nanog mailing list archives

Re: Request Spamhaus contact


From: Jeffrey Lyon <jeffrey.lyon () blacklotus net>
Date: Mon, 17 Jan 2011 18:49:47 -0500

1) The sites were already null routed. The problem is with Spamhaus'
inability to contact me prior to impacting other legitimate customers.
2) The presumed cleanness of a customer really isn't any of mine or
your business, as long as they're not spamming or engaged in any other
type of abuse they're free to host web content like anyone else.

Jeff

On Mon, Jan 17, 2011 at 6:46 PM, Raymond Dijkxhoorn
<raymond () prolocation net> wrote:
Hi!

That's fine, but the listings don't even make sense. There is no
evidence in the listing and i'm still trying to figure out a) why they
think that these new listings have anything to do with the ones we
already cleaned and b) which customers actually need to be removed and
for specifically what reasons. Their entire mentality is "the site is
pharmacy which means its part of a criminal spammer gang," regardless
of whether or not that is true.

Please stop pretending that you're not hosting e-trash.  208.64.122.114
is still hosting an active SEO poisoning site (myspace-codes.com).  I
think, frankly, it would make your life a lot simpler if you just
accepted the fact that BlackLotus sells to e-trash, just like the rest
of the "ddos-protected hosting solutions" companies do.

viagra-shopping .com
potenzmittel-at .com
medicin-24 .com
apothekeohnerezept .at

[root@noc log]# whois 208.64.122.234
[Querying whois.arin.net]
[Redirected to rwhois.blacklotus.net:4321]
[Querying rwhois.blacklotus.net]
[rwhois.blacklotus.net]
%rwhois V-1.0,V-1.5:00090h:00 support.blacklotus.net (Ubersmith RWhois
Server V-1.8.0)
autharea=208.64.120.0/21
xautharea=208.64.120.0/21
network:Class-Name:network
network:Auth-Area:208.64.120.0/21
network:ID:NET-481.208.64.122.232/30
network:Network-Name:Nameserver IP Addresses
network:IP-Network:208.64.122.232/30
network:IP-Network-Block:208.64.122.232 - 208.64.122.235
network:Org-Name:Aloli LTD
network:Street-Address:3321 Road Town, Drake Chambers
network:City:Tortola
network:State:-
network:Postal-Code:3321
network:Country-Code:
network:Tech-Contact:MAINT-481.208.64.122.232/30
network:Created:20101015124139000
network:Updated:20101015124139000
network:Updated-By:support () blacklotus net
network:POC-Name:Network Operations Center
network:POC-Email:support () blacklotus net
network:POC-Phone:(323) 657-5944
network:Tech-Name:Network Operations Center
network:Tech-Email:support () blacklotus net
network:Tech-Phone:(323) 657-5944

This thread doesnt belong here. But hey, seems they are asking for it.
Oh and yes all these botnet landing pages are still up...

If i look back at November 2010 archives there is a whole bunch and its
adding new domains daily.

brandviagra23 .com
brandviagra27 .com
brandcialis26 .com
brandviagra25 .com
...

Neh, clean as it can be cough ...

Bye,
Raymond.





-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon () blacklotus net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions


Current thread: