Re: Request Spamhaus contact

[Jeffrey Lyon <jeffrey.lyon () blacklotus net>]

TR,

Again, it's been null routed. Customer has been served with notice.
Unless you guys can help find some more related IP space I think the
issue has been solved.

Thanks, Jeff


On Mon, Jan 17, 2011 at 7:57 PM, TR Shaw <tshaw () oitc com> wrote:
> Actually, it does not:
>
> $ host apothekeosterreich.at
> apothekeosterreich.at has address 208.64.120.197
> apothekeosterreich.at mail is handled by 10 mail.apothekeosterreich.at.
> $ curl -I -L apothekeosterreich.at
> HTTP/1.1 301 Moved Permanently
> Cache-Control: private
> Content-Length: 0
> Location: http://www.apothekeosterreich.at/Home.aspx
> Server: Microsoft-IIS/7.0
> X-AspNet-Version: 4.0.30319
> X-Powered-By: ASP.NET
> Date: Tue, 18 Jan 2011 00:54:59 GMT
> Connection: close
>
> HTTP/1.1 200 OK
> Cache-Control: private
> Content-Length: 126574
> Content-Type: text/html; charset=utf-8
> Server: Microsoft-IIS/7.0
> X-AspNet-Version: 4.0.30319
> WL-Version: 2475.0
> Set-Cookie: ASP.NET_SessionId=a3brplvgwfsdk3pd1g1zgdtj; path=/; HttpOnly
> X-Powered-By: ASP.NET
> Date: Tue, 18 Jan 2011 00:55:00 GMT
> Connection: close
>
> On Jan 17, 2011, at 7:33 PM, Jeffrey Lyon wrote:
>
> > Raymond,
> >
> > We've acted on every report that we're aware of and instead you want
> > to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
> > redirects to IP space we already null routed. It's the same customer.
> >
> > Just to calm your nerves we'll also null route that space (208.64.120.176/28)
> >
> > Thanks, Jeff
> >
> > P.S. Someone at Spamhaus PLEASE remove the /21 listing?
> >
> >
> >
> > On Mon, Jan 17, 2011 at 7:25 PM, Raymond Dijkxhoorn
> > <raymond () prolocation net> wrote:
> > > Hi!
> > >
> > > > Spam does not make me nervous, it's a practical matter that we will
> > > > address in due course. The null routes we have set are pretty recent
> > > > so you may have received some spam prior to that time but I absolutely
> > > > guarantee you that it did not come from our network, otherwise we
> > > > would have detected it and stopped it on the spot.
> > >
> > > > > Thats not your IP space? Really? How come.
> > > > >
> > > > > apothekeosterreich .at -> 208.64.120.197
> > > > > vertrouwdeapotheek .nl -> 208.64.120.197
> > > > >
> > > > > viagra-shopping .com -> 208.64.127.78
> > > > > medicin-24 .com -> 208.64.127.78
> > > > >
> > > > > apothekeohnerezept .at -> 208.64.127.66
> > > > >
> > > > > www.medicin-24 .com -> 208.64.127.78
> > > > > www.viagra-shopping .com -> 208.64.127.78
> > > > >
> > > > > This is just like 3 minutes digging in todays spamfolders.
> > >
> > > www.apothekeosterreich .at is still up at the mentioned ip. Instead of
> > > telling you are soooo good on terminating stuff. Can you walk over the list
> > > and act?
> > >
> > > I have sended in many requests for termination. You or your network dont
> > > respond to this at all.
> > >
> > > Its a waste of time even telling it seems.
> > >
> > > I will stop posting here, spam-l is a much better place for this. But please
> > > dont act like you dont know anything whats going on. You have been warned.
> > > You have gotten many many reports. But we dont see stuff changing.
> > >
> > > Good luck with your listing at SpamHaus.
> > >
> > > Bye,
> > > Raymond.
> >
> >
> >
> > --
> > Jeffrey Lyon, Leadership Team
> > jeffrey.lyon () blacklotus net | http://www.blacklotus.net
> > Black Lotus Communications - AS32421
> > First and Leading in DDoS Protection Solutions



-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon () blacklotus net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions