Request Spamhaus contact

Tue Jan 18 00:30:04 UTC 2011

So the fact that you host the spamvertized pill and other spam sites makes it OK because the spamming email came from residential machines that were coopted?  

That's weird logic but maybe that's why your abuse never responded to us nor shuts them down.

Tom

On Jan 17, 2011, at 7:14 PM, Jeffrey Lyon wrote:

> Raymond,
> 
> Spam does not make me nervous, it's a practical matter that we will
> address in due course. The null routes we have set are pretty recent
> so you may have received some spam prior to that time but I absolutely
> guarantee you that it did not come from our network, otherwise we
> would have detected it and stopped it on the spot.
> 
> Thanks, Jeff
> 
> 
> On Mon, Jan 17, 2011 at 7:12 PM, Raymond Dijkxhoorn
> <raymond at prolocation.net> wrote:
>> Hi!
>> 
>>> That is not in our IP space. These are the only SBL's we have outstanding:
>>> 
>>> SBL101835
>>> 208.64.127.64/27        blacklotus.net
>>> 17-Jan-2011 14:44 GMT
>>> Drug spam domain hosting
>>> 
>>> 
>>> SBL101662
>>> 208.64.123.176/28       blacklotus.net
>>> 14-Jan-2011 10:31 GMT
>>> Drug spam domain hosting
>> 
>>>> 208.64.120.186 canadian-rx-store.org
>>>> 
>>>> I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
>>>> request for http://canadian-rx-store.org/ and the server responded as
>>>> I would expect a server configured with that name to respond.
>>>> 
>>>> canadian-rx-store .org? Really?
>> 
>> So they need, and will add more.
>> 
>> NetRange:       208.64.120.0 - 208.64.127.255
>> CIDR:           208.64.120.0/21
>> OriginAS:       AS32421
>> NetName:        NET-208-64-120-0-1
>> NetHandle:      NET-208-64-120-0-1
>> Parent:         NET-208-0-0-0-0
>> NetType:        Direct Allocation
>> NameServer:     NS1.ENTERPRISE.BLACKLOTUS.NET
>> NameServer:     NS2.ENTERPRISE.BLACKLOTUS.NET
>> RegDate:        2005-12-22
>> Updated:        2009-11-11
>> Ref:            http://whois.arin.net/rest/net/NET-208-64-120-0-1
>> 
>> OrgName:        Black Lotus Communications
>> OrgId:          BLC-92
>> Address:        3419 Virginia Beach Blvd. #D5
>> 
>> Thats not your IP space? Really? How come.
>> 
>> apothekeosterreich .at -> 208.64.120.197
>> vertrouwdeapotheek .nl -> 208.64.120.197
>> 
>> viagra-shopping .com -> 208.64.127.78
>> medicin-24 .com -> 208.64.127.78
>> 
>> apothekeohnerezept .at -> 208.64.127.66
>> 
>> www.medicin-24 .com -> 208.64.127.78
>> www.viagra-shopping .com -> 208.64.127.78
>> 
>> This is just like 3 minutes digging in todays spamfolders.
>> 
>> Instead of typing here, i would be rather nervous and placing null routes
>> wherever i could.
>> 
>> Bye,
>> Raymond.
>> 
>> 
>> 
> 
> 
> 
> -- 
> Jeffrey Lyon, Leadership Team
> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
> Black Lotus Communications - AS32421
> First and Leading in DDoS Protection Solutions
> 