TR, Again, it's been null routed. Customer has been served with notice. Unless you guys can help find some more related IP space I think the issue has been solved. Thanks, Jeff On Mon, Jan 17, 2011 at 7:57 PM, TR Shaw <tshaw@oitc.com> wrote:
Actually, it does not:
$ host apothekeosterreich.at apothekeosterreich.at has address 208.64.120.197 apothekeosterreich.at mail is handled by 10 mail.apothekeosterreich.at. $ curl -I -L apothekeosterreich.at HTTP/1.1 301 Moved Permanently Cache-Control: private Content-Length: 0 Location: http://www.apothekeosterreich.at/Home.aspx Server: Microsoft-IIS/7.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Tue, 18 Jan 2011 00:54:59 GMT Connection: close
HTTP/1.1 200 OK Cache-Control: private Content-Length: 126574 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.0 X-AspNet-Version: 4.0.30319 WL-Version: 2475.0 Set-Cookie: ASP.NET_SessionId=a3brplvgwfsdk3pd1g1zgdtj; path=/; HttpOnly X-Powered-By: ASP.NET Date: Tue, 18 Jan 2011 00:55:00 GMT Connection: close
On Jan 17, 2011, at 7:33 PM, Jeffrey Lyon wrote:
Raymond,
We've acted on every report that we're aware of and instead you want to play pharmacy domain scavenger hunt. This domain at 208.64.120.197 redirects to IP space we already null routed. It's the same customer.
Just to calm your nerves we'll also null route that space (208.64.120.176/28)
Thanks, Jeff
P.S. Someone at Spamhaus PLEASE remove the /21 listing?
On Mon, Jan 17, 2011 at 7:25 PM, Raymond Dijkxhoorn <raymond@prolocation.net> wrote:
Hi!
Spam does not make me nervous, it's a practical matter that we will address in due course. The null routes we have set are pretty recent so you may have received some spam prior to that time but I absolutely guarantee you that it did not come from our network, otherwise we would have detected it and stopped it on the spot.
Thats not your IP space? Really? How come.
apothekeosterreich .at -> 208.64.120.197 vertrouwdeapotheek .nl -> 208.64.120.197
viagra-shopping .com -> 208.64.127.78 medicin-24 .com -> 208.64.127.78
apothekeohnerezept .at -> 208.64.127.66
www.medicin-24 .com -> 208.64.127.78 www.viagra-shopping .com -> 208.64.127.78
This is just like 3 minutes digging in todays spamfolders.
www.apothekeosterreich .at is still up at the mentioned ip. Instead of telling you are soooo good on terminating stuff. Can you walk over the list and act?
I have sended in many requests for termination. You or your network dont respond to this at all.
Its a waste of time even telling it seems.
I will stop posting here, spam-l is a much better place for this. But please dont act like you dont know anything whats going on. You have been warned. You have gotten many many reports. But we dont see stuff changing.
Good luck with your listing at SpamHaus.
Bye, Raymond.
-- Jeffrey Lyon, Leadership Team jeffrey.lyon@blacklotus.net | http://www.blacklotus.net Black Lotus Communications - AS32421 First and Leading in DDoS Protection Solutions
-- Jeffrey Lyon, Leadership Team jeffrey.lyon@blacklotus.net | http://www.blacklotus.net Black Lotus Communications - AS32421 First and Leading in DDoS Protection Solutions