[135115] in North American Network Operators' Group
Re: Request Spamhaus contact
daemon@ATHENA.MIT.EDU (Raymond Dijkxhoorn)
Mon Jan 17 19:22:02 2011
Date: Tue, 18 Jan 2011 01:12:58 +0100 (CET)
From: Raymond Dijkxhoorn <raymond@prolocation.net>
To: Jeffrey Lyon <jeffrey.lyon@blacklotus.net>
In-Reply-To: <AANLkTinHKhkkOtHpy6=nUPv4onz3-Boh7o0oXBg5G+fM@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi!
> That is not in our IP space. These are the only SBL's we have outstanding:
>
> SBL101835
> 208.64.127.64/27 blacklotus.net
> 17-Jan-2011 14:44 GMT
> Drug spam domain hosting
>
>
> SBL101662
> 208.64.123.176/28 blacklotus.net
> 14-Jan-2011 10:31 GMT
> Drug spam domain hosting
>> 208.64.120.186 canadian-rx-store.org
>>
>> I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
>> request for http://canadian-rx-store.org/ and the server responded as
>> I would expect a server configured with that name to respond.
>>
>> canadian-rx-store .org? Really?
So they need, and will add more.
NetRange: 208.64.120.0 - 208.64.127.255
CIDR: 208.64.120.0/21
OriginAS: AS32421
NetName: NET-208-64-120-0-1
NetHandle: NET-208-64-120-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.ENTERPRISE.BLACKLOTUS.NET
NameServer: NS2.ENTERPRISE.BLACKLOTUS.NET
RegDate: 2005-12-22
Updated: 2009-11-11
Ref: http://whois.arin.net/rest/net/NET-208-64-120-0-1
OrgName: Black Lotus Communications
OrgId: BLC-92
Address: 3419 Virginia Beach Blvd. #D5
Thats not your IP space? Really? How come.
apothekeosterreich .at -> 208.64.120.197
vertrouwdeapotheek .nl -> 208.64.120.197
viagra-shopping .com -> 208.64.127.78
medicin-24 .com -> 208.64.127.78
apothekeohnerezept .at -> 208.64.127.66
www.medicin-24 .com -> 208.64.127.78
www.viagra-shopping .com -> 208.64.127.78
This is just like 3 minutes digging in todays spamfolders.
Instead of typing here, i would be rather nervous and placing null routes
wherever i could.
Bye,
Raymond.
