210.51.0.0/16 is listed on the Spamhaus Block List (SBL) 16-Feb-2008 08:57 GMT | SR02
flowexpo and other bulletproof hosting (escalation)
IMPORTANT:
If your mail is rejected with a URL pointing to http://www.spamhaus.org/sbl/sbl.lasso?query=SBL63236, then please contact CNCGroup-BJ network or your IDC or ISP. They can assist you further. Spamhaus cannot assist users of this range, only your IDC or CNCGroup-BJ can assist you.
More than 170 total SBL listings in this /16. We expected CNCGroup-BJ to learn to not host spammers, to prevent spammers from getting accounts, and to promptly remove spammers after they snuck on and disobeyed the rules. But that is not the case. CNCGroup-BJ continues to allow spammers, year after year, to only enforce their policy slowly if at all, and to allow persistent long-term spammers like "Flowexpo" to continue to abuse other networks for years.
More "Flowexpo" spam, note how Flowexpo changes their domain name with spaces so as to evade content filters and SURBL/URIBL lists.
These are still live in 210.51/16:
210.51.168.0/24 Live cncgroup-bj SR02 2008-01-19 06:00:11 SBL62646 shibo.com (FlowExpo spammer)
210.51.170.0/32 Live xinnet SR08 2008-01-03 14:06:40 SBL62267 DNS to nyqbw.com
To: [CNCGroup Backbone Network] Subject: Re: PBL Listing SBL63236 210.51.0.0/16 SR02 From: The Spamhaus Project - SBL Removals <sbl-removals@spamhaus.org> Date: Fri, 15 Feb 2008 08:49:49 +0000
Hello xxxxx,
Please remove all the other SBL listings within 210.51.0.0/16. A list of those listings is included below. After all of those problems are resolved, then we can remove SBL63236. Removing spammers in a timely manner, and updating Spamhaus about those SBL listings, is a good way to avoid such escalated listings, as I'm sure you know by now.
For all cncgroup-bj SBL listings we notified spam-solve@publicf.bta.net.cn,yangxiaokang@bjtelecom.com.cn,sec-bj@china-netcom.com at the time of the listing.
For all xinnet SBL listings we notified abuse@xinnet.com,postmaster@xinnetdns.com at the time of the listing.
Xinnet not only continues to host persistent spammers, but they also provide thousands of domains per week to Russian botnet spam gangs. We have notified Xinnet dozens of times, and while they sometimes will "HOLD" the spammer domains which we identify, they continue to provide registration services to the spammers. Please insist that Xinnet shape up their policies to actively prohibit spammers.
Also, as we discussed last autumn, CNCGroup continues to route traffic for completely rogue networks such as Newspeed 116.199.128.0/19. While not directly related to SBL63236, Spamhaus sees the "safe haven" hosting of such criminals as further evidence that CNCGroup does not respect other networks which are the targets of the abuse by those criminals.
Please note that there are presently 51 Live SBL listings for "CNCGroup" networks. If we listed all of CNCGroup as a single network instead of breaking it down by provinces, that would be a worse record than any other ISP in our "Top Ten" list: http://www.spamhaus.org/statistics/networks.lasso
Here is a list of those province network's SBL listings. Please contact those administrators and insist that they remove the spammers and update Spamhaus about those listings:
210.51.162.250/32 Live china-netcom.com 2008-01-01 01:48:03 http://www.spamhaus.org/sbl/sbl.lasso?query=SBL58197 HerbalKing HerbalKing back again!
210.51.170.140/32 Live xinnet 2007-03-20 06:19:34 http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52570 Qingdao Yilufa Group Co. Ltd.
210.51.170.0/32 Live xinnet 2007-12-05 22:48:57 http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48814 DNS to italian scammers
210.51.168.23/32 Live xinnet 2007-11-27 07:52:06 http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48755 flowexpo.com
Sincerely,
-- Spamhaus Project Team
PS - If CNCGroup will null route 210.51.160.0/20 at its borders until the spam problems are fixed, then we can remove 210.51.0.0/16 right away. That choice is up to CNCGroup, you can fix the problem quickly that way. Let us know.
Return-Path:
Received: from web15709.mail.cnb.yahoo.com ([202.165.102.76])
by x
for ; Thu, 14 Feb 2008 21:xx:xx -0500 (EST)
Received: (qmail 64012 invoked by uid 60001); 15 Feb 2008 02:xx:xx -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.cn; h=Received:Date:From:Subject:To:MIME-Version:Content-Type: Content-Transfer-Encoding:Message-ID;
b=R0YlKlHy07yRDHthKLFjzwLeCxUkhkyLWq0J4DzU9sgBvRti5bWHtgR/uktYx2kGgMyWK7xGUArVibP8uxHVynyXRasDA OfUbXDhbIhW8l9eXQJ1mVLmuYCi7iSKumADwtVeiLirtt7TP0bpERi0uSxqs0Hah5rrV5ltAEiVoCE=;
Received: from [218.19.138.88] by web15709.mail.cnb.yahoo.com via HTTP; Fri, 15 Feb 2008 10:xx:xx CST
Date: Fri, 15 Feb 2008 10:xx:xx +0800 (CST)
From: sjbdvx cdvgp
Subject: =?gb2312?q?Valves=20Trade=20Fair=20=20=B7=A7=C3=C5=D5=B9=2057ej7ZH9wA1SA8?=
=?gb2312?q?WI8Eh5UK4S84448N?=
To: x, x, x,
x, x, x,
x, x, x,
x, x, x,
x, x, x,
x, x,
x, x, x,
flowexpochina@gmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-680891414-1203042855=:63554"
Content-Transfer-Encoding: 8bit
Message-ID: <209087.63554.qm@web15709.mail.cnb.yahooxxxxxxx>
--0-680891414-1203042855=:63554
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 8bit
st1\:*{behavior:url(#ieooui) } J 7 5 G X E y h 0 g 2
e O Y e U C b A Z m d
FxLkOSWiEPXOP5OK
C J e C 0 8 q U R a f
The 11th International Trade Fair for Valves, Pipelines,
Fluid Engineerings and Process Industries
T n F 7 B H j H 3 o X
March 26-28,2008
Guangzhou Gymnasium
No.783,BaiYundadao,BaiYun Area,Guangzhou ,China
http : // www . Shibo . com
Dear Mr. / Ms,
You are welcome to attend our FLOWEXPO!
FLOWEXPO , which is International Exhibition on Valves, Pipelines, Fluid Engineering and Process Industry , was founded in March,1997.
We can attend this expo once a year at GUANGZHOU .
The Expo date is the last Wednesday in March every year, and it will last 3 days.
z 8 R f M Z D z i p o
Exhibit profile
valves for general industrial use
gate valves, butterfly valves, globe valves, ball and plug valves, diaphragm valves, other shut-off valves,
check valves, regulators and control valves, pressure, temperature and level limit valves,
separators and dischargers, fittings, pipe expansion joints and connection devices, valve actuators
valves for special industrial or similar use
valves for use in domestic appliances and similar installations
Multi-turn Valves or Linear Motion Valves
QUARTER TURN VALVES OR ROTARY
SELF-ACTUATED VALVES
CONTROL VALVES
SPECIALTY VALVES
COMMON TYPES OF ACTUATORS
Pipelines, Pipes, Piping, Tubing, Fittings, Hoses, Pipes
Systems for Fluid Engineerings and Process Industries
J f C b d q n X A K i
We will invite our audience from all kinds of trades such as petrol and chemistry, petrol-making, energy resources, electric power, pulping paper-making, pharmacy,
foodstuff, drinks, beer, light-industry, construct material mining, metallurgy, water-supplying, steam-supplying, heat-supplying, environment-protecting, water-handling,
industry equipment installing project, the long pipeline of petrol and natural gas project, architecture water-supplying and draining air condition fire-fighting
gas-installed project and so on. The audience and exhibitors come from more than 30 countries and areas such as America, Germany, French, Italy, Australia, Canada, Japan,
Denmark, Spanish, Norway, Korea, Singapore and so on.
C H f S Y G 7 x z D O
FLOWEXPO will provide you with good favor in exploiting market and seeking commerce opportunity! We can make sure that our exhibition will achieve greater effect , both the
businessman and audience this year! If you want to book our showcase please apply for it in advance; if you want to visit our exhibition ,you are welcome to register. Please
contact with us as soon as possible. for further information on FLOWEXPO, visit the FLOWEXPO website at http : // www . shibo . com
Yours faithfully
Faye Liu
Guangzhou Flow Expo Co., Ltd.,
ADD505 Lifeng Center,7 Qingnian Rood,GETDD,Guangzhou,china P.C.510730
TEL+86-20-82220077822200618222715582088331 C 602
FAX+86-20-62614523
E-mail flowexpo @ hotmail . com
http : // www .shibo . com
L 6 S S 2 Q V E h t E
---------------------------------
--0-680891414-1203042855=:63554
Content-Type: text/html; charset=gb2312
Content-Transfer-Encoding: 8bit
J7 5 G X E y h 0 g 2
eO Y e U C b A Z m d
FxLkOSWiEPXOP5OK CJ e C 0 8 q U R a f
The 11th International Trade Fair for Valves, Pipelines,
Fluid Engineerings and Process Industries
Tn F 7 B H j H 3 o X
March 26-28,2008
Guangzhou Gymnasium
No.783,BaiYundadao,BaiYun Area,Guangzhou ,China
http :// www . Shibo . com
Dear Mr. / Ms,
You are welcome to attend our FLOWEXPO!
FLOWEXPO , which is International Exhibition on Valves, Pipelines,
Fluid Engineering and Process Industry , was founded in March,1997. We can attend this expo once a year at GUANGZHOU . The Expo date is the last Wednesday in March every year, and it will last 3 days.
z8 R f M Z D z i p o
Exhibit profile
valves for general industrial use
gate valves, butterfly valves, globe valves, ball and plug valves, diaphragm valves, other shut-off valves, check valves, regulators and control valves, pressure, temperature and level limit valves, separators and dischargers, fittings, pipe expansion joints and connection devices, valve actuators
valves for special industrial or similar use
valves for use in domestic appliances and similar installations
Systems for Fluid Engineerings and Process Industries
Jf C b d q n X A K i
We will invite our audience from all kinds of trades such as petrol and chemistry, petrol-making, energy
resources, electric power, pulping paper-making, pharmacy, foodstuff, drinks, beer, light-industry, construct material mining, metallurgy, water-supplying, steam-supplying, heat-supplying, environment-
protecting, water-handling, industry equipment installing project, the long pipeline of petrol and natural gas project, architecture water-supplying and draining air condition fire-fighting gas-installed project and so on.
The audience and exhibitors come from more than 30 countries and areas such as America, Germany, French, Italy, Australia, Canada, Japan, Denmark, Spanish, Norway, Korea, Singapore and so on.
CH f S Y G 7 x z D O
FLOWEXPO will provide you with good favor in exploiting market and seeking commerce opportunity! We can make sure that our exhibition will achieve greater effect , both the businessman
and audience this year! If you want to book our showcase please apply for it in advance; if you want to visit our exhibition ,you are welcome to register.
Please contact with us as soon as possible. for further information on FLOWEXPO, visitthe FLOWEXPO website athttp : // www . shibo . com
Yours faithfully
Faye Liu Guangzhou Flow Expo Co., Ltd.,
ADD505 Lifeng Center,7 Qingnian Rood,GETDD,Guangzhou,china P.C.510730 TEL+86-20-82220077822200618222715582088331 C 602 FAX+86-20-62614523 E-mailflowexpo @ hotmail . com http : // www .shibo . com
L6 S S 2 Q V E h t E
--0-680891414-1203042855=:63554--
Removal Procedure
To have record SBL63236 (210.51.0.0/16) removed from the SBL, the Abuse/Security representative of cncgroup-bj (or the Internet Service Provider responsible for connectivity to 210.51.0.0/16) needs to contact the SBL Team to explain how the spam problem has been terminated. If the spam problem that caused this listing has been terminated we will normally remove the listing from the SBL.
The SBL is an international anti-spam system maintained by The Spamhaus Project and used by Internet networks to protect customers from spam sources and spam services. The SBL lists only IP addresses (not domains or addresses). If you are unable to send email due to this SBL listing, please contact your Internet Service Provider and show them this page - your Service Provider needs to contact Spamhaus to resolve the issue. (If you are not the Internet Service Provider, please do NOT contact us.)