[135103] in North American Network Operators' Group
Re: Request Spamhaus contact
daemon@ATHENA.MIT.EDU (Raymond Dijkxhoorn)
Mon Jan 17 18:47:23 2011
Date: Tue, 18 Jan 2011 00:46:24 +0100 (CET)
From: Raymond Dijkxhoorn <raymond@prolocation.net>
To: William Pitcock <nenolod@systeminplace.net>
In-Reply-To: <20110117173159.3fdcd46c@petrie.gateway.2wire.net>
Cc: Jeffrey Lyon <jeffrey.lyon@blacklotus.net>, nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi!
>> That's fine, but the listings don't even make sense. There is no
>> evidence in the listing and i'm still trying to figure out a) why they
>> think that these new listings have anything to do with the ones we
>> already cleaned and b) which customers actually need to be removed and
>> for specifically what reasons. Their entire mentality is "the site is
>> pharmacy which means its part of a criminal spammer gang," regardless
>> of whether or not that is true.
> Please stop pretending that you're not hosting e-trash. 208.64.122.114
> is still hosting an active SEO poisoning site (myspace-codes.com). I
> think, frankly, it would make your life a lot simpler if you just
> accepted the fact that BlackLotus sells to e-trash, just like the rest
> of the "ddos-protected hosting solutions" companies do.
viagra-shopping .com
potenzmittel-at .com
medicin-24 .com
apothekeohnerezept .at
[root@noc log]# whois 208.64.122.234
[Querying whois.arin.net]
[Redirected to rwhois.blacklotus.net:4321]
[Querying rwhois.blacklotus.net]
[rwhois.blacklotus.net]
%rwhois V-1.0,V-1.5:00090h:00 support.blacklotus.net (Ubersmith RWhois
Server V-1.8.0)
autharea=208.64.120.0/21
xautharea=208.64.120.0/21
network:Class-Name:network
network:Auth-Area:208.64.120.0/21
network:ID:NET-481.208.64.122.232/30
network:Network-Name:Nameserver IP Addresses
network:IP-Network:208.64.122.232/30
network:IP-Network-Block:208.64.122.232 - 208.64.122.235
network:Org-Name:Aloli LTD
network:Street-Address:3321 Road Town, Drake Chambers
network:City:Tortola
network:State:-
network:Postal-Code:3321
network:Country-Code:
network:Tech-Contact:MAINT-481.208.64.122.232/30
network:Created:20101015124139000
network:Updated:20101015124139000
network:Updated-By:support@blacklotus.net
network:POC-Name:Network Operations Center
network:POC-Email:support@blacklotus.net
network:POC-Phone:(323) 657-5944
network:Tech-Name:Network Operations Center
network:Tech-Email:support@blacklotus.net
network:Tech-Phone:(323) 657-5944
This thread doesnt belong here. But hey, seems they are asking for it.
Oh and yes all these botnet landing pages are still up...
If i look back at November 2010 archives there is a whole bunch and its
adding new domains daily.
brandviagra23 .com
brandviagra27 .com
brandcialis26 .com
brandviagra25 .com
...
Neh, clean as it can be cough ...
Bye,
Raymond.
