Related posts
At CompanyV we take spam very seriously – we don’t let our customers send it and we try and keep it out of their “In Boxes” as well.
Now and then a host out there gets my attention in a big way – MEGAMAILSERVERS is one of those.
We had been blocking almost all of their servers for spam a few years ago – they had a bad reputation that got worse and we never had any complaints from our customers not being able to get mail from those servers. The only company more blocked by us was Softlayer Technologies!
UNTIL last year
One by one I started setting allows and noticing the reputation of the IP range was actually improving – I was happy!
Then we got a slew of requests to set allows – again the reputation was ok and the IP addresses were not on any public black lists so in APRIL – I lifted them all out of our block list.
One of the reasons we had blocked all of the mail servers belonging to megamailservers was a technical glitch in the configuration of the servers themselves.
When you configure a mail server you set it up according to various (SMTP) – Simple Mail Transfer Protocol that make the communication with other servers informative and actually polite – a server greets another server – they shake hands and exchange bits of information about who is who and the sending server says I have a message for a user named “so_and_so – the receiving server looks at its acceptable users and if that username@ does not exist it replies with what is known and a “nouser” response. The sending server is supposed to basically stop then say thanks and leave to send a notification back to the original sender that that user does not exist.
For protocol references also see: rfc2821 (April 2001) which obsoleted the original rfc821 ( October 2008)
What the megamailservers do is ignore that nouser response. and then they continue to persistently and endlessly pound on the recipient servers.
I have tried – calling and sending emails to abuse and tech support and customer support and the responses were silly to annoying to useless.
My email
I sent this email after calling the number of the IP owner according to Whois
To: support@24hourwebhostingsupport.com
Cc: postmaster@megamailservers.com ; abuse@megamailservers.com
Sent: Wednesday, May 01, 2013 9:12 PM
Subject: Abuse from ‘209.235.143.14’ ‘209.235.143.13’
Hello
I spoke with someone named Dave earlier today and per his request I sent a report to ‘support@24hourwebhostingsupport.com’ regarding our mail servers being bombarded by spam from 2 megamailserver IP addresses.
I have not heard from anyone regarding this issue.
Our servers are continuing to be bombarded by your servers – your servers ignore nouser responses
See attached for recent logs from the server.
We have all blocked mail from
mailrelay7.megamailservers.com [209.235.143.13]
and
mailrelay8.megamailservers.com [209.235.143.14]
If you cannot respond to us via email please use the contact form here:or contact us via phone:
Debbie Mitchell
(personal email removed for we posting)
310.388.8123 x 1
www.CompanyV.com
I had attached server logs which clearly showed the dialogue between megamail servers and our servers – any systems administrator who manages a mail server would have immediately understood what they were looking at.
The first response:
From: 24hourwebhostingsupport [mailto:mail@24hourwebhostingsupport.com]
Sent: Wednesday, May 01, 2013 6:35 PM
To: DebbieM
Subject: Re: Abuse from ‘209.235.143.14’ ‘209.235.143.13’Hello Debbie,
Thank you for contacting 24HourWebHosting Technical Support!
In order for us to be able to investigate your issue further, can you please provide us your domain name?
We are available 24 hours a day, 7 days a week for additional assistance, and invite you to contact us if you have any additional concerns.
Regards,John Mark B
Technical Support Specialist
24hourwebhostingsupport.com
mail@24hourwebhostingsupport.comTo assist us in serving you better, please do not delete any portion of the Technical Support Specialist correspondences.
My response:
From: DebbieM
To: ’24hourwebhostingsupport’
Cc: companyv.tech@companyv.com ; postmaster@megamailservers.com ; abuse@megamailservers.com
Sent: Wednesday, May 01, 2013 9:44 PM
Subject: RE: Abuse from ‘209.235.143.14’ ‘209.235.143.13’Hello John
I am not a hosting customer – I do not have a domain on your system.I spoke with someone named Dave earlier today and per his request I sent a report to ‘support@24hourwebhostingsupport.com’
regarding our mail servers being bombarded by spam from 2 megamailserver IP addresses.We (companyv.com)
are mail hosting provider mail is being sent from your servers to our customers
in particular there is a bombardment of mail to root@xxxxxxxx.com (removed domain for posting here)Our servers are continuing to be bombarded by your servers – your servers ignore nouser responses
See attached for recent logs from the server.We have all blocked mail from
mailrelay7.megamailservers.com [209.235.143.13]
and
mailrelay8.megamailservers.com [209.235.143.14]If you cannot respond to us via email please use the contact form here:
or contact us via phone:
Debbie Mitchell
(personal email removed for we posting)
310.388.8123 x 1
www.CompanyV.com
sigh – so hopefully you understand – the email was being sent to a user that did not exist – so our server was refusing it –
THEY REPLY:
Hello Debbie,
Thank you for contacting 24HourWebHosting Technical Support!
We apologize for the inconvenience this has caused you. We kindly ask you to please provide us sample copies of the email that were sent to root@barnstormingdesigns.com for further investigation. Please provide them i .eml format. We are always looking forward to assist you.
We are available 24 hours a day, 7 days a week for additional assistance, and invite you to contact us if you have any additional concerns.
Regards,
Ryan D.
Technical Support Specialist
24hourwebhostingsupport.com
mail@24hourwebhostingsupport.comTo assist us in serving you better, please do not delete any portion of the Technical Support Specialist correspondences.
OMG !
SO I sent another email and more server logs and I started trying to figure out who else I might contact to resolve this.
A funny thing – they are a lot of companies!
24hourwebhostingsupport.com
is also
Hostopia.com, Inc.
http://www.hostopia.com/
and is also
Aplus.net Internet Services
Phone: (877) 275-8763 Fax: (866) 584-5948
110 E Broward Blvd Ste 1650,
Fort Lauderdale, FL 33301
Addresses http://www.aplus.net
Additional Web Addresses
And is also:
http://www.usahosting.com
http://www.usahosting.com/billingfaq.html
Please make your check payable to “Internet Names for Business Inc.” and mail to the address below. Please ensure to include your USAhosting.com customer number or your domain name to ensure payment is applied appropriately.
Internet Names for Business Inc.
110 East Broward Blvd.
Suite 1650
Fort Lauderdale, FL
33301
Our technical support experts are open 24/7, and our billing specialists are available to talk Monday – Friday, 8 am – 8 pm EDT. Please give us a call at 1-866-584-5952, we’re looking forward to hearing from you!
They are also a hosting company in VietNam: matbao.com
Registrant:
Internet Names for Business domain@matbao.com +1.8008530954 +84.948468558
Internet Names for Business
Suite 1650, 110 East Broward Blvd
Fort Lauderdale,FL,US 33301
AKA
Domain Name:congtylamweb.net
Record last updated at 2012-02-02 23:16:11
Record created on 5/30/2011
Record expired on 11/13/2021
congtylamweb.net has an ip address of 216.185.118.234
Which is
Global Datacenter SNG-216-185-118-0-24 (NET-216-185-118-0-1) 216.185.118.0 – 216.185.118.255
ThePlanet.com Internet Services, Inc. NETBLK-THEPLANET-BLK-3 (NET-216-185-96-0-1) 216.185.96.0 – 216.185.127.255
ThePlanet.com is 66.228.118.58
SoftLayer Technologies Inc. SOFTLAYER-4-1-DAL01 (NET-66-228-118-0-1) 66.228.118.0 – 66.228.118.255
SoftLayer Technologies Inc. SOFTLAYER-4-1 (NET-66-228-112-0-1) 66.228.112.0 – 66.228.127.255
SOFTLAYER and ThePlanet – arghhhh!
I have been blocking Softlayer IP addresses for a very long time as well.
MY HEAD IS SPINNING – not to mention all the small square dents from hitting the keyboard!
They have a terrible reputation for being a spam farm!
http://www.spamhaus.org/sbl/listings/softlayer.com
More notes – if you are still with me here!
Domain servers in listed order:
ns1.matbao.com ns2.matbao.com
Administrator:
Suite 1650, 110 East Broward Blvd
Fort Lauderdale
FL,
US
33301
name:(Internet Names for Business)
mail:(domain@matbao.com) +1.8008530954
+84.948468558
Internet Names for Business
Technical Contactor:
Suite 1650, 110 East Broward Blvd
Fort Lauderdale
FL,
US
33301
name:(Internet Names for Business)
mail:(domain@matbao.com) +1.8008530954
+84.948468558
Internet Names for Business
Billing Contactor:
Suite 1650, 110 East Broward Blvd
Fort Lauderdale
FL,
US
33301
name:(Internet Names for Business)
mail:(domain@matbao.com) +1.8008530954
+84.948468558
Internet Names for Business
Registration Service Provider:
name:Vietnam Domain Registration Supplier 4
tel:+84.88680060
fax:+84.88680083
web:http://vdrs.net
24hourwebhostingsupport.com
24hourwebhostingsupport.com has address 216.251.43.17
24hourwebhostingsupport.com mail is handled by 10 mx1c1.megamailservers.com.
24hourwebhostingsupport.com mail is handled by 100 mx2c1.megamailservers.com.
24hourwebhostingsupport.com mail is handled by 110 mx3c1.megamailservers.com.
host Hostopia.com
Hostopia.com has address 64.29.145.20
Hostopia.com has IPv6 address 2001:1810:4002:0:64:29:145:20
Hostopia.com mail is handled by 100 mx2c1a.megamailservers.com.
Hostopia.com mail is handled by 150 mx3c1a.megamailservers.com.
Hostopia.com mail is handled by 10 mx1c1a.megamailservers.com.
host aplus.net
aplus.net has address 64.29.145.20
aplus.net mail is handled by 110 mx3c40.carrierzone.com.
aplus.net mail is handled by 10 mx1c40.carrierzone.com.
aplus.net mail is handled by 100 mx2c40.carrierzone.com.
carrierzone.com is 64.29.145.48
NetRange: 64.29.144.0 – 64.29.159.255
OrgName: InternetNamesForBusiness.com
OrgId: INFB
Address: 110 East Broward Blvd
Address: Suite 1650
City: Fort Lauderdale
Registrant:
Internet Names for Business +1.5555555555 +84.948468558
Internet Names for Business
Suite 1650, 110 East Broward Blvd
Fort Lauderdale,FL,US 33301
Domain Name:thietkewebsitedulich.net
Record last updated at
Record created on 5/29/2011
Record expired on 11/13/2021
Domain servers in listed order:
ns2.meganameservers.com ns3.meganameservers.com
Administrator:
Name– Internet Names for Business
EMail-: ()
tel –: +1.5555555555
fax: +84.948468558
org: Internet Names for Business
Suite 1650, 110 East Broward Blvd
Fort Lauderdale,FL,US 33301
Technical Contactor:
Name– Internet Names for Business
EMail-: ()
tel –: +1.5555555555
fax: +84.948468558
org: Internet Names for Business
Suite 1650, 110 East Broward Blvd
Fort Lauderdale,FL,US 33301
Billing Contactor:
Name– Internet Names for Business
EMail-: ()
tel –: +1.5555555555
fax: +84.948468558
org: Internet Names for Business
Suite 1650, 110 East Broward Blvd
Fort Lauderdale,FL,US 33301
Registration Service Provider:
name: Vietnam Domain Registration Supplier 4
tel: +84.88680060
fax: +84.88680083
web:http://vdrs.net
Fictitious Name Detail
Fictitious Name
INTERNETNAMESFORBUSINESS.COM
Filing Information
Registration Number G12000002029
Status ACTIVE
Filed Date 01/06/2012
Expiration Date 12/31/2017
Current Owners 1
County BROWARD
Total Pages 1
Events Filed NONE
FEI/EIN Number 65-1036866
Mailing Address
110 E BROWARD BLVD #1650
FORT LAUDERDALE, FL 33301
Owner Information
HOSTOPIA.COM INC
110 E BROWARD BLVD #1650
FORT LAUDERDALE, FL 33301
FEI/EIN Number: 65-1036866
Document Number: F00000004897