[135146] in North American Network Operators' Group
Re: Request Spamhaus contact
daemon@ATHENA.MIT.EDU (Jeffrey Lyon)
Mon Jan 17 20:47:23 2011
In-Reply-To: <alpine.LFD.2.00.1101180202510.22908@noc.prolocation.net>
Date: Mon, 17 Jan 2011 20:10:20 -0500
From: Jeffrey Lyon <jeffrey.lyon@blacklotus.net>
To: Raymond Dijkxhoorn <raymond@prolocation.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Raymond,
Negative, it is null routed:
http://lg.level3.net
Show Level 3 (San Diego, CA) Traceroute to 208.64.120.197
1 ae-5-5.ebr1.LosAngeles1.Level3.net (4.69.133.206) 4 msec 4 msec 12 msec
2 ae-4-90.edge1.LosAngeles9.Level3.net (4.69.144.202) 4 msec 4 msec
ae-3-80.edge1.LosAngeles9.Level3.net (4.69.144.138) 4 msec
3 * * *
4 * * *
Jeff
On Mon, Jan 17, 2011 at 8:05 PM, Raymond Dijkxhoorn
<raymond@prolocation.net> wrote:
> Hi!
>
>> Unless you guys can help find some more related IP space I think the
>> issue has been solved.
>
> You are not able to even shutdown one thats mentioned. You keep telling u=
s
> its down and null routed. Its simply not. Its alive and kicking. Bullet
> proof hosting rocks doesnt it?
>
> This is now:
>
> [root@fallback ~]# wget -S www.vertrouwdeapotheek.nl
> --2011-01-18 02:02:20-- =A0http://www.vertrouwdeapotheek.nl/
> Resolving www.vertrouwdeapotheek.nl... 208.64.120.197
> Connecting to www.vertrouwdeapotheek.nl|208.64.120.197|:80... connected.
> HTTP request sent, awaiting response...
> =A0HTTP/1.1 301 Moved Permanently
> =A0Cache-Control: private
> =A0Content-Length: 0
> =A0Location: http://www.vertrouwdeapotheek.nl/Home.aspx
> =A0Server: Microsoft-IIS/7.0
> =A0X-AspNet-Version: 4.0.30319
> =A0X-Powered-By: ASP.NET
> =A0Date: Tue, 18 Jan 2011 01:02:02 GMT
> =A0Connection: close
> Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
> --2011-01-18 02:02:21-- =A0http://www.vertrouwdeapotheek.nl/Home.aspx
> Connecting to www.vertrouwdeapotheek.nl|208.64.120.197|:80... connected.
> HTTP request sent, awaiting response...
> =A0HTTP/1.1 200 OK
> =A0Cache-Control: private
> =A0Content-Length: 126007
> =A0Content-Type: text/html; charset=3Dutf-8
> =A0Server: Microsoft-IIS/7.0
> =A0X-AspNet-Version: 4.0.30319
> =A0WL-Version: 2475.0
> =A0Set-Cookie: ASP.NET_SessionId=3Deknnhn43j4kcqxzqwk24ewjs; path=3D/; Ht=
tpOnly
> =A0X-Powered-By: ASP.NET
> =A0Date: Tue, 18 Jan 2011 01:02:03 GMT
> =A0Connection: close
> Length: 126007 (123K) [text/html]
> Saving to: "Home.aspx.2"
>
> 100%[=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D>]
> 126,007 =A0 =A0 =A0162K/s =A0 in 0.8s
>
> 2011-01-18 02:02:22 (162 KB/s) - "Home.aspx.2" saved [126007/126007]
>
> [root@fallback ~]# more Home.aspx.2
>
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html xmlns=3D"http://www.w3.org/1999/xhtml">
> <head>
> =A0 =A0<title>Vertrouwde Apotheek - Viagra ...
>
> You either have a funny way of nullrouting stuff. OR someone just stole y=
our
> netspace and put the same content online ;)
>
> Bye,
> Raymond.
>
--=20
Jeffrey Lyon, Leadership Team
jeffrey.lyon@blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions
