Re: [anti-spam-wg] IronServer.com BulletProof Hosting bulk email servers software

[furio ercolessi furio+as@localhost]

On Mon, Jun 12, 2006 at 11:29:44PM +0200, Claes T wrote:
> 
> www.ironserver.com (195.95.161.2)
> http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42935
> [ROKSO] "Spammer William Stanley now connected via Romania"
> rdsnet.ro - hello!

This is a rogue network, announced by a rogue AS  (sad to see
precious AS numbers used in this way!)

aut-num:        AS41031
as-name:        STANLEY1
descr:          William Stanley
import:         from AS8540 action pref=100; accept ANY
import:         from AS39912 action pref=100; accept ANY
export:         to AS8540 announce AS41031
export:         to AS39912 announce AS41031

(announcing only 195.95.161.0/24 , ASSIGNED PI)

In spite of what claimed on the aut-num object, this network is
routed exclusively via AS8708 (Romania Data Systems).

furio (not RIPE)