Request Spamhaus contact

Tue Jan 18 00:30:56 UTC 2011

Actually, that was just a brain lapse. The domain didn't resolve at
all (misspelled?) and it returned the Cox default resolution.

Jeff

On Mon, Jan 17, 2011 at 7:30 PM, TR Shaw <tshaw at oitc.com> wrote:
> So the fact that you host the spamvertized pill and other spam sites makes it OK because the spamming email came from residential machines that were coopted?
>
> That's weird logic but maybe that's why your abuse never responded to us nor shuts them down.
>
> Tom
>
> On Jan 17, 2011, at 7:14 PM, Jeffrey Lyon wrote:
>
>> Raymond,
>>
>> Spam does not make me nervous, it's a practical matter that we will
>> address in due course. The null routes we have set are pretty recent
>> so you may have received some spam prior to that time but I absolutely
>> guarantee you that it did not come from our network, otherwise we
>> would have detected it and stopped it on the spot.
>>
>> Thanks, Jeff
>>
>>
>> On Mon, Jan 17, 2011 at 7:12 PM, Raymond Dijkxhoorn
>> <raymond at prolocation.net> wrote:
>>> Hi!
>>>
>>>> That is not in our IP space. These are the only SBL's we have outstanding:
>>>>
>>>> SBL101835
>>>> 208.64.127.64/27        blacklotus.net
>>>> 17-Jan-2011 14:44 GMT
>>>> Drug spam domain hosting
>>>>
>>>>
>>>> SBL101662
>>>> 208.64.123.176/28       blacklotus.net
>>>> 14-Jan-2011 10:31 GMT
>>>> Drug spam domain hosting
>>>
>>>>> 208.64.120.186 canadian-rx-store.org
>>>>>
>>>>> I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
>>>>> request for http://canadian-rx-store.org/ and the server responded as
>>>>> I would expect a server configured with that name to respond.
>>>>>
>>>>> canadian-rx-store .org? Really?
>>>
>>> So they need, and will add more.
>>>
>>> NetRange:       208.64.120.0 - 208.64.127.255
>>> CIDR:           208.64.120.0/21
>>> OriginAS:       AS32421
>>> NetName:        NET-208-64-120-0-1
>>> NetHandle:      NET-208-64-120-0-1
>>> Parent:         NET-208-0-0-0-0
>>> NetType:        Direct Allocation
>>> NameServer:     NS1.ENTERPRISE.BLACKLOTUS.NET
>>> NameServer:     NS2.ENTERPRISE.BLACKLOTUS.NET
>>> RegDate:        2005-12-22
>>> Updated:        2009-11-11
>>> Ref:            http://whois.arin.net/rest/net/NET-208-64-120-0-1
>>>
>>> OrgName:        Black Lotus Communications
>>> OrgId:          BLC-92
>>> Address:        3419 Virginia Beach Blvd. #D5
>>>
>>> Thats not your IP space? Really? How come.
>>>
>>> apothekeosterreich .at -> 208.64.120.197
>>> vertrouwdeapotheek .nl -> 208.64.120.197
>>>
>>> viagra-shopping .com -> 208.64.127.78
>>> medicin-24 .com -> 208.64.127.78
>>>
>>> apothekeohnerezept .at -> 208.64.127.66
>>>
>>> www.medicin-24 .com -> 208.64.127.78
>>> www.viagra-shopping .com -> 208.64.127.78
>>>
>>> This is just like 3 minutes digging in todays spamfolders.
>>>
>>> Instead of typing here, i would be rather nervous and placing null routes
>>> wherever i could.
>>>
>>> Bye,
>>> Raymond.
>>>
>>>
>>>
>>
>>
>>
>> --
>> Jeffrey Lyon, Leadership Team
>> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
>> Black Lotus Communications - AS32421
>> First and Leading in DDoS Protection Solutions
>>
>
>

-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions