nanog mailing list archives

Re: Request Spamhaus contact


From: Raymond Dijkxhoorn <raymond () prolocation net>
Date: Tue, 18 Jan 2011 01:12:58 +0100 (CET)

Hi!

That is not in our IP space. These are the only SBL's we have outstanding:

SBL101835
208.64.127.64/27        blacklotus.net
17-Jan-2011 14:44 GMT
Drug spam domain hosting


SBL101662
208.64.123.176/28       blacklotus.net
14-Jan-2011 10:31 GMT
Drug spam domain hosting

208.64.120.186 canadian-rx-store.org

I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
request for http://canadian-rx-store.org/ and the server responded as
I would expect a server configured with that name to respond.

canadian-rx-store .org? Really?

So they need, and will add more.

NetRange:       208.64.120.0 - 208.64.127.255
CIDR:           208.64.120.0/21
OriginAS:       AS32421
NetName:        NET-208-64-120-0-1
NetHandle:      NET-208-64-120-0-1
Parent:         NET-208-0-0-0-0
NetType:        Direct Allocation
NameServer:     NS1.ENTERPRISE.BLACKLOTUS.NET
NameServer:     NS2.ENTERPRISE.BLACKLOTUS.NET
RegDate:        2005-12-22
Updated:        2009-11-11
Ref:            http://whois.arin.net/rest/net/NET-208-64-120-0-1

OrgName:        Black Lotus Communications
OrgId:          BLC-92
Address:        3419 Virginia Beach Blvd. #D5

Thats not your IP space? Really? How come.

apothekeosterreich .at -> 208.64.120.197
vertrouwdeapotheek .nl -> 208.64.120.197

viagra-shopping .com -> 208.64.127.78
medicin-24 .com -> 208.64.127.78

apothekeohnerezept .at -> 208.64.127.66

www.medicin-24 .com -> 208.64.127.78
www.viagra-shopping .com -> 208.64.127.78

This is just like 3 minutes digging in todays spamfolders.

Instead of typing here, i would be rather nervous and placing null routes wherever i could.

Bye,
Raymond.




Current thread: