Re: Request Spamhaus contact

[Jeffrey Lyon <jeffrey.lyon () blacklotus net>]

Actually, that was just a brain lapse. The domain didn't resolve at
all (misspelled?) and it returned the Cox default resolution.

Jeff

On Mon, Jan 17, 2011 at 7:30 PM, TR Shaw <tshaw () oitc com> wrote:
> So the fact that you host the spamvertized pill and other spam sites makes it OK because the spamming email came from 
> residential machines that were coopted?
>
> That's weird logic but maybe that's why your abuse never responded to us nor shuts them down.
>
> Tom
>
> On Jan 17, 2011, at 7:14 PM, Jeffrey Lyon wrote:
>
> > Raymond,
> >
> > Spam does not make me nervous, it's a practical matter that we will
> > address in due course. The null routes we have set are pretty recent
> > so you may have received some spam prior to that time but I absolutely
> > guarantee you that it did not come from our network, otherwise we
> > would have detected it and stopped it on the spot.
> >
> > Thanks, Jeff
> >
> >
> > On Mon, Jan 17, 2011 at 7:12 PM, Raymond Dijkxhoorn
> > <raymond () prolocation net> wrote:
> > > Hi!
> > >
> > > > That is not in our IP space. These are the only SBL's we have outstanding:
> > > >
> > > > SBL101835
> > > > 208.64.127.64/27        blacklotus.net
> > > > 17-Jan-2011 14:44 GMT
> > > > Drug spam domain hosting
> > > >
> > > >
> > > > SBL101662
> > > > 208.64.123.176/28       blacklotus.net
> > > > 14-Jan-2011 10:31 GMT
> > > > Drug spam domain hosting
> > >
> > > > > 208.64.120.186 canadian-rx-store.org
> > > > >
> > > > > I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
> > > > > request for http://canadian-rx-store.org/ and the server responded as
> > > > > I would expect a server configured with that name to respond.
> > > > >
> > > > > canadian-rx-store .org? Really?
> > >
> > > So they need, and will add more.
> > >
> > > NetRange:       208.64.120.0 - 208.64.127.255
> > > CIDR:           208.64.120.0/21
> > > OriginAS:       AS32421
> > > NetName:        NET-208-64-120-0-1
> > > NetHandle:      NET-208-64-120-0-1
> > > Parent:         NET-208-0-0-0-0
> > > NetType:        Direct Allocation
> > > NameServer:     NS1.ENTERPRISE.BLACKLOTUS.NET
> > > NameServer:     NS2.ENTERPRISE.BLACKLOTUS.NET
> > > RegDate:        2005-12-22
> > > Updated:        2009-11-11
> > > Ref:            http://whois.arin.net/rest/net/NET-208-64-120-0-1
> > >
> > > OrgName:        Black Lotus Communications
> > > OrgId:          BLC-92
> > > Address:        3419 Virginia Beach Blvd. #D5
> > >
> > > Thats not your IP space? Really? How come.
> > >
> > > apothekeosterreich .at -> 208.64.120.197
> > > vertrouwdeapotheek .nl -> 208.64.120.197
> > >
> > > viagra-shopping .com -> 208.64.127.78
> > > medicin-24 .com -> 208.64.127.78
> > >
> > > apothekeohnerezept .at -> 208.64.127.66
> > >
> > > www.medicin-24 .com -> 208.64.127.78
> > > www.viagra-shopping .com -> 208.64.127.78
> > >
> > > This is just like 3 minutes digging in todays spamfolders.
> > >
> > > Instead of typing here, i would be rather nervous and placing null routes
> > > wherever i could.
> > >
> > > Bye,
> > > Raymond.
> >
> >
> >
> > --
> > Jeffrey Lyon, Leadership Team
> > jeffrey.lyon () blacklotus net | http://www.blacklotus.net
> > Black Lotus Communications - AS32421
> > First and Leading in DDoS Protection Solutions



-- 
Jeffrey Lyon, Leadership Team
jeffrey.lyon () blacklotus net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions