Google Groups Home
Help | Sign in
CASE: C-679 E-271593
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  6 messages - Collapse all
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
ea...@optonline.net  
View profile
 More options Jun 5, 9:12 pm
Newsgroups: news.admin.net-abuse.blocklisting
From: ea...@optonline.net
Date: Fri, 6 Jun 2008 01:12:21 GMT
Local: Thurs, Jun 5 2008 9:12 pm
Subject: CASE: C-679 E-271593
We have a server 68.236.182.179 on a DSL line from Verizon. The server
is listed on APEWS as
Oooops 68.236.182.179 is currently listed in APEWS :-(

Entry matching your Query: E-271593
68.236.128.0/18

CASE: C-679
AS19262 US, ISP permits abuse and/or ignores criminal activity

Special Reason:
ISP permits abuse and/or ignores criminal activity

We have had some customers send us emails and our replies to them are
blocked, but I'm not sure if the above listing is the  reason or
something else. I've looked up the ip on http://www.uceprotect.net/en/rblcheck.php
and it looks like the server is part of a blocked owned by Verizon. I
tried calling Verizon to see if they could help determine the reason
for this listing but they said the PTR is controlled by netriplex.

Any clues why we might be blocked and what I should try to diagnose or
resolve it?

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Shmuel (Seymour J.) Metz  
View profile
 More options Jun 6, 4:26 pm
Newsgroups: news.admin.net-abuse.blocklisting
From: "Shmuel (Seymour J.) Metz" <spamt...@library.lspace.org.invalid>
Date: Fri, 6 Jun 2008 20:26:17 GMT
Local: Fri, Jun 6 2008 4:26 pm
Subject: Re: CASE: C-679 E-271593
In <272e6a6b-a043-4083-8768-3e624275e...@a1g2000hsb.googlegroups.com>, on
06/06/2008
   at 01:12 AM, ea...@optonline.net said:

>I tried calling Verizon to see if they could help determine the
>reason for this listing but they said the PTR is controlled by
>netriplex.

Sure looks like verizon to me:

  nslookup -type=any 179.182.236.68.in-addr.arpa
  Server:  monroe.patriot.net
  Address:  209.249.176.5

  Non-authoritative answer:
  179.182.236.68.in-addr.arpa   name = monolith.veteransadvantage.com

  Authoritative answers can be found from:
  182.236.68.in-addr.arpa       nameserver = ns4.verizon.net
  182.236.68.in-addr.arpa       nameserver = ns1.bellatlantic.net
  182.236.68.in-addr.arpa       nameserver = ns2.verizon.net
  182.236.68.in-addr.arpa       nameserver = ns2.bellatlantic.net

>Any clues why we might be blocked and what I should try to diagnose or
>resolve it?

http://www.completewhois.com/cgi2/rbl_lookup.cgi?query=68.236.182.179...
doesn't show any hits? Have you tried asking your customers?

--
     Shmuel (Seymour J.) Metz, truly insane Spews puppet
     <http://patriot.net/~shmuel>

I reserve the right to publicly post or ridicule any abusive
E-mail. Reply to domain Patriot dot net user shmuel+news to contact
me.  Do not reply to spamt...@library.lspace.org

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
D. Stussy  
View profile
 More options Jun 6, 5:24 pm
Newsgroups: news.admin.net-abuse.blocklisting
From: "D. Stussy" <s...@bde-arc.ampr.org>
Date: Fri, 6 Jun 2008 21:24:19 GMT
Local: Fri, Jun 6 2008 5:24 pm
Subject: Re: CASE: C-679 E-271593
"Shmuel (Seymour J.) Metz" <spamt...@library.lspace.org.invalid> wrote in
message news:4849a99b$2$fuzhry+tra$mr2ice@news.patriot.net...
> In <272e6a6b-a043-4083-8768-3e624275e...@a1g2000hsb.googlegroups.com>, on

06/06/2008 at 01:12 AM, ea...@optonline.net said:

> >I tried calling Verizon to see if they could help determine the
> >reason for this listing but they said the PTR is controlled by
> >netriplex.

> Sure looks like verizon to me:
> ...
>   Authoritative answers can be found from:
>   182.236.68.in-addr.arpa       nameserver = ns4.verizon.net
>   182.236.68.in-addr.arpa       nameserver = ns1.bellatlantic.net
>   182.236.68.in-addr.arpa       nameserver = ns2.verizon.net
>   182.236.68.in-addr.arpa       nameserver = ns2.bellatlantic.net

Just because it's their servers doesn't mean they administer it.  There are
plenty of servers where third-party administrators control the domains
listed thereon.  This may be one of those cases.

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
ea...@optonline.net  
View profile
 More options Jun 9, 8:39 am
Newsgroups: news.admin.net-abuse.blocklisting
From: ea...@optonline.net
Date: Mon, 9 Jun 2008 12:39:18 GMT
Local: Mon, Jun 9 2008 8:39 am
Subject: Re: CASE: C-679 E-271593
On Jun 6, 4:26 pm, "Shmuel (Seymour J.) Metz"

I only see our server listed on APEWS. I'm new to this so when you say
"Have you tried asking your customers?" I've been contacting the email
server owners to see if they can give me assistance. From the reading
I've done it sounds like this might be a case of us being in a spammer
IP block. There are about 4 email domains that are still refusing our
mail so we have whittled it down. Is using a Smart Host a good
recommendation? Any other recommendations?

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
E-Mail Sent to this address will be added to the BlackLists  
View profile
 More options Jun 10, 8:03 am
Newsgroups: news.admin.net-abuse.blocklisting
From: E-Mail Sent to this address will be added to the BlackLists <N...@BlackList.Griffin-Technologies.invalid>
Date: Tue, 10 Jun 2008 12:03:23 GMT
Local: Tues, Jun 10 2008 8:03 am
Subject: Re: CASE: C-679 E-271593

ea...@optonline.net wrote:
> I only see our server listed on APEWS.

As you said in your first post,

> Oooops 68.236.182.179 is currently listed in APEWS :-(

> Entry matching your Query: E-271593
> 68.236.128.0/18

--^^^^^^^^^^^^^^^

That listing is for 68.236.128.0/18 (16384 IP addresses)

 {Which is part of 68.236.0.0/14 (IP 262144 addresses)
   Direct Allocation from ARIN to VRIS / Verizon Internet Services
    / verizon.net / bellatlantic.net / gnilink.net

  So, unless you are using 16k IP addresses on your server,
   and no one else is using those, ....

  {The IPs belong to Verizon, you are just renting one (or some)}.

 Below part of the APEWS record you posted mentions the listing
  is for your upstream ISP

> CASE: C-679
> AS19262 US, ISP permits abuse and/or ignores criminal activity

--^^^^^^^

AS19262 is VZGNI-TRANSIT
 / Verizon Internet Services / verizon.net / gnilink.net

APEWS seems to have issues with Verizon, not you specifically.

 It is likely that there is nothing you can do about the APEWS
   listing;  It is also likely that there is no need for you to
   do anything about the APEWS listing.

  If you are seeing mail being rejected, some of those rejects,
   bounces, DSNs, NDRs, ... are likely to mention the reason(s).

In the recent past that IP did apparently did emit some Spam
 (and there are apparently have been plenty of other sources
  of abuse in that same /24 e.g.

<http://www.projecthoneypot.org/i_6962cedf95daec3c7943eea23c871389>
 has two 419 Scams / Spams in the last 3 months from 68.236.182.179,

 Associated Harvesters: 65.67.1.219, 80.21.125.190

 Some other spamming IPs In The Neighborhood, 68.236.182.28, .30, .33,
  .34, .58, .101, .137, .215, .224, .229, ...

 I have also seen some of the IPs in same /24 as your IP
  in the CBL recently (which likely means unmanaged servers
  using IPs near the one you use, under the control of BotNet
  Spammers, ....)

 You also mentioned UCEprotect, at a glance, they have seen
  a few SpamTrap hits this week from the 68.236.128.0/18 CIDR
  the IP you are using is in.

 So, in some cases, messages from your IP may be trusted by
  the collective feeling about the neighbors your ISP has
  assigned to IPs near you, and how they have behaved in the
  past (and are currently behaving).

  If recipients of your messages really want / need / expect
   those messages from you, they will find a way to get them,
   if not, they likely don't really want your messages that badly.

--
E-Mail Sent to this address <BlackL...@Griffin-Technologies.net>
 will be added to the BlackLists.

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Shmuel (Seymour J.) Metz  
View profile
 More options Jun 13, 1:00 pm
Newsgroups: news.admin.net-abuse.blocklisting
From: "Shmuel (Seymour J.) Metz" <spamt...@library.lspace.org.invalid>
Date: Fri, 13 Jun 2008 17:00:27 GMT
Local: Fri, Jun 13 2008 1:00 pm
Subject: Re: CASE: C-679 E-271593
In <1f1127b1-a01e-4b0f-b0a9-4e0f2d8d2...@j22g2000hsf.googlegroups.com>, on
06/09/2008
   at 12:39 PM, ea...@optonline.net said:

>I only see our server listed on APEWS.

The text you quoted included "68.236.128.0/18"; that's 16 Li IP addresses,
a lot more than just one server.

>From the reading I've done it sounds like this might be a case of
>us being in a spammer IP block.

Yes.

>Is using a Smart Host a good recommendation?
>Any other recommendations?

Research any new IP address before you accept it. Look in
news.admin.net-abuse.sightings and also check with completewhois.

--
     Shmuel (Seymour J.) Metz, truly insane Spews puppet
     <http://patriot.net/~shmuel>

I reserve the right to publicly post or ridicule any abusive
E-mail. Reply to domain Patriot dot net user shmuel+news to contact
me.  Do not reply to spamt...@library.lspace.org

--
        Comments posted to news.admin.net-abuse.blocklisting
        are solely the responsibility of their author.  Please
        read the news.admin.net-abuse.blocklisting FAQ at
        http://www.blocklisting.com/faq.html before posting.


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »

Create a group - Google Groups - Google Home - Terms of Service - Privacy Policy
©2008 Google