TR, Again, it's been null routed. Customer has been served with notice. Unless you guys can help find some more related IP space I think the issue has been solved.
Thanks, Jeff On Mon, Jan 17, 2011 at 7:57 PM, TR Shaw <ts...@oitc.com> wrote: > Actually, it does not: > > $ host apothekeosterreich.at > apothekeosterreich.at has address 208.64.120.197 > apothekeosterreich.at mail is handled by 10 mail.apothekeosterreich.at. > $ curl -I -L apothekeosterreich.at > HTTP/1.1 301 Moved Permanently > Cache-Control: private > Content-Length: 0 > Location: http://www.apothekeosterreich.at/Home.aspx > Server: Microsoft-IIS/7.0 > X-AspNet-Version: 4.0.30319 > X-Powered-By: ASP.NET > Date: Tue, 18 Jan 2011 00:54:59 GMT > Connection: close > > HTTP/1.1 200 OK > Cache-Control: private > Content-Length: 126574 > Content-Type: text/html; charset=utf-8 > Server: Microsoft-IIS/7.0 > X-AspNet-Version: 4.0.30319 > WL-Version: 2475.0 > Set-Cookie: ASP.NET_SessionId=a3brplvgwfsdk3pd1g1zgdtj; path=/; HttpOnly > X-Powered-By: ASP.NET > Date: Tue, 18 Jan 2011 00:55:00 GMT > Connection: close > > On Jan 17, 2011, at 7:33 PM, Jeffrey Lyon wrote: > >> Raymond, >> >> We've acted on every report that we're aware of and instead you want >> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197 >> redirects to IP space we already null routed. It's the same customer. >> >> Just to calm your nerves we'll also null route that space (208.64.120.176/28) >> >> Thanks, Jeff >> >> P.S. Someone at Spamhaus PLEASE remove the /21 listing? >> >> >> >> On Mon, Jan 17, 2011 at 7:25 PM, Raymond Dijkxhoorn >> <raym...@prolocation.net> wrote: >>> Hi! >>> >>>> Spam does not make me nervous, it's a practical matter that we will >>>> address in due course. The null routes we have set are pretty recent >>>> so you may have received some spam prior to that time but I absolutely >>>> guarantee you that it did not come from our network, otherwise we >>>> would have detected it and stopped it on the spot. >>> >>>>> Thats not your IP space? Really? How come. >>>>> >>>>> apothekeosterreich .at -> 208.64.120.197 >>>>> vertrouwdeapotheek .nl -> 208.64.120.197 >>>>> >>>>> viagra-shopping .com -> 208.64.127.78 >>>>> medicin-24 .com -> 208.64.127.78 >>>>> >>>>> apothekeohnerezept .at -> 208.64.127.66 >>>>> >>>>> www.medicin-24 .com -> 208.64.127.78 >>>>> www.viagra-shopping .com -> 208.64.127.78 >>>>> >>>>> This is just like 3 minutes digging in todays spamfolders. >>> >>> www.apothekeosterreich .at is still up at the mentioned ip. Instead of >>> telling you are soooo good on terminating stuff. Can you walk over the list >>> and act? >>> >>> I have sended in many requests for termination. You or your network dont >>> respond to this at all. >>> >>> Its a waste of time even telling it seems. >>> >>> I will stop posting here, spam-l is a much better place for this. But please >>> dont act like you dont know anything whats going on. You have been warned. >>> You have gotten many many reports. But we dont see stuff changing. >>> >>> Good luck with your listing at SpamHaus. >>> >>> Bye, >>> Raymond. >>> >> >> >> >> -- >> Jeffrey Lyon, Leadership Team >> jeffrey.l...@blacklotus.net | http://www.blacklotus.net >> Black Lotus Communications - AS32421 >> First and Leading in DDoS Protection Solutions >> > > -- Jeffrey Lyon, Leadership Team jeffrey.l...@blacklotus.net | http://www.blacklotus.net Black Lotus Communications - AS32421 First and Leading in DDoS Protection Solutions
