Request Spamhaus contact

Tue Jan 18 00:57:03 UTC 2011

Actually, it does not:

$ host apothekeosterreich.at
apothekeosterreich.at has address 208.64.120.197
apothekeosterreich.at mail is handled by 10 mail.apothekeosterreich.at.
$ curl -I -L apothekeosterreich.at
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 0
Location: http://www.apothekeosterreich.at/Home.aspx
Server: Microsoft-IIS/7.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 18 Jan 2011 00:54:59 GMT
Connection: close

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 126574
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 4.0.30319
WL-Version: 2475.0
Set-Cookie: ASP.NET_SessionId=a3brplvgwfsdk3pd1g1zgdtj; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Tue, 18 Jan 2011 00:55:00 GMT
Connection: close

On Jan 17, 2011, at 7:33 PM, Jeffrey Lyon wrote:

> Raymond,
> 
> We've acted on every report that we're aware of and instead you want
> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
> redirects to IP space we already null routed. It's the same customer.
> 
> Just to calm your nerves we'll also null route that space (208.64.120.176/28)
> 
> Thanks, Jeff
> 
> P.S. Someone at Spamhaus PLEASE remove the /21 listing?
> 
> 
> 
> On Mon, Jan 17, 2011 at 7:25 PM, Raymond Dijkxhoorn
> <raymond at prolocation.net> wrote:
>> Hi!
>> 
>>> Spam does not make me nervous, it's a practical matter that we will
>>> address in due course. The null routes we have set are pretty recent
>>> so you may have received some spam prior to that time but I absolutely
>>> guarantee you that it did not come from our network, otherwise we
>>> would have detected it and stopped it on the spot.
>> 
>>>> Thats not your IP space? Really? How come.
>>>> 
>>>> apothekeosterreich .at -> 208.64.120.197
>>>> vertrouwdeapotheek .nl -> 208.64.120.197
>>>> 
>>>> viagra-shopping .com -> 208.64.127.78
>>>> medicin-24 .com -> 208.64.127.78
>>>> 
>>>> apothekeohnerezept .at -> 208.64.127.66
>>>> 
>>>> www.medicin-24 .com -> 208.64.127.78
>>>> www.viagra-shopping .com -> 208.64.127.78
>>>> 
>>>> This is just like 3 minutes digging in todays spamfolders.
>> 
>> www.apothekeosterreich .at is still up at the mentioned ip. Instead of
>> telling you are soooo good on terminating stuff. Can you walk over the list
>> and act?
>> 
>> I have sended in many requests for termination. You or your network dont
>> respond to this at all.
>> 
>> Its a waste of time even telling it seems.
>> 
>> I will stop posting here, spam-l is a much better place for this. But please
>> dont act like you dont know anything whats going on. You have been warned.
>> You have gotten many many reports. But we dont see stuff changing.
>> 
>> Good luck with your listing at SpamHaus.
>> 
>> Bye,
>> Raymond.
>> 
> 
> 
> 
> -- 
> Jeffrey Lyon, Leadership Team
> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
> Black Lotus Communications - AS32421
> First and Leading in DDoS Protection Solutions
> 