Request Spamhaus contact

Tue Jan 18 00:42:22 UTC 2011

I fat fingered the netmask, try now.

Thanks, Jeff

On Mon, Jan 17, 2011 at 7:39 PM, Raymond Dijkxhoorn
<raymond at prolocation.net> wrote:
> Hi!
>
>> We've acted on every report that we're aware of and instead you want
>> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
>> redirects to IP space we already null routed. It's the same customer.
>
> Either you place strange nullroutes or you did not at all.
>
> [root at mi10 tmp]# wget -S www.vertrouwdeapotheek.nl
> --01:37:29--  http://www.vertrouwdeapotheek.nl/
>           => `index.html'
> Resolving www.vertrouwdeapotheek.nl... done.
> Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> HTTP request sent, awaiting response...
>  1 HTTP/1.1 301 Moved Permanently
>  2 Cache-Control: private
>  3 Content-Length: 0
>  4 Location: http://www.vertrouwdeapotheek.nl/Home.aspx
>  5 Server: Microsoft-IIS/7.0
>  6 X-AspNet-Version: 4.0.30319
>  7 X-Powered-By: ASP.NET
>  8 Date: Tue, 18 Jan 2011 00:37:04 GMT
>  9 Connection: close
> Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
> --01:37:29--  http://www.vertrouwdeapotheek.nl/Home.aspx
>           => `Home.aspx'
> Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> HTTP request sent, awaiting response...
>
> Does this look as its nullrouted?
>
>> P.S. Someone at Spamhaus PLEASE remove the /21 listing?
>
> I highly doubt. There is much more to clean on your network before i hope
> they would even reconsider.
>
> Bye,
> Raymond.
>

-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions