help please! My new dedi server's IP keeps on getting listed on Spamhause CBL list. What to do? - GoFuckYourself.com

Horatio Caine · 12-18-2012, 03:35 PM

I have no idea why but it keeps on getting listed on spamhause. Server is brand new and I have no idea whats causing it? Any advice on what to do in this situation?

Barefootsies · 12-18-2012, 03:43 PM

Quote:

The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.

http://www.spamhaus.org/xbl/

Horatio Caine · 12-18-2012, 03:53 PM

Quote:

Originally Posted by Barefootsies

http://www.spamhaus.org/xbl/

I know where it is and I can request its removal, but I was wondering if there way to find out if there junk mail being sent from this box or what ever is the root problem and why in ends up listed on spamhause. Any idea?

Barefootsies · 12-18-2012, 03:56 PM

Quote:

Originally Posted by Horatio Caine

I know where it is and I can request its removal, but I was wondering if there way to find out if there junk mail being sent from this box or what ever is the root problem and why in ends up listed on spamhause. Any idea?

It sounds like your server, a database, script, or something on your server could be compromised. It happens. Especially with older scripts that are not kept updated (vBull as an example). I would advise you to contact your ISP (assuming you have managed support) to help you try and track down the source of the problem, and fix it.

mikesouth · 12-18-2012, 03:57 PM

if its a newly issued IP whoever had it before you was prolly doing evil shit with it...its a pain but you can get it removed

if its not newly issued your server has likely been compromised contact your hosting company and get it checked

mikesouth · 12-18-2012, 04:00 PM

on second thought contact them either way they can get it removed more easily than you can and if its a new server its their responsibility should be clear within 12 hrs if they get right on it

Horatio Caine · 12-18-2012, 04:34 PM

Quote:

Originally Posted by Barefootsies

It sounds like your server, a database, script, or something on your server could be compromised. It happens. Especially with older scripts that are not kept updated (vBull as an example). I would advise you to contact your ISP (assuming you have managed support) to help you try and track down the source of the problem, and fix it.

Would any logs in my Direct Admin show it? Just looked in mail logs and didn't see anything suspicious.

I guess I'll need to hire someone to scan this box like Mike said.

Sons of bitches...

mikesouth · 12-18-2012, 04:52 PM

you shouldnt have to hire anyone your hosting company should do this free of charge they are the one gave you the blacklisted IP addy

baddog · 12-18-2012, 04:54 PM

Probably from whomever had it last. Contact your host. It should not cost anything, if it does, time to get a new host.

Supz · 12-18-2012, 05:14 PM

Quote:

Originally Posted by baddog

Probably from whomever had it last. Contact your host. It should not cost anything, if it does, time to get a new host.

What he said.

AdultPornMasta · 12-18-2012, 05:46 PM

Quote:

Originally Posted by Horatio Caine

I have no idea why but it keeps on getting listed on spamhause. Server is brand new and I have no idea whats causing it? Any advice on what to do in this situation?

The people at Spamhaus are psychotics and in the pay of others.

They even consider double-opt-in mailing to be spam.

Who is paying them?

http://forums.cpanel.net/f5/spamhaus...rs-277261.html

http://www.devost.net/2007/01/28/spa...-net-citizens/

http://www.zdnet.com/spamhaus-must-p...rt-4010024310/

Spamhaus sucks big gree doinkey dicks!

baddog · 12-18-2012, 05:47 PM

Quote:

Originally Posted by pornopete

Ask your host for a different IP

Well, if one is, nothing to say the next isn't. But you can try that too.

baddog · 12-18-2012, 05:56 PM

Quote:

Originally Posted by AdultPornMasta

The people at Spamhaus are psychotics and in the pay of others.

They even consider double-opt-in mailing to be spam.

Who is paying them?

http://forums.cpanel.net/f5/spamhaus...rs-277261.html

http://www.devost.net/2007/01/28/spa...-net-citizens/

http://www.zdnet.com/spamhaus-must-p...rt-4010024310/

Spamhaus sucks big gree doinkey dicks!

You should read the 3rd and 4th responses on http://forums.cpanel.net/f5/spamhaus...rs-277261.html not just the complaint. That guy was an idiot and did not get it at all.

iSpyCams · 12-18-2012, 06:07 PM

Yeah this sucks I have blacklisted myself twice from gmail by using a gmail as my admin contact for WP installs. Gmail decides my new comment notifications are spam, then blacklists my ip for sending so much spam. Happens every 6 months or so. Best solution: change IP address and dont use gmail for WP.

AndrewX · 12-18-2012, 08:35 PM

What's your IP or website with the most scripts? I'll run a vulnerability scan from our servers if you like.

12-18-2012, 03:35 PM	#1
Horatio Caine full-time aspiring rapper Industry Role: Join Date: Aug 2012 Location: Compton, CA Posts: 5,746	help please! My new dedi server's IP keeps on getting listed on Spamhause CBL list. What to do? I have no idea why but it keeps on getting listed on spamhause. Server is brand new and I have no idea whats causing it? Any advice on what to do in this situation?

12-18-2012, 03:57 PM	#5
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	if its a newly issued IP whoever had it before you was prolly doing evil shit with it...its a pain but you can get it removed if its not newly issued your server has likely been compromised contact your hosting company and get it checked __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

12-18-2012, 04:00 PM	#6
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	on second thought contact them either way they can get it removed more easily than you can and if its a new server its their responsibility should be clear within 12 hrs if they get right on it __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

12-18-2012, 04:52 PM	#8
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	you shouldnt have to hire anyone your hosting company should do this free of charge they are the one gave you the blacklisted IP addy __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

12-18-2012, 08:35 PM	#15
AndrewX Confirmed User Industry Role: Join Date: Jan 2004 Posts: 574	What's your IP or website with the most scripts? I'll run a vulnerability scan from our servers if you like. __________________ █ ► XenLayer - Paravirtualization Professionals since 2008 - [ICQ: 297820698] █ ► Reseller Hosting \| OpenVZ VPS \| XEN VPS \| Dedicated Servers

12-18-2012, 04:54 PM	#9
baddog So Fucking Banned Industry Role: Join Date: Apr 2001 Location: the beach, SoCal Posts: 107,089	Probably from whomever had it last. Contact your host. It should not cost anything, if it does, time to get a new host.

12-18-2012, 06:07 PM	#14
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	Yeah this sucks I have blacklisted myself twice from gmail by using a gmail as my admin contact for WP installs. Gmail decides my new comment notifications are spam, then blacklists my ip for sending so much spam. Happens every 6 months or so. Best solution: change IP address and dont use gmail for WP.