The Spamhaus Project<p>Good news (at first glance): Silent Connection Ltd and Dolphin 1337 Limited, two UK-based corporations flagged by Spamhaus as being used for bulletproof hosting, were compulsory dissolved on January 28th and January 14th, respectively. 🙌 </p><p>Unfortunately, their networks (AS215240 and AS215208) remain active... </p><p>Silent Connection quickly secured fresh IP blocks on January 26th through ZeXoTeK IT-Services (whose website, zexotek.de, oddly redirects to Google 🤔). Similarly, Dolphin 1337 Limited acquired new IP space on February 4th. </p><p>Even after both companies' were dissolved, these IPs are still operational - effectively making them digital no man’s land. </p><p>Luckily, Spamhaus DROP users are protected by the following listings:</p><p>⬇️ DROP 176.65.134.0/24 -> <a href="https://check.spamhaus.org/results?query=SBL673819" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673819</span></a></p><p>⬇️ DROP 176.65.139.0/24 -> <a href="https://check.spamhaus.org/results?query=SBL673820" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673820</span></a></p><p>⬇️ DROP 176.65.140.0/23 -> <a href="https://check.spamhaus.org/results?query=SBL673821" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673821</span></a></p><p>⬇️ DROP 176.65.142.0/24 -> <a href="https://check.spamhaus.org/results?query=SBL673822" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673822</span></a></p><p>⬇️ DROP 176.65.144.0/24 -> <a href="https://check.spamhaus.org/results?query=SBL673823" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673823</span></a></p><p>⬇️ DROP 176.65.143.0/24 -> <a href="https://check.spamhaus.org/results?query=SBL673922" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">check.spamhaus.org/results?que</span><span class="invisible">ry=SBL673922</span></a> </p><p>This incident highlights why robust customer vetting is a necessity. Silent Connection's imminent dissolution was already visible on the UK company register as of November 5th - a clear red flag. 🚩 </p><p>Spamhaus recommends always vetting new customers, and checking their commercial registry data before providing services. 🕵</p><p>Find a link to the DROP Lists in the comments 👇 </p><p><a href="https://infosec.exchange/tags/KYC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KYC</span></a> <a href="https://infosec.exchange/tags/AbusePrevention" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AbusePrevention</span></a> <a href="https://infosec.exchange/tags/BulletproofHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>BulletproofHosting</span></a> <a href="https://infosec.exchange/tags/DROP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DROP</span></a></p>