nanog mailing list archives

Re: Request Spamhaus contact


From: William Pitcock <nenolod () systeminplace net>
Date: Mon, 17 Jan 2011 19:09:23 -0600

On Mon, 17 Jan 2011 19:42:22 -0500
Jeffrey Lyon <jeffrey.lyon () blacklotus net> wrote:

I fat fingered the netmask, try now.

$ wget -S www.vertrouwdeapotheek.nl
--2011-01-17 19:07:59--  http://www.vertrouwdeapotheek.nl/
Resolving www.vertrouwdeapotheek.nl... 208.64.120.197
Connecting to www.vertrouwdeapotheek.nl|208.64.120.197|:80... connected.
HTTP request sent, awaiting response... 
  HTTP/1.1 301 Moved Permanently
  Cache-Control: private
  Content-Length: 0
  Location: http://www.vertrouwdeapotheek.nl/Home.aspx
  Server: Microsoft-IIS/7.0
  X-AspNet-Version: 4.0.30319
  X-Powered-By: ASP.NET
  Date: Tue, 18 Jan 2011 01:07:46 GMT
  Connection: close
Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
--2011-01-17 19:08:00--  http://www.vertrouwdeapotheek.nl/Home.aspx
Connecting to www.vertrouwdeapotheek.nl|208.64.120.197|:80... connected.
HTTP request sent, awaiting response... 
  HTTP/1.1 200 OK
  Cache-Control: private
  Content-Length: 126007
  Content-Type: text/html; charset=utf-8
  Server: Microsoft-IIS/7.0
  X-AspNet-Version: 4.0.30319
  WL-Version: 2475.0
  Set-Cookie: ASP.NET_SessionId=bcs4bluvt3dqdfqd1udupey3; path=/;
HttpOnly X-Powered-By: ASP.NET
  Date: Tue, 18 Jan 2011 01:07:47 GMT
  Connection: close
Length: 126007 (123K) [text/html]
Saving to: `Home.aspx'

100%[======================================================================================================================================================================>]
126,007      364K/s   in 0.3s    

2011-01-17 19:08:01 (364 KB/s) - `Home.aspx' saved [126007/126007]

How hard is it really to type in "ip route 208.64.120.197
255.255.255.255 Null0" on your busted up 6509?

Don't forget to "conf t"!

William


Thanks, Jeff


On Mon, Jan 17, 2011 at 7:39 PM, Raymond Dijkxhoorn
<raymond () prolocation net> wrote:
Hi!

We've acted on every report that we're aware of and instead you
want to play pharmacy domain scavenger hunt. This domain at
208.64.120.197 redirects to IP space we already null routed. It's
the same customer.

Either you place strange nullroutes or you did not at all.

[root@mi10 tmp]# wget -S www.vertrouwdeapotheek.nl
--01:37:29--  http://www.vertrouwdeapotheek.nl/
          => `index.html'
Resolving www.vertrouwdeapotheek.nl... done.
Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80...
connected. HTTP request sent, awaiting response...
 1 HTTP/1.1 301 Moved Permanently
 2 Cache-Control: private
 3 Content-Length: 0
 4 Location: http://www.vertrouwdeapotheek.nl/Home.aspx
 5 Server: Microsoft-IIS/7.0
 6 X-AspNet-Version: 4.0.30319
 7 X-Powered-By: ASP.NET
 8 Date: Tue, 18 Jan 2011 00:37:04 GMT
 9 Connection: close
Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
--01:37:29--  http://www.vertrouwdeapotheek.nl/Home.aspx
          => `Home.aspx'
Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80...
connected. HTTP request sent, awaiting response...

Does this look as its nullrouted?

P.S. Someone at Spamhaus PLEASE remove the /21 listing?

I highly doubt. There is much more to clean on your network before
i hope they would even reconsider.

Bye,
Raymond.







Current thread: