Hi!
That is not in our IP space. These are the only SBL's we have outstanding:
SBL101835
208.64.127.64/27 blacklotus.net
17-Jan-2011 14:44 GMT
Drug spam domain hosting
SBL101662
208.64.123.176/28 blacklotus.net
14-Jan-2011 10:31 GMT
Drug spam domain hosting
208.64.120.186 canadian-rx-store.org
I connected to 208.64.120.186 on TCP port 80 and finger-boned an HTTP
request for http://canadian-rx-store.org/ and the server responded as
I would expect a server configured with that name to respond.
canadian-rx-store .org? Really?
So they need, and will add more.
NetRange: 208.64.120.0 - 208.64.127.255
CIDR: 208.64.120.0/21
OriginAS: AS32421
NetName: NET-208-64-120-0-1
NetHandle: NET-208-64-120-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.ENTERPRISE.BLACKLOTUS.NET
NameServer: NS2.ENTERPRISE.BLACKLOTUS.NET
RegDate: 2005-12-22
Updated: 2009-11-11
Ref: http://whois.arin.net/rest/net/NET-208-64-120-0-1
OrgName: Black Lotus Communications
OrgId: BLC-92
Address: 3419 Virginia Beach Blvd. #D5
Thats not your IP space? Really? How come.
apothekeosterreich .at -> 208.64.120.197
vertrouwdeapotheek .nl -> 208.64.120.197
viagra-shopping .com -> 208.64.127.78
medicin-24 .com -> 208.64.127.78
apothekeohnerezept .at -> 208.64.127.66
www.medicin-24 .com -> 208.64.127.78
www.viagra-shopping .com -> 208.64.127.78
This is just like 3 minutes digging in todays spamfolders.
Instead of typing here, i would be rather nervous and placing null routes
wherever i could.
Bye,
Raymond.
