Toot

Written by The Spamhaus Project on 2025-02-06 at 15:24

Good news (at first glance): Silent Connection Ltd and Dolphin 1337 Limited, two UK-based corporations flagged by Spamhaus as being used for bulletproof hosting, were compulsory dissolved on January 28th and January 14th, respectively. 🙌

Unfortunately, their networks (AS215240 and AS215208) remain active...

Silent Connection quickly secured fresh IP blocks on January 26th through ZeXoTeK IT-Services (whose website, zexotek.de, oddly redirects to Google 🤔). Similarly, Dolphin 1337 Limited acquired new IP space on February 4th.

Even after both companies' were dissolved, these IPs are still operational - effectively making them digital no man’s land.

Luckily, Spamhaus DROP users are protected by the following listings:

⬇️ DROP 176.65.134.0/24 -> https://check.spamhaus.org/results?query=SBL673819

⬇️ DROP 176.65.139.0/24 -> https://check.spamhaus.org/results?query=SBL673820

⬇️ DROP 176.65.140.0/23 -> https://check.spamhaus.org/results?query=SBL673821

⬇️ DROP 176.65.142.0/24 -> https://check.spamhaus.org/results?query=SBL673822

⬇️ DROP 176.65.144.0/24 -> https://check.spamhaus.org/results?query=SBL673823

⬇️ DROP 176.65.143.0/24 -> https://check.spamhaus.org/results?query=SBL673922

This incident highlights why robust customer vetting is a necessity. Silent Connection's imminent dissolution was already visible on the UK company register as of November 5th - a clear red flag. 🚩

Spamhaus recommends always vetting new customers, and checking their commercial registry data before providing services. 🕵

Find a link to the DROP Lists in the comments 👇

[#]KYC #AbusePrevention #BulletproofHosting #DROP

=> More informations about this toot | View the thread | More toots from spamhaus@infosec.exchange

Toot

Written by The Spamhaus Project on 2025-02-06 at 15:24

Mentions

Tags