Request Spamhaus contact

Tue Jan 18 01:10:02 UTC 2011

On Jan 17, 2011, at 4:42 PM, Jeffrey Lyon wrote:

> I fat fingered the netmask, try now.

Mmm hmm.

  platter steve$ telnet 208.64.127.78 80
  Trying 208.64.127.78...
  Connected to 208.64.127.78.
  Escape character is '^]'.
  HEAD / HTTP/1.1
  Host: viagra-shopping.com

  HTTP/1.1 301 Moved Permanently
  Cache-Control: private
  Content-Length: 0
  Location: http://www.viagra-shopping.com/Home.aspx
  Server: Microsoft-IIS/7.0
  X-AspNet-Version: 4.0.30319
  X-Powered-By: ASP.NET
  Date: Tue, 18 Jan 2011 00:57:55 GMT
  Connection: close

If you've given spamhaus the same sort of response you're
showing here I'm not surprised they're not prioritizing dealing
with you.

Cheers,
  Steve

> 
> Thanks, Jeff
> 
> 
> On Mon, Jan 17, 2011 at 7:39 PM, Raymond Dijkxhoorn
> <raymond at prolocation.net> wrote:
>> Hi!
>> 
>>> We've acted on every report that we're aware of and instead you want
>>> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
>>> redirects to IP space we already null routed. It's the same customer.
>> 
>> Either you place strange nullroutes or you did not at all.
>> 
>> [root at mi10 tmp]# wget -S www.vertrouwdeapotheek.nl
>> --01:37:29--  http://www.vertrouwdeapotheek.nl/
>>           => `index.html'
>> Resolving www.vertrouwdeapotheek.nl... done.
>> Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
>> HTTP request sent, awaiting response...
>>  1 HTTP/1.1 301 Moved Permanently
>>  2 Cache-Control: private
>>  3 Content-Length: 0
>>  4 Location: http://www.vertrouwdeapotheek.nl/Home.aspx
>>  5 Server: Microsoft-IIS/7.0
>>  6 X-AspNet-Version: 4.0.30319
>>  7 X-Powered-By: ASP.NET
>>  8 Date: Tue, 18 Jan 2011 00:37:04 GMT
>>  9 Connection: close
>> Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
>> --01:37:29--  http://www.vertrouwdeapotheek.nl/Home.aspx
>>           => `Home.aspx'
>> Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
>> HTTP request sent, awaiting response...
>> 
>> Does this look as its nullrouted?
>> 
>>> P.S. Someone at Spamhaus PLEASE remove the /21 listing?
>> 
>> I highly doubt. There is much more to clean on your network before i hope
>> they would even reconsider.
>> 
>> Bye,
>> Raymond.
>> 
> 
> 
> 
> -- 
> Jeffrey Lyon, Leadership Team
> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
> Black Lotus Communications - AS32421
> First and Leading in DDoS Protection Solutions
> 