Spamhaus Top 10 Watch

[meep]

It might be a good idea to post such things for archival purposes.


http://www.spamhaus.org/statistics/networks.lasso

The 10 Worst Spam Service ISPs As at 28 December 2008
Rank Network Number of Current
Known Spam Issues
1
sistemnet.com.tr 39
2
hostfresh.com 34
3
cnuninet.com 31
4
gilat.net 30
5
vsnlinternational.com 30
6
uatelecom.co.ua 26
7
sprint.net 25
8
simplenet.com 25
9
telefonica.com.br 25
10
verizon.com 24

The SBL list changed quite a bit from just 11/20/08

http://voices.washingtonpost.com/securityfix/2008/11/spamhaus_microsoft_now_5th_mos.html

[Red Dwarf]

I can not fathom the questionable method used by Spamhaus to come up with that ranking.
It is statistically flawed.

Personally I consider it worthless.

[AlphaCentauri]

I can not fathom the questionable method used by Spamhaus to come up with that ranking.
It is statistically flawed.

Personally I consider it worthless.

There was a lot of discussion about this a month or so ago when it got posted. Apparently Spamhaus never removes anything unless the ISP requests it. Verizon's stuff was cleaned up, but they didn't care if it was still in the Spamhaus listing, so that's what Spamhaus is counting. The stuff I recognized was MCP stuff that I know was shut down nearly two years ago because we got the domain suspended.

[meep]

It is statistically flawed.

Agreed, flawed, it is when you view it as a spam originating monitor. Too many factors make that innaccurate.


Red, some of the tools you showed of spamming volumes are much more accurate in regards to spam sending hosts.

Spamhaus lists SBLs for many reasons including, phishing urls, malware urls, botnet IP activity, comment spam, PHP vulnerabilities, script hacks, lame registrars who host fraud domains like NIC.AT, spamvertizing domains, probably some other things I cannot think of. (some of this stuff overlaps anyway).

Spamhaus tracks certain spam groups, too, so they are very biased in that respect. My guess is (though just an assumption, some Spamhaus volunteers also probably targets some hosts that it think seem to be on the upswing of malware or spamming.

Stale listings, too. If the listing is more than 6 months old, or even newer, the host with the SBL may have never contacted Spamhaus in getting the list removed. I *believe* Spamhaus does not actively check stale listings. I think the oldest active listing I have seen recently was in 2003!

Probably a bunch of other reasons, but those come to mind right away.

Compared to other RBLs, such as UceProtect, SORBS, or APEWS/SPEWS/ASPEWS or whatever it might be, I have a preference for Spamhaus and Spamcop in general as worthwhile RBLs.

There was a lot of discussion about this a month or so ago when it got posted.

There was, and I like to revive the discussion. I want to find worthwhile critiques of Spamhaus SBL or whoever else.

[AlphaCentauri]

If you look at the actual listings, the ones for Verizon are much different from the ones Red was tracking. They're heavily weighted to "opt-out" spammers sending to harvested addresses, and probably via multiple intermediary links. SiL would have sent complaints to the affiliate programs and gotten most of them booted. If you follow the links, you're going to get more of those, and you're going to create a trail of purchased email lists that makes it all legal in the US. Verizon is in the position of taking the word of a customer against the word of the owner of a single email address.

The spammer in the most recent item on their list was spamming for the U.S. Navy's recruiting office, btw. The military is specifically exempted from the do-not-call telephone registry as far as I understand (at least high schools are required to turn over your kid's personal information if you don't opt out in advance), and it may get the same type of protection in CAN-SPAM. So I don't know that Verizon is the one you should be complaining about if they don't rush in and shut everything down.

[meep]

AC, those are details I am not aware of. Definitely one of many factors that contribute to the "flawed" SBL Top 10 List.

[AlphaCentauri]

OK, this just kept gnawing at me. I don't have any trouble getting a response from Verizon when I contact them. They are my ISP, so maybe reporting from one of their own email addresses gets more attention, but their name doesn't come up that much, either.

Spamhaus managed to keep Verizon at number ten on each edition of the list, when it has one less listing than the three tied at number seven. (Were others tied for #10 and not listed? No way to find out, it seems.) I also knew at least one of those listings was totally whacked, so they probably would not be in the top ten at all if that inaccuracy were corrected. And there are many other smaller but spammier hosts that are not listed -- Verizon is hardly responsible for a disproportionate volume of the spam economy. So I looked up all 24.

Some of these listings are based on what would be considered spam from our point of view, and a few of their clients are clearly working for the dark side. But many incidents cited seem like things that would be legal in the US, or maybe a single incident of poor judgement on the part of a novice internet marketer, so it's questionable how much you could expect Verizon to do.

Is it spam if one of us obtains an email address from the whois of a domain name to contact the domain owner about a problem? What if it is to ask them a question based on their area of competence as evidenced by that website? What if it is to pay them to complete a survey on that area of competence? What if it is an academic researcher asking? What if it is a professional survey firm hired as part of an academic study? What if they only ask once? -- Things aren't so cut and dried.

Some of the listings seem to imply Spamhaus has other background information that makes the incidents they cite part of a larger pattern: "This is a single problem from this particular hosting customer, but one of the owners of that company has been spamming under other corporate names." But generally the SBL listings that would explain that background have been deleted already. So why is Verizon's part of the listing still there? And why should Verizon assume the information to be valid enough to legally stick out its neck by booting a customer? Especially when there appears to be little attempt to keep old information accurate.

I checked the IP's that were recent origins of spam against the Spamcop blocklist, since that only lists IPs that mail to spamtraps or which generate at least 10 complaints in 24 hours, and it automatically deletes listings after a period of time if there are no further spams. None of the IP's are currently on that list, if they ever were.

Since it is the oldest listings that would indicate the most recalcitrant hosting service, I reversed the order of the 24 listings to have the oldest ones first. (My comments in italics.)

Found 24 SBL listings for IPs under the responsibility of verizon.com

Listings in yellow are known spam gangs with ROKSO records

SBL20039
63.80.251.0/32 verizon.com
09-Oct-2004 10:09 GMT Kraft.com / altria.com - Gevalia Coffee spam corporate relay
This net block belongs to Phillip Morris Co., parent of Kraft, parent of Gevalia, the coffee company whose affiliates spam. Spamhaus wants Verizon to shut down the Kraftco website.

SBL37673
65.209.58.128/26 verizon.com
07-Feb-2006 17:01 GMT Jared Dingwerth / X-press Marketing
taraby.com et al.
net block last reassigned in July 2008, long after this listing; current owner is an optical company(?)

SBL38873
63.97.152.0/24 verizon.com
11-Mar-2006 08:09 GMT Vendaregroup
WS/BANDWIDTH OPTIONS/VENDARE MEDIA
still the same company, which is an ISP/colocation provider, not a marketer, so no way to document whether the customer that was spamming was cut off. But that customer has no current or even any archived SBL listing.

SBL42096
65.209.127.160/27 verizon.com
18-May-2006 00:53 GMT clickandtag.com, clickandoffer.com, etc.
All spams Spamhaus lists are for a single client, a newsletter for a home care agency. Mistyped email address that was never opted out?

SBL43025
70.18.91.96/28 verizon.com
06-Jun-2006 18:50 GMT Affinity Marketing Partners, LLC
This is a single entry from over two years ago with the claim that the person involved with this company has a history of involvement with spamming. It refers Verizon to three other SBL listings -- all of which have been removed.

SBL50028
63.118.175.193/32 verizon.com
13-Jan-2007 16:33 GMT Xperya Corporation / Stealth Mail Master
[Xperya] buytargetedemaillist.com / mailinglistmaster.com
This listing has had no updates in nearly two years. At least the spammer still has ROKSO information listed. But the domains they list are suspended and parked by their registrars, so it's hard to say if Verizon still has any involvement here.

SBL54087
63.81.154.248/31 verizon.com
01-May-2007 03:01 GMT Yambo Financials
Yambo botnet nameservers/webhosts (compromised systems)
Come on, people. If "Yambo" had a hijacked Verizon computer since May 2007, I would know it. I was tracking the IPs they were using and sending any SIRT reports for one to all the others, too. I started SIRT in September 2007, and I never got one for Verizon. The particular domain they're complaining about, boxdirect.hk, briefly was located at a Verizon IP among the many it flitted about among, and it was suspended with all the other .hk domains not long after that listing. How depressing that we shut down all those .hk domains and Spamhaus never even noticed.

SBL55832
216.94.146.38/32 verizon.com
21-Jun-2007 06:29 GMT Uncaged Marketing
once again routing Global Acces Inc. (porn spammer)
Can't tell if this is active, as the SBL listing they cite as evidence no longer exists.

SBL64037
63.87.106.173/32 verizon.com
27-Mar-2008 22:33 GMT cl.gevalia.com
This one is real. Verizon does host gevalia.com, though cl.gevalia.com seems not to exist.

SBL65545
204.92.137.124/32 verizon.com
27-Jun-2008 10:16 GMT Opt-Out Spam to unverified or e-pended lists
One spam listed, sent on behalf of Business Week magazine.

SBL65546
65.242.240.115/32 verizon.com
27-Jun-2008 10:18 GMT Opt-Out Spam to unverified or e-pended lists
Also one spam for Business Week.

SBL66066
204.92.25.0/24 verizon.com
19-Jul-2008 21:48 GMT maxxsupplements@mx155.listaward.com spamming
This is definitely spammy and the mx server still appears to be active with Verizon.

SBL68673
63.86.173.0/24 verizon.com
13-Oct-2008 21:30 GMT Richard Colbert - y2kisp.com
ROCKY MOUNTAIN WEB DEVELOPMENT
The domain americaint.com does sell software and mailing lists for bulk emailing; if you have to buy a list from somebody else you're a spammer in my book. It's not clear from the listing what Richard Colbert has to do with them, though. y2kisp.com has been suspended so long there's nothing in the whois to say what happened.

SBL68839
63.86.173.15/32 verizon.com
21-Oct-2008 05:05 GMT emailsondemand.com
same as above

SBL69459
63.86.173.14/32 verizon.com
13-Nov-2008 23:32 GMT Richard Colbert - y2kisp.com
americaint.com / america-int.com spamming services
same as above

SBL69460
63.77.8.0/23 verizon.com
13-Nov-2008 23:33 GMT Spammer hosting (escalation)
same as above

SBL69631
204.177.92.101/32 verizon.com
18-Nov-2008 18:15 GMT Malware dropper site (dialers)
One of the two files they list is definitely malware; the other has been replaced by a file called "404.exe" that most AV programs don't detect as malware.

SBL69841
65.209.127.181/32 verizon.com
25-Nov-2008 01:37 GMT ztbroadcaster.com / mailworkz.com / security-nacs.com
A spam email offering $30 to complete a opinion survey for "decision makers" in the field of security.

SBL69843
141.158.21.68/32 verizon.com
25-Nov-2008 01:39 GMT ztbroadcaster.com / mailworkz.com / security-nacs.com
Spamhaus created a second listing based on the SAME single spam email as above, since there were two different IP addresses on Verizon associated with this company (neither of which is the originating IP of the email nor the IP hosting the spamvertised link -- only a couple mailservers that aren't mentioned in the spam anywhere.)

SBL69885
63.111.118.0/23 verizon.com
26-Nov-2008 04:15 GMT SPEEDTECH INC.
very spammy email sent from a Verizon IP which is not currently on the Spamcop blocklist

SBL70137
72.90.223.162/32 verizon.com
05-Dec-2008 21:13 GMT fake postcard spam source
spam originated from Verizon IP, IP not on current Spamcop blocklist.

SBL70266
63.111.118.0/24 verizon.com
10-Dec-2008 08:36 GMT Spamming to harvested non COI addresses
Spam on behalf of a charity I've never heard of that claims to help veterans, mailed from a Verizon IP address. Address not on Spamcop's current blocklist.

SBL70584
205.150.148.165/32 verizon.com
19-Dec-2008 22:50 GMT www.ontarioplace.com
Spam received on behalf of Ontario Place amusement park; it was mailed from Ontario Place's IP range on Rogers Cable, but their website is hosted on a Verizon IP. I'm not sure how they chose the person who proofread their copy, as I thought it was not difficult to find people in Ontario who speak Engish:

Subject: Happy Holidays from Ontario Place
Please take a second to open this our designed worked very hard, it will make his day .
http://www.ontarioplace.com/html_email/holiday/

(I did look at it, and I can just picture the gleeful look on the "designed's" face after having done it all by himself.)

SBL70689
204.92.148.152/29 verizon.com
23-Dec-2008 14:38 GMT Spam Source ( xactpromos.com )
Spam sponsor is the U.S. Navy. Originating IP not on current Spamcop blocklist.

It just seems like they've got a grudge against Verizon (granted, Gevalia can elicit those types of emotions among antis) and they're determined to keep them in the top ten list; meanwhile they have zero credibility with Verizon and their legitimate LART's are being ignored.

[meep]

None of the IP's are currently on that list, if they ever were.

Some of those listings are spamvertizing domains and or nameservers, so you are right, many of those IPs would have not been in blacklists, not even the URIBL if it is an associated spammer nameserver. Yes, Spamhaus lists SBLs for associated nameservers.

So, AC, you have highlighted some more obvious flaws in the Spamhaus' SBL service.

I have to agree to that.

[AlphaCentauri]

Some of those listings are spamvertizing domains and or nameservers, so you are right, many of those IPs would have not been in blacklists, not even the URIBL if it is an associated spammer nameserver. Yes, Spamhaus lists SBLs for associated nameservers.

Actually, the ones I tried against Spamcop's database were only the ones where Spamhaus was listing them because they were the origin of spam. But if they were chronic spam-spewing computers, I would expect a Spamcop history -- the more often an IP is listed, the longer it stays on the blocklist each time. There's not much point to Spamhaus generating SBL listings for hijacked home computers on dynamic IP's. And IMHO, there's not much point to a top ten list that primarily considers spam from legal email marketers and ignores the dynamic IP bots on each ISP's network.

[AlphaCentauri]

Just for comparison purposes, here is the page with spamcop's current list of 200 most reported ISP's:
http://www.spamcop.net/w3m?action=hoshame

To look up an individual IP address to see if it is active, the form is here:
http://www.spamcop.net/bl.shtml?

[meep]

Thx for those links, AC about Spamcop.

The Google story being #4 on SBL and now #3 is also on the Google Docs thread.

so I will post the top 10 here as well.

The 10 Worst Spam Service ISPs As at 06 January 2009
Rank Network Number of Current
Known Spam Issues
1
sistemnet.com.tr 40
2
hostfresh.com 34
3
google.com 31
4
vsnlinternational.com 30
5
gilat.net 29
6
cnuninet.com 28
7
uatelecom.co.ua 26
8
sprint.net 25
9
verizon.com 25
10
simplenet.com 25

[meep]

AC noted in another thread that Verizon cleaned up its network and now has 0 listings and that is a good thing.
Interesting to note the change in just a few weeks time.

As I post this: Yahoo and AT&T would be close to making the top 10 with 23 and 20 SBLs respectively:

http://www.spamhaus.org/sbl/listings.la ... =yahoo.com
http://www.spamhaus.org/sbl/listings.lasso?isp=att.net

SBL71577
67.113.92.22/32 att.net
17-Jan-2009 12:53 GMT Ebay Phishing spam origin

SBL71573
204.127.203.1/32 att.net
17-Jan-2009 12:45 GMT Advance Fee (Lottery) Fraud

SBL71456
74.254.62.220/32 att.net
14-Jan-2009 17:14 GMT Paypal Phish (origin)

SBL70787
12.144.217.136/29 att.net
26-Dec-2008 18:54 GMT Suavemente/SplitInfinity/Innova Direct
Suavemente range

SBL70769
12.20.124.55/32 att.net
26-Dec-2008 15:02 GMT Spam Source (dealus.cn)

SBL70629
204.127.203.255/32 att.net
21-Dec-2008 13:04 GMT Spam Source

SBL70193
204.127.203.0/32 att.net
08-Dec-2008 01:18 GMT Advance Fee Fraud

SBL69931
12.193.250.18/32 att.net
28-Nov-2008 08:54 GMT hijacked server distributing mailtosanta.eu spam

SBL69267
12.41.76.0/32 att.net
07-Nov-2008 01:43 GMT snowshoe spam network - silverstartelecom.com

SBL69155
12.228.8.0/25 att.net
04-Nov-2008 05:09 GMT Peter Greenwood
flconnect1.com

SBL68969
12.70.97.0/24 att.net
25-Oct-2008 20:46 GMT snowshoe spam network - silverstartelecom.com

SBL68885
12.198.168.0/22 att.net
22-Oct-2008 20:37 GMT snowshoe spam network - silverstartelecom.com

SBL68161
165.87.201.0/32 att.net
22-Sep-2008 10:27 GMT Spam haven DNS

SBL67734
12.190.96.0/21 att.net
06-Sep-2008 07:32 GMT Coast Consulting

SBL67733
12.172.228.0/22 att.net
06-Sep-2008 07:32 GMT Coast Consulting

SBL66244
12.154.55.205/32 att.net
22-Jul-2008 23:26 GMT pws.prserv.net - spammer landing page

SBL44050
71.156.118.0/23 att.net
04-Jul-2006 16:08 GMT Charles Earle IV - World Mail Direct
performancemortgageassociates.com /Ken Baxter/Zubair Rafique

SBL44049
71.156.67.0/24 att.net
04-Jul-2006 16:07 GMT Charles Earle IV - World Mail Direct
performancemortgageassociates.com /Ken Baxter/Zubair Rafique

SBL37617
12.107.182.0/23 att.net
06-Feb-2006 06:30 GMT Adprofile.net / Adteractive

SBL37094
70.239.250.0/23 att.net
20-Jan-2006 07:06 GMT Charles Earle IV - World Mail Direct
Spammer partners: Ashique Iqbal / Zubair Rafique

Here are the top 10s of Spamhaus as of 1/19/09

http://www.spamhaus.org/statistics/networks.lasso

The 10 Worst Spam Service ISPs As at 19 January 2009
Rank Network Number of Current
Known Spam Issues
1
sistemnet.com.tr 45
2
hostfresh.com 35
3
cnuninet.com 30
4
vsnlinternational.com 30
5
gilat.net 29
6
uatelecom.co.ua 26
7
simplenet.com 25
8
gnax.net 25
9
telefonica.com.br 25
10
sprint.net 24

ROKSO list:

The 10 Worst ROKSO Spammers As at
19 January 2009
Rank Photo Spammer or Spam Gang Country
1
Canadian Pharmacy
A long time running pharmacy spam operation. Uses botnet spam techniques to send tens-of-millions of spams per day. Probably uses many affiliates all over the world to spam but is probably based in Eastern Europe and hosts sites on botnets and on Chines United States
2
Leo Kuvayev / BadCow
Russian/American spammer. Does "OEM CD" pirated software spam, copy-cat pharmaceuticals, porn spam, porn payment collection, etc. Spams using virus-created botnets and seems to be involved in virus distribution. Partnered with Vlad - aka "Mr. Green" Russian Federation
3
HerbalKing
Massive affilitiate spam program for snakeoil Body Part Enhancement scams. Also does replica luxury goods, pharma and porn. Spams via botnets, bulletproof hosting offshore and even sometimes uses fast flux hosting. India
4
Vincent Chan / yoric.net
Vincent Chan and his Chinese partners have been sending spam for years. They mainly do pharmacy, and are able to send out huge amounts daily. The use a vast amount of compromised machines, for sending, hosting and proxy hijacking. Hong Kong
5
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov
So many Alex & Alexey spamming! Alex Blood tied to Pilot Holding & bbasafehosting.com long ago, then Alex Polyakov posted he owned them. Massive botnet and child-porn spam ring, also pharma, mortgage, and more. May work with Kuvayev and Yambo. Ukraine
6
Nikhil Kumar Pragji / Dark-Mailer
Through the Dark-Mailer Windows based proxy-botnet based spamware, this spammer is responsible for and behind a large portion of the world's illegally send spam. Australia
Queensland
7
Peter Severa / Peter Levashov
A spamming partner of Alan Ralsky and other spam gangs. Russian Federation
8
Yambo Financials
Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank." Ukraine
9
Ruslan Ibragimov / send-safe.com
Stealth spamware creator. One of the larger criminal spamming operations around. Runs a CGI mailer on machines in Russia and uses hijacked open proxies and virus infected PCs to flood the world with spam. Russian Federation
10
Anton Gorodov / Gorodetsk - srx / s-rx
Major pharma & cigarettes spammer. Used banner ads at Levon Gillespie's Spamforum.biz to get other spammers to spam for him. Hosts sites mainly in China.

Worst Countries

he 10 Worst Spam Origin Countries As at 19 January 2009
Rank Country Number of Current
Known Spam Issues
1
United States 1503
2
China 450
3
Russian Federation 294
4
United Kingdom 207
5
South Korea 203
6
Germany 152
7
Japan 149
8
Brazil 149
9
France 137
10
India 131

[meep]

http://www.spamhaus.org/statistics/networks.lasso
The 10 Worst Spam Service ISPs As at 08 February 2009
Rank Network Number of Current
Known Spam Issues
1
sistemnet.com.tr 48
2
hostfresh.com 37
3
cnuninet.com 32
4
vsnlinternational.com 30
5
gilat.net 27
6
uatelecom.co.ua 26
7
ovh.net 25
8
tbroad.com 24
9
chinanet-js 24
10
edu.tw 24

http://www.spamhaus.org/statistics/countries.lasso

The 10 Worst Spam Origin Countries As at 08 February 2009
Rank Country Number of Current
Known Spam Issues
1
United States 1459
2
China 469
3
Russian Federation 299
4
United Kingdom 219
5
South Korea 199
6
Japan 151
7
Brazil 147
8
Germany 144
9
France 126
10
India 124

[meep]

The 10 Worst Spam Service ISPs As at 23 February 2009
Rank Network Number of Current
Known Spam Issues
1
sistemnet.com.tr 51
2
hostfresh.com 34
3
cnuninet.com 32
4
vsnlinternational.com 31
5
yahoo.com 31
6
ovh.net 28
7
gilat.net 27
8
uatelecom.co.ua 26
9
tbroad.com 25
10
citelecom.ci 25

The 10 Worst Spam Origin Countries As at 23 February 2009
Rank Country Number of Current
Known Spam Issues
1
United States 1473
2
China 453
3
Russian Federation 309
4
United Kingdom 222
5
South Korea 215
6
Japan 150
7
Germany 149
8
Brazil 144
9
India 143
10
Turkey 126

[meep]

Code: Select all

The 10 Worst Spam Service ISPs     As at 21 July 2009
Rank    Network    Number of Current
Known Spam Issues    
1   tiscali.net    49    
2   covad.com    42    
3   ttnet.net.tr    38    
4   tatacommunications.com    38    
5   ovh.net    29    
6   china-netcom.com    27    
7   iplan.com.ar    26    
8   telefonica.com.br    26    
9   powercomm.com    26    
10   verizon.com    25

The good news to report here is Indian-owned Tata Communications (formerly VSNL) has been working on its SBLs very recently. About a month ago, they were #1. I am glad someone there apparently now has a clue and its tackling its spam problem. Tata is now #4 on the Top 10 Networks at Spamhaus.

If you reference the IBR blog from mid-June, you will see more Tata as the #1 "worst network" on Spamhaus.


I captured the Last 25 Resolved issues for 7/21/09 and look at how many Tata Communications' SBLs had removed by Spamhaus' volunteers (8 SBLs).

Code: Select all

Removed    219.64.182.0/23     tatacommunications.com       Issue Resolved
21-Jul-2009 21:12 GMT    dialup.vsnl.net.in spam source range    SBL52914

Removed    219.64.178.0/24     tatacommunications.com       Issue Resolved
21-Jul-2009 21:10 GMT    dialup.vsnl.net.in spam source range    SBL52956

Removed    63.243.150.128/25     tatacommunications.com       Issue Resolved
21-Jul-2009 19:41 GMT    Web World Builder / emgmtgroupinc.com    SBL29481

Removed    64.86.12.128/26     tatacommunications.com       Issue Resolved
21-Jul-2009 19:39 GMT    Scott Hirsch - edirect / naviant
Emarketmakers    SBL30419

Removed    63.243.150.128/26     tatacommunications.com       Issue Resolved
21-Jul-2009 19:37 GMT    eManagementGroup    SBL30616

Removed    63.243.161.128/25     tatacommunications.com       Issue Resolved
21-Jul-2009 19:28 GMT    Online Professionals/ DIFFERENTVIEWPOINT.NET-elistmaster.net    SBL32010

Removed    209.58.53.146/32     tatacommunications.com       Issue Resolved
21-Jul-2009 19:26 GMT    routing bogon 66.55.160.0/19 network    SBL73522

Removed    209.58.53.130/32     tatacommunications.com       Issue Resolved
21-Jul-2009 19:12 GMT    pointer: routing 66.55.160.0/19 (bogon spam network)    SBL74126