Re: Request Spamhaus contact

[Steve Atkins <steve () blighty com>]

On Jan 17, 2011, at 4:42 PM, Jeffrey Lyon wrote:

> I fat fingered the netmask, try now.

Mmm hmm.

  platter steve$ telnet 208.64.127.78 80
  Trying 208.64.127.78...
  Connected to 208.64.127.78.
  Escape character is '^]'.
  HEAD / HTTP/1.1
  Host: viagra-shopping.com

  HTTP/1.1 301 Moved Permanently
  Cache-Control: private
  Content-Length: 0
  Location: http://www.viagra-shopping.com/Home.aspx
  Server: Microsoft-IIS/7.0
  X-AspNet-Version: 4.0.30319
  X-Powered-By: ASP.NET
  Date: Tue, 18 Jan 2011 00:57:55 GMT
  Connection: close

If you've given spamhaus the same sort of response you're
showing here I'm not surprised they're not prioritizing dealing
with you.

Cheers,
  Steve


> Thanks, Jeff
>
>
> On Mon, Jan 17, 2011 at 7:39 PM, Raymond Dijkxhoorn
> <raymond () prolocation net> wrote:
> > Hi!
> >
> > > We've acted on every report that we're aware of and instead you want
> > > to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
> > > redirects to IP space we already null routed. It's the same customer.
> >
> > Either you place strange nullroutes or you did not at all.
> >
> > [root@mi10 tmp]# wget -S www.vertrouwdeapotheek.nl
> > --01:37:29--  http://www.vertrouwdeapotheek.nl/
> >           => `index.html'
> > Resolving www.vertrouwdeapotheek.nl... done.
> > Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> > HTTP request sent, awaiting response...
> >  1 HTTP/1.1 301 Moved Permanently
> >  2 Cache-Control: private
> >  3 Content-Length: 0
> >  4 Location: http://www.vertrouwdeapotheek.nl/Home.aspx
> >  5 Server: Microsoft-IIS/7.0
> >  6 X-AspNet-Version: 4.0.30319
> >  7 X-Powered-By: ASP.NET
> >  8 Date: Tue, 18 Jan 2011 00:37:04 GMT
> >  9 Connection: close
> > Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
> > --01:37:29--  http://www.vertrouwdeapotheek.nl/Home.aspx
> >           => `Home.aspx'
> > Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> > HTTP request sent, awaiting response...
> >
> > Does this look as its nullrouted?
> >
> > > P.S. Someone at Spamhaus PLEASE remove the /21 listing?
> >
> > I highly doubt. There is much more to clean on your network before i hope
> > they would even reconsider.
> >
> > Bye,
> > Raymond.
>
>
>
> -- 
> Jeffrey Lyon, Leadership Team
> jeffrey.lyon () blacklotus net | http://www.blacklotus.net
> Black Lotus Communications - AS32421
> First and Leading in DDoS Protection Solutions