Longtime ROKSO spam operation Arendame («Mihail Fortis») is spamming from new IPs today.
Received: from 77-222-55-220.vps-ptr.clients.spaceweb.ru (77-222-55-220.vps-ptr.clients.spaceweb.ru [77.222.55.220])
Date: Mon, 17 Oct 2016 11:##:## +0300
From: «Maksude uudised» <reply@estdata.pw>
Subject: Sõiduauto, erisoodustused ja ev mitteseotud kulud nüüd poole hinnaga
<snip>
Hind sisaldab õppetööd, õppematerjale, lõunat, kohvipause!
Lisainfo ja osavõtuks registreerimine siit või 6556778, 5279999
<snip>
URI: http://www.uudised.top/?id=111
IPs OF CONCERN:
77.222.55.220
77.222.55.240
inetnum: 77.222.54.0 — 77.222.55.255
netname: SPACEWEB-20151019
descr: SpaceWeb VPS Spb
country: RU
geoloc: 60.101141 30.272566
org: ORG-SJ7-RIPE
admin-c: RN331-RIPE
tech-c: RN331-RIPE
status: ASSIGNED PA
mnt-by: RUNIC-MNT
created: 2015-10-19T12:01:41Z
last-modified: 2015-10-19T12:03:26Z
source: RIPE
organisation: ORG-SJ7-RIPE
org-name: SpaceWeb CJSC
org-type: OTHER
address: Russian Federation
address: 196084, Saint-Petersburg
address: Tsvetochnaya ul., 18, of.137
phone: +7 812 3341222
fax-no: +7 812 3341222
abuse-mailbox: abuse@sweb.ru
abuse-c: SWAH-RIPE
admin-c: RN331-RIPE
tech-c: RN331-RIPE
mnt-ref: SWEB-RIPE-MNT
mnt-ref: RUNIC-MNT
mnt-by: RUNIC-MNT
created: 2007-11-16T14:44:07Z
last-modified: 2015-04-21T11:51:41Z
source: RIPE # Filtered
role: RU-NIC NOC
address: JSC «RU-CENTER»
address: 123308, Moscow, Russian Federation
address: 3 Khoroshevskaya, 2-1
phone: +7 495 737 0601
abuse-mailbox: abuse@nic.ru
tech-c: EVB3-RIPE
admin-c: EVB3-RIPE
tech-c: AF7802-RIPE
tech-c: NIKS-RIPE
tech-c: SMS-RIPE
nic-hdl: RN331-RIPE
mnt-by: RUNIC-MNT
created: 2009-07-13T13:17:56Z
last-modified: 2015-04-07T17:03:44Z
source: RIPE # Filtered
% Information related to ‘77.222.54.0/23AS44112’
route: 77.222.54.0/23
descr: SpaceWeb VPS (Spb)
org: ORG-SJ7-RIPE
origin: AS44112
mnt-by: PETERHOST-MNT
created: 2015-10-19T12:13:34Z
last-modified: 2015-10-19T12:14:07Z
source: RIPE
organisation: ORG-SJ7-RIPE
org-name: SpaceWeb CJSC
org-type: OTHER
address: Russian Federation
address: 196084, Saint-Petersburg
address: Tsvetochnaya ul., 18, of.137
phone: +7 812 3341222
fax-no: +7 812 3341222
abuse-mailbox: abuse@sweb.ru
abuse-c: SWAH-RIPE
admin-c: RN331-RIPE
tech-c: RN331-RIPE
mnt-ref: SWEB-RIPE-MNT
mnt-ref: RUNIC-MNT
mnt-by: RUNIC-MNT
created: 2007-11-16T14:44:07Z
last-modified: 2015-04-21T11:51:41Z
source: RIPE # Filtered
$ host estdata.pw
estdata.pw has address 77.222.55.220
estdata.pw mail is handled by 5 mail.estdata.pw.
$ host mail.estdata.pw
mail.estdata.pw has address 77.222.55.220
$ host ns1.estdata.pw
ns1.estdata.pw has address 77.222.55.220
$ host ns2.estdata.pw
ns2.estdata.pw has address 77.222.55.220
Domain Name: ESTDATA.PW
Domain ID: D37132919-CNIC
WHOIS Server: whois.reg.ru
Referral URL: https://www.reg.ru/
Updated Date: 2016-10-09T19:17:16.0Z
Creation Date: 2016-10-04T19:12:44.0Z
Registry Expiry Date: 2017-10-04T23:59:59.0Z
Sponsoring Registrar: Registrar of Domain Names REG.RU, LLC
Sponsoring Registrar IANA ID: 1606
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Registrant ID: C85958674-CNIC
Registrant Name: Anatolii Peskov
Registrant Organization: Lindeks LTD
Registrant Street: Liikuri tänav 20-3
Registrant City: Tallinn
Registrant State/Province: Tallinn
Registrant Postal Code: 13618
Registrant Country: EE
Registrant Phone: +7.58395564
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: peskov@iname.com
Admin ID: C85958679-CNIC
Admin Name: Anatolii Peskov
Admin Organization: Lindeks LTD
Admin Street: Liikuri tänav 20-3
Admin City: Tallinn
Admin State/Province: Tallinn
Admin Postal Code: 13618
Admin Country: EE
Admin Phone: +7.4951234333
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: peskov@iname.com
Tech ID: C85958689-CNIC
Tech Name: Anatolii Peskov
Tech Organization: Lindeks LTD
Tech Street: Liikuri tänav 20-3
Tech City: Tallinn
Tech State/Province: Tallinn
Tech Postal Code: 13618
Tech Country: EE
Tech Phone: +7.4951234333
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: peskov@iname.com
Name Server: NS1.ESTDATA.PW
Name Server: NS2.ESTDATA.PW
DNSSEC: unsigned
Billing ID: C85958684-CNIC
Billing Name: Anatolii Peskov
Billing Organization: Lindeks LTD
Billing Street: Liikuri tänav 20-3
Billing City: Tallinn
Billing State/Province: Tallinn
Billing Postal Code: 13618
Billing Country: EE
Billing Phone: +7.4951234333
Billing Phone Ext:
Billing Fax:
Billing Fax Ext:
Billing Email: peskov@iname.com