Request Spamhaus contact

Jeffrey Lyon jeffrey.lyon at blacklotus.net
Mon Jan 17 18:58:01 CST 2011


TR,

Again, it's been null routed. Customer has been served with notice.
Unless you guys can help find some more related IP space I think the
issue has been solved.

Thanks, Jeff


On Mon, Jan 17, 2011 at 7:57 PM, TR Shaw <tshaw at oitc.com> wrote:
> Actually, it does not:
>
> $ host apothekeosterreich.at
> apothekeosterreich.at has address 208.64.120.197
> apothekeosterreich.at mail is handled by 10 mail.apothekeosterreich.at.
> $ curl -I -L apothekeosterreich.at
> HTTP/1.1 301 Moved Permanently
> Cache-Control: private
> Content-Length: 0
> Location: http://www.apothekeosterreich.at/Home.aspx
> Server: Microsoft-IIS/7.0
> X-AspNet-Version: 4.0.30319
> X-Powered-By: ASP.NET
> Date: Tue, 18 Jan 2011 00:54:59 GMT
> Connection: close
>
> HTTP/1.1 200 OK
> Cache-Control: private
> Content-Length: 126574
> Content-Type: text/html; charset=utf-8
> Server: Microsoft-IIS/7.0
> X-AspNet-Version: 4.0.30319
> WL-Version: 2475.0
> Set-Cookie: ASP.NET_SessionId=a3brplvgwfsdk3pd1g1zgdtj; path=/; HttpOnly
> X-Powered-By: ASP.NET
> Date: Tue, 18 Jan 2011 00:55:00 GMT
> Connection: close
>
> On Jan 17, 2011, at 7:33 PM, Jeffrey Lyon wrote:
>
>> Raymond,
>>
>> We've acted on every report that we're aware of and instead you want
>> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
>> redirects to IP space we already null routed. It's the same customer.
>>
>> Just to calm your nerves we'll also null route that space (208.64.120.176/28)
>>
>> Thanks, Jeff
>>
>> P.S. Someone at Spamhaus PLEASE remove the /21 listing?
>>
>>
>>
>> On Mon, Jan 17, 2011 at 7:25 PM, Raymond Dijkxhoorn
>> <raymond at prolocation.net> wrote:
>>> Hi!
>>>
>>>> Spam does not make me nervous, it's a practical matter that we will
>>>> address in due course. The null routes we have set are pretty recent
>>>> so you may have received some spam prior to that time but I absolutely
>>>> guarantee you that it did not come from our network, otherwise we
>>>> would have detected it and stopped it on the spot.
>>>
>>>>> Thats not your IP space? Really? How come.
>>>>>
>>>>> apothekeosterreich .at -> 208.64.120.197
>>>>> vertrouwdeapotheek .nl -> 208.64.120.197
>>>>>
>>>>> viagra-shopping .com -> 208.64.127.78
>>>>> medicin-24 .com -> 208.64.127.78
>>>>>
>>>>> apothekeohnerezept .at -> 208.64.127.66
>>>>>
>>>>> www.medicin-24 .com -> 208.64.127.78
>>>>> www.viagra-shopping .com -> 208.64.127.78
>>>>>
>>>>> This is just like 3 minutes digging in todays spamfolders.
>>>
>>> www.apothekeosterreich .at is still up at the mentioned ip. Instead of
>>> telling you are soooo good on terminating stuff. Can you walk over the list
>>> and act?
>>>
>>> I have sended in many requests for termination. You or your network dont
>>> respond to this at all.
>>>
>>> Its a waste of time even telling it seems.
>>>
>>> I will stop posting here, spam-l is a much better place for this. But please
>>> dont act like you dont know anything whats going on. You have been warned.
>>> You have gotten many many reports. But we dont see stuff changing.
>>>
>>> Good luck with your listing at SpamHaus.
>>>
>>> Bye,
>>> Raymond.
>>>
>>
>>
>>
>> --
>> Jeffrey Lyon, Leadership Team
>> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
>> Black Lotus Communications - AS32421
>> First and Leading in DDoS Protection Solutions
>>
>
>



-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions




More information about the NANOG mailing list