Landis Holding IP Sement being BLOCKED as Spammers

[CPUBUM]

FYI... It appears that SecureServer.NET (which I am told it GoDaddy) is BLOCKING all emails going to their network from hundreds of IP addresses which are owned by Landis Holding Company (JAGUAR). I have been trying to get our the blocks on our IP address resolved with SecureServer.Net for 3 WEEKS. Here is the last email from them....

Our Advanced Technical Support team has examined your IP unblock request. We are unable to unblock 69.73.161.xxx at this time. As previously stated, this IP is owned by Landis Holdings Inc ( included for reference ) and due to multiple spam operations being hosted within this ISPs network, we are unable to unblock this IP. You may wish to speak with the ISP for further information.

Even though OUR IP address is listed as GOOD with SenderBase.org, they BLOCK us.

In looking at the SenderBase, the people at SecureServer are 100%... there are a number of know spammers running which go back to Jaguar. Check your LOGS... this MAY be effecting your clients as well.

Spammers that tie back to JAG... It appears in doing a search on is showing a number of people that are listed on SenderBaser as sources of spam (just a very few I found).

Maybe JAG can start using this free service to address SPAM issues they have with result in a number of us getting BLOCKED??? I have a ticket opened with JAG on this. If you have the same issue, you might want to talk to your JAG person.

I had an issue with Earthlink who blocked us awhile back for the same reason... SEGMENT BLOCK... but they listened to us and removed the block on our address.... These people at SecureServer are total PITAs and will not even listen to us!

Poor = A problematic level of threat activity has been observed from your IP address or domain. Your email or Web traffic is likely to be filtered or blocked*.

69.73.147.45 host45.bonafideprizes.net 3.8 4.3 0 Poor
69.73.147.61 host61.bonafideprizes.net 4.7 3.4 0 Poor
69.73.147.82 host82.bonafideprizes.net 0.0 3.3 0 Poor
69.73.147.96 host96.bonafideprizes.net 0.0 3.0 0 Poor
69.73.147.109 host109.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.118 host118.bonafideprizes.net 4.4 3.1 0 Poor
69.73.147.130 host130.bonafideprizes.net 4.7 3.4 0 Poor
69.73.147.136 host136.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.163 host163.bonafideprizes.net 4.4 3.1 0 Poor
69.73.147.185 host185.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.251 host251.bonafideprizes.net 4.5 3.2 0 Poor
69.73.151.21 2.4 3.0 0 Poor
69.73.151.65 3.9 3.4 0 Poor
69.73.138.194 host3.helstonsystems.com Y 0.0 3.2 0 Poor
69.73.163.30 host14.gowenworks.com 0.0 4.0 0 Poor
69.73.163.31 host15.gowenworks.com 0.0 4.0 0 Poor
70.164.11.165 mail1.gowenworks.com 2.9 3.3 0 Poor
70.164.11.166 mail2.gowenworks.com 0.0 2.9 0 Poor
70.164.11.167 mail3.gowenworks.com 0.0 3.0 0 Poor
70.164.11.168 mail4.gowenworks.com 0.0 3.1 0 Poor
69.73.163.70 host2.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.71 host3.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.72 host4.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.73 host5.northandovertech.com Y 0.0 3.4 0 Poor
69.73.163.74 host6.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.75 host7.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.76 host8.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.77 host9.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.78 host10.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.79 host11.northandovertech.com Y 0.0 3.3 0 Poor

[JPC-NickO]

Hi,

I've suspended:

69.73.147.45 host45.bonafideprizes.net 3.8 4.3 0 Poor
69.73.147.61 host61.bonafideprizes.net 4.7 3.4 0 Poor
69.73.147.82 host82.bonafideprizes.net 0.0 3.3 0 Poor
69.73.147.96 host96.bonafideprizes.net 0.0 3.0 0 Poor
69.73.147.109 host109.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.118 host118.bonafideprizes.net 4.4 3.1 0 Poor
69.73.147.130 host130.bonafideprizes.net 4.7 3.4 0 Poor
69.73.147.136 host136.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.163 host163.bonafideprizes.net 4.4 3.1 0 Poor
69.73.147.185 host185.bonafideprizes.net 0.0 3.1 0 Poor
69.73.147.251 host251.bonafideprizes.net 4.5 3.2 0 Poor
69.73.151.21 2.4 3.0 0 Poor
69.73.151.65 3.9 3.4 0 Poor
69.73.138.194 host3.helstonsystems.com Y 0.0 3.2 0 Poor
69.73.163.30 host14.gowenworks.com 0.0 4.0 0 Poor
69.73.163.31 host15.gowenworks.com 0.0 4.0 0 Poor
69.73.163.70 host2.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.71 host3.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.72 host4.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.73 host5.northandovertech.com Y 0.0 3.4 0 Poor
69.73.163.74 host6.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.75 host7.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.76 host8.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.77 host9.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.78 host10.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.79 host11.northandovertech.com Y 0.0 3.3 0 Poor

These don't belong to us:
70.164.11.165 mail1.gowenworks.com 2.9 3.3 0 Poor
70.164.11.166 mail2.gowenworks.com 0.0 2.9 0 Poor
70.164.11.167 mail3.gowenworks.com 0.0 3.0 0 Poor
70.164.11.168 mail4.gowenworks.com 0.0 3.1 0 Poor

We are working on this unfortunately blacklist operators are not very friendly with anyone so it makes getting the problem resolved difficult.

[CPUBUM]

northandovertech.com is still active and alive. You can tell.. they are most likely spammers... look at this front page of their site...

Welcome to InteractiveMediaSpaces.com

InteractiveMediaSpaces is an email service providing its subscribers the latest special offers, discounts and promotional announcements. Our subscribers enjoy receiving exclusive emails about new and exciting products and services.

Have you looked at SenderBase.org to see what other spammes you have on your network?

GoDaddy is a PAIN IN THE A$$ and I really hate dealing with their type. I had a client who was blocked and used email at RCN.NET. It took her five days to get someone at GoDaddy to listen. They ONLY unblocked email to RCN and not the rest of their clients.

[JPC-Rizwan]

the domain northandovertech.com itself is not pointing to Jaguar IPs.

Yes we are working on all ips or ranges that are blocked, they are handled on daily basis as well with our abuse department working actively to block any reported spam/phishing etc complaints.

[CPUBUM]

The domain northandovertech.com is connected to IP addresses owned by Landis Holding Company which is JAg

OrgName: Landis Holdings Inc
OrgID: LANDI-3
Address: PO BOX 1108
City: Fulshear
StateProv: TX
PostalCode: 77441
Country: US

NetRange: 69.73.128.0 - 69.73.191.255
CIDR: 69.73.128.0/18
OriginAS: AS3595
NetName: LH-GOLD-NETWORK
NetHandle: NET-69-73-128-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: NS.NOCDIRECT.COM
NameServer: NS2.NOCDIRECT.COM
Comment:
RegDate: 2003-11-05
Updated: 2009-02-24

[JPC-Rizwan]

The domain northandovertech.com is connected to IP addresses owned by Landis Holding Company which is JAg

What do you mean by connected ? , have you tried to ping the domain or have checked to which IP its resolving ?

http://www.intodns.com/northandovertech.com

If you referring to URLs hostX.northandovertech.com then yes they are pointing to Jag and the issue is being worked upon, I was referring to the main domain itself.

[CPUBUM]

What I mean is all these addresses that are sending out emails are hooked to domains owned by JAG... Things like this are why we I have been blocked because COMCAST, AT&T, EARTHLINK, VERIZON and now all of GODADDY are blocking entire segments.

As mentioned, I was able to resolve our issue with COMCAST, AT&T, VERIZON, and EARTHLINK, but what is the status on getting the blocks removed at this time with all of the GODADDY stuff? I know we can not afford to have continued blocks by major players which effect thousands of domains and email addresses.

We have not received an update since 1AM.

Thanks in advance


According to DNSSTUFF... these are all sending out spam and are connected to JAG... these are the ones you mentioned the URL are not JAG, but the mailservers are in JAG

69.73.163.70 host2.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.71 host3.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.72 host4.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.73 host5.northandovertech.com Y 0.0 3.4 0 Poor
69.73.163.74 host6.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.75 host7.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.76 host8.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.77 host9.northandovertech.com Y 0.0 3.3 0 Poor
69.73.163.78 host10.northandovertech.com Y 0.0 3.2 0 Poor
69.73.163.79 host11.northandovertech.com Y 0.0 3.3 0 Poor

[JPC-Rizwan]

It appear you have misunderstood the earlier post, after NickO suspended the related servers, you asked "northandovertech.com is still active and alive." and this is what was answered, that why its still active.

>>We have not received an update since 1AM.

Are you referring to any related unblock request ticket at Jag ? If yes let us know the ticket number.

[CPUBUM]

Here the ticket is... This is for an large segment block by godaddy. Our server is in the segment being blocked.

12914748

Thanks!

[Ron]

CPUBUM, For what it's worth and as far as I can tell, you seem to be missing what is being said -- while the various MAILservers "host##.northandovertech.com ARE pointed at Jag IPs, (and they are now blocked by Jag) the site www.northandovertech.com (their WEBserver) points to 63.247.72.50 which is not in a Jag range (although it does seem to be within GNAX.)

[CPUBUM]

Ron... I understand.. that is why I made the comment ... "According to DNSSTUFF... these are all sending out spam and are connected to JAG... these are the ones you mentioned the URL are not JAG, but the mailservers are in JAG".

i.e. While the webpages are outside of JAG, the mailservers responsible for some of the spam are within.

Jim

[Ron]

Not anymore!

K, just seemed there was some confusion, obviously it was just on my part!

[CPUBUM]

No problem buddy! The only confusion is what JAG is telling me verse what SecureServer is telling me. According to Jag they were told the issue is rDNS. I just got off the phone with SecureServer and was told the issue is NOT my rDNS, IP address, nor my email activity. THey have blocked the entire SUBNET because there are spammers on it which are flooding their clients with spam.

So... even if I change my rDNS which SecureServer stated is NOT required, I will still be blocked along with hundreds of other IP addresses owned by Landis Holding Company (JAG). JaguarPC has come miles from the old days and I enjoy working with them, but something needs to be done to resolve the issue. I go out of my way to stop spam on our servers and to have this happen to us when every tool states we are clean is a freaking slap in the face.

I have updated my ticket telling JAG that the rDNS is not an issue per my conversation with SecureServer. They also told me to have JAG call their Advance Tech team to find out what the spammer IP addresses are so they can address them. Until that is done, a number of us will remain blocked to anyone that routes thru secureserver.

[JPC-Les]

I'm looking into this.

[JPC-Les]

So I just got off the phone with a rep at secureservers. CPUBUM you must be a silver tongued devil. I am frankly amazed at the response you described compared to what I just experienced.

He was completely useless and refused to give me any information regarding our listing. His only reply was for us to resubmit the IP to their unblock tool and wait for a reply.