Request Spamhaus contact

Jeffrey Lyon jeffrey.lyon at blacklotus.net
Tue Jan 18 00:14:54 UTC 2011


Raymond,

Spam does not make me nervous, it's a practical matter that we will
address in due course. The null routes we have set are pretty recent
so you may have received some spam prior to that time but I absolutely
guarantee you that it did not come from our network, otherwise we
would have detected it and stopped it on the spot.

Thanks, Jeff


On Mon, Jan 17, 2011 at 7:12 PM, Raymond Dijkxhoorn
<raymond at prolocation.net> wrote:
> Hi!
>
>> That is not in our IP space. These are the only SBL's we have outstanding:
>>
>> SBL101835
>> 208.64.127.64/27        blacklotus.net
>> 17-Jan-2011 14:44 GMT
>> Drug spam domain hosting
>>
>>
>> SBL101662
>> 208.64.123.176/28       blacklotus.net
>> 14-Jan-2011 10:31 GMT
>> Drug spam domain hosting
>
>>> 208.64.120.186 canadian-rx-store.org
>>>
>>> I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
>>> request for http://canadian-rx-store.org/ and the server responded as
>>> I would expect a server configured with that name to respond.
>>>
>>> canadian-rx-store .org? Really?
>
> So they need, and will add more.
>
> NetRange:       208.64.120.0 - 208.64.127.255
> CIDR:           208.64.120.0/21
> OriginAS:       AS32421
> NetName:        NET-208-64-120-0-1
> NetHandle:      NET-208-64-120-0-1
> Parent:         NET-208-0-0-0-0
> NetType:        Direct Allocation
> NameServer:     NS1.ENTERPRISE.BLACKLOTUS.NET
> NameServer:     NS2.ENTERPRISE.BLACKLOTUS.NET
> RegDate:        2005-12-22
> Updated:        2009-11-11
> Ref:            http://whois.arin.net/rest/net/NET-208-64-120-0-1
>
> OrgName:        Black Lotus Communications
> OrgId:          BLC-92
> Address:        3419 Virginia Beach Blvd. #D5
>
> Thats not your IP space? Really? How come.
>
> apothekeosterreich .at -> 208.64.120.197
> vertrouwdeapotheek .nl -> 208.64.120.197
>
> viagra-shopping .com -> 208.64.127.78
> medicin-24 .com -> 208.64.127.78
>
> apothekeohnerezept .at -> 208.64.127.66
>
> www.medicin-24 .com -> 208.64.127.78
> www.viagra-shopping .com -> 208.64.127.78
>
> This is just like 3 minutes digging in todays spamfolders.
>
> Instead of typing here, i would be rather nervous and placing null routes
> wherever i could.
>
> Bye,
> Raymond.
>
>
>



-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions




More information about the NANOG mailing list