Silent noise - about spam, trojans and other nasty stuff

Not Ecatel’s fault at all:

As you can see the ips which are listed are all blocked, the reason why some full blocks are blocked is because of one customer (you
can see the company name at 94.102.48.0/20) who is involved with RBN. We have broken *ALL* dealings with this company
immediately once we did know this.

That’s from the thread on webhostingtalk.
So they broke all dealings with this guy:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL68196 ?
From the listing:

Ref: SBL68196
94.102.48.0/20 is listed on the Spamhaus Block List (SBL)
02-Oct-2008 01:13 GMT | SR04
Dirty block - spammer/cybercrime hosting (escalation)
Looks like an entire block dedicated to hosting malware droppers, trojan codecs, etc.
http://cidr-report.org/cgi-bin/as-report?as=AS29073
Infinite Technologies / Ganesh Rao - infinitetech.in

Note the date: 02-Oct-2008. Apparently updated that date.
Originally listed 24-Sep-2008.
And Ecatels backpeddling is from today.
Note above, "once we did know this".
Two months. Slow learners or liars?

The last one is correct, they are liars.
It's a variation of the classical whack-a-mole.
"We'll let him stay until the pressure is too hard to take.
If it becomes too hot, we move him around".
Obviously cutting their lines was pressure enough.

It's all about money.
"Is the customer a criminal/spammer/child abuser? Whatever you say Spamhaus, we don't care, he pays."
"Oh, you're cutting our lines. Ok, we'll cut the customer."
You don't exactly have to be a genius to figure that out.
Sorry for pointing out the obvious.

But Ecatel seems to recover.
With the help of JointTransit