
 Systems for Fluid Engineerings and Process Industries
J  f C b d q n X A K i
We will invite our audience from all kinds of trades such as petrol and chemistry, petrol-making, energy resources, electric power, pulping  paper-making, pharmacy, foodstuff, drinks, beer, light-industry,
construct material
 mining, metallurgy, water-supplying, steam-supplying, heat-supplying, environment- protecting,
water-handling, industry equipment installing project, the long pipeline of petrol and natural gas project,
architecture
 water-supplying and draining  air condition  fire-fighting  gas-installed project and so on. The audience and exhibitors come from more than 30 countries and areas such as America, Germany,
French, Italy, Australia, Canada, Japan, Denmark, Spanish, Norway, Korea, Singapore and so on.
C  H f S Y G 7 x z D O
FLOWEXPO will provide you with good favor in exploiting market and seeking commerce opportunity!
We can make sure that our exhibition will achieve greater effect , both the businessman and audience this year!
 If you want to book our showcase
 please apply for it in advance; if you want to visit our exhibition ,you are welcome to register. Please contact with us as soon as possible. for further information on FLOWEXPO,
visit  the FLOWEXPO website at 
http : // www . shibo . com
Yours faithfully

Faye Liu
Guangzhou Flow Expo Co., Ltd.,
ADD
505 Lifeng Center,7 Qingnian Rood,GETDD,Guangzhou,china P.C.510730
TEL
+86-20-82220077822200618222715582088331 C 602  
FAX
+86-20-62614523
E-mail
 flowexpo @ hotmail . com
http : // www .shibo . com
L  6 S S 2 Q V E h t E
 



 --0-680891414-1203042855=:63554--



 



Removal Procedure

To have record SBL63236 (210.51.0.0/16) removed from the SBL, the Abuse/Security representative of cncgroup-bj (or the Internet Service Provider responsible for connectivity to 210.51.0.0/16) needs to contact the SBL Team to explain how the spam problem has been terminated. If the spam problem that caused this listing has been terminated we will normally remove the listing from the SBL.

If you are a representative of cncgroup-bj, you also need to see this:
Current cncgroup-bj spam problems



The SBL is an international anti-spam system maintained by The Spamhaus Project and used by Internet networks to protect customers from spam sources and spam services. The SBL lists only IP addresses (not domains or addresses). If you are unable to send email due to this SBL listing, please contact your Internet Service Provider and show them this page - your Service Provider needs to contact Spamhaus to resolve the issue. (If you are not the Internet Service Provider, please do NOT contact us.)

::相关文档::
青羽科技 2008 新春寄语
Winwebmail3.7.5.1中继转发优化
新网站发布
本页关键词:

产品和服务 | 邮件解决方案 | 合作伙伴 | 联系我们 | 加入青羽 | 网站地图

©2002-2007 上海青羽电脑科技有限公司 版权所有 沪ICP备05016146号