[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Request Spamhaus contact
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yo Jeffrey!
On Mon, 17 Jan 2011, Jeffrey Lyon wrote:
> I fat fingered the netmask, try now.
Still up:
# nmap -sS 208.64.120.197
Starting Nmap 5.21 ( http://nmap.org ) at 2011-01-17 17:07 PST
Nmap scan report for 208.64.120.197
Host is up (0.033s latency).
Not shown: 989 filtered ports
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
135/tcp open msrpc
443/tcp open https
1723/tcp open pptp
1801/tcp open unknown
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open unknown
49154/tcp open unknown
49157/tcp open unknown
Nmap done: 1 IP address (1 host up) scanned in 4.77 seconds
RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97701
gem at rellim.com Tel:+1(541)382-8588
>
> Thanks, Jeff
>
>
> On Mon, Jan 17, 2011 at 7:39 PM, Raymond Dijkxhoorn
> <raymond at prolocation.net> wrote:
> > Hi!
> >
> >> We've acted on every report that we're aware of and instead you want
> >> to play pharmacy domain scavenger hunt. This domain at 208.64.120.197
> >> redirects to IP space we already null routed. It's the same customer.
> >
> > Either you place strange nullroutes or you did not at all.
> >
> > [root at mi10 tmp]# wget -S www.vertrouwdeapotheek.nl
> > --01:37:29-- ?http://www.vertrouwdeapotheek.nl/
> > ? ? ? ? ? => `index.html'
> > Resolving www.vertrouwdeapotheek.nl... done.
> > Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> > HTTP request sent, awaiting response...
> > ?1 HTTP/1.1 301 Moved Permanently
> > ?2 Cache-Control: private
> > ?3 Content-Length: 0
> > ?4 Location: http://www.vertrouwdeapotheek.nl/Home.aspx
> > ?5 Server: Microsoft-IIS/7.0
> > ?6 X-AspNet-Version: 4.0.30319
> > ?7 X-Powered-By: ASP.NET
> > ?8 Date: Tue, 18 Jan 2011 00:37:04 GMT
> > ?9 Connection: close
> > Location: http://www.vertrouwdeapotheek.nl/Home.aspx [following]
> > --01:37:29-- ?http://www.vertrouwdeapotheek.nl/Home.aspx
> > ? ? ? ? ? => `Home.aspx'
> > Connecting to www.vertrouwdeapotheek.nl[208.64.120.197]:80... connected.
> > HTTP request sent, awaiting response...
> >
> > Does this look as its nullrouted?
> >
> >> P.S. Someone at Spamhaus PLEASE remove the /21 listing?
> >
> > I highly doubt. There is much more to clean on your network before i hope
> > they would even reconsider.
> >
> > Bye,
> > Raymond.
> >
>
>
>
> --
> Jeffrey Lyon, Leadership Team
> jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
> Black Lotus Communications - AS32421
> First and Leading in DDoS Protection Solutions
>
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFNNOgkBmnRqz71OvMRAlvyAJ9iB4xleue08ZFvUXhDc+/vmga4KwCeKsEQ
556DfEqv3CINUxO2GyxmBJ0=
=8XnB
-----END PGP SIGNATURE-----