VPS: Who's Responsible For IP Address Spam Delisting
Sep 6, 2008
I am registered with a well known unmanaged VPS provider around here. My IP got listed on Spamhous - actually a whole /24 block is listed, somebody else is doing malware activity and I got the blame as well, since my IP belongs to this block...
Anyway, I've sent a message to the VPS support, saying the story and giving the relevant spamhous listing URLs.
The support's answer was that I should either contact them or wait a couple of days and if this situation is not cleared, contact them (i.e. the VPS) again.
Should *I* contact Spamhous? Is this normal practice in the VPS industry? What about the real IP causing the trouble - if that guy continous his malware activity, what would I gain even if I contact Spamhous?
Is this my issue or VPS provider's issue?
View 6 Replies
ADVERTISEMENT
Dec 24, 2007
I want to get a VPS to hold my sites and the websites i build for people.
I'm not sure about what happens if a client uploads something they shouldnt - be it porn, warez or whatever.
As a server owner, do i risk getting in trouble? Or am i simply the contact person .
I can't check every file that people might upload.
View 1 Replies
View Related
Jun 28, 2007
For future reference whats the best way to show whos using up too much resources such as CPU, RAM etc...
View 2 Replies
View Related
Apr 12, 2007
Recently ive gone through lot's of providers, and my latest one computhings.co.uk (was recommended) has recently lost support (their license expired) and my domain is having problems!
I tried a tracert to track the problem and i get an error in resolving the domain name. My DNS servers are set to where they should be, and i can get to the servers via a web browser (ns1/ns2) but when accessing my domain i get a server not found.
Is this my fault or their fault? As if its mine i will hang on and if its theirs im moving servers today!
View 3 Replies
View Related
Apr 2, 2007
We've migrated our WHM/CPanel server over to a new set of IP's and for some reason I can't connect to them without using a public proxy, this even includes the providers website now. I can't figure out exactly who is responsible and where the point of failure is exactly...
Traceroute/ping from my home location to the old server (which works)...
---
traceroute to 85.17.13.20 (85.17.13.20), 64 hops max, 40 byte packets
1 192.168.0.1 (192.168.0.1) 1.303 ms 0.872 ms 0.302 ms
2 10.209.128.1 (10.209.128.1) 10.084 ms 8.325 ms 12.404 ms
3 s10-2.cr01-knwk.wa.charter.com (68.186.73.13) 9.361 ms 28.299 ms 10.369 ms
4 68.186.73.49 (68.186.73.49) 19.083 ms 25.163 ms 9.095 ms
5 12.127.79.29 (12.127.79.29) 15.992 ms 30.138 ms 13.872 ms
6 12.127.6.30 (12.127.6.30) 39.046 ms 60.329 ms 23.623 ms
7 12.122.86.45 (12.122.86.45) 14.747 ms 24.446 ms 34.399 ms
8 br1-a350s5.attga.ip.att.net (192.205.33.238) 25.601 ms 21.799 ms 37.404 ms
9 te2-1-10g.ar2.ams1.gblx.net (67.17.92.153) 170.920 ms 170.827 ms 171.122 ms
10 64.213.76.150 (64.213.76.150) 170.045 ms 169.986 ms 175.025 ms
11 62.212.95.146 (62.212.95.146) 178.002 ms 178.664 ms 177.936 ms
12 novosibirsk.v-unix.sbp.attikh.net (85.17.9.244) 182.034 ms 178.866 ms 179.335 ms
13 rakebacknation.com (85.17.13.20) 179.246 ms 181.997 ms 189.018 ms
---
Ping has started ...
PING 85.17.13.20 (85.17.13.20): 56 data bytes
64 bytes from 85.17.13.20: icmp_seq=0 ttl=48 time=178.690 ms
--- 85.17.13.20 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/stddev = 178.690/178.690/178.690/0.000 ms
---
Traceroute/ping from my home location to the new server (which fails)...
---
traceroute to 77.235.37.113 (77.235.37.113), 64 hops max, 40 byte packets
1 192.168.0.1 (192.168.0.1) 7.087 ms 0.303 ms 0.203 ms
2 10.209.128.1 (10.209.128.1) 18.712 ms 38.402 ms 11.605 ms
3 s10-2.cr01-knwk.wa.charter.com (68.186.73.13) 33.955 ms 41.386 ms 13.996 ms
4 68.186.73.49 (68.186.73.49) 26.398 ms 13.656 ms 20.702 ms
5 12.127.79.29 (12.127.79.29) 12.477 ms 28.289 ms 20.980 ms
6 12.127.6.30 (12.127.6.30) 27.392 ms 19.994 ms 17.067 ms
7 12.127.6.61 (12.127.6.61) 23.416 ms 15.131 ms 14.724 ms
8 192.205.33.114 (192.205.33.114) 21.345 ms 15.118 ms 16.140 ms
9 so-0-0-0.cr2.sea1.us.above.net (64.125.28.186) 16.115 ms 29.307 ms 17.559 ms
10 so-2-0-0.cr2.ord2.us.above.net (64.125.30.222) 72.402 ms 70.323 ms 75.338 ms
11 so-1-1-0.mpr2.lga5.us.above.net (64.125.27.34) 88.384 ms 88.768 ms 88.345 ms
12 so-0-0-0.mpr1.lga5.us.above.net (64.125.27.237) 94.959 ms 86.645 ms 90.357 ms
13 so-7-0-0.mpr3.ams1.nl.above.net (64.125.27.186) 172.967 ms 207.672 ms 201.681 ms
14 ge1-1.sr1.esy.nl.leaseweb.net (82.98.247.34) 169.246 ms 166.772 ms 166.667 ms
15 * * *
16 * * *
17 * * *
//
64 * * *
---
Ping has started ...
PING 77.235.37.113 (77.235.37.113): 56 data bytes
--- 77.235.37.113 ping statistics ---
1 packets transmitted, 0 packets received, 100% packet loss
---
Traceroute/ping from dnsstuff to the old server (which works)...
---
HopT1T2T3BestGraphIPHostnameDistTTLCtryTime
19111.3 ms
66.36.240.2 AS14361
HOPONE-DCA c-vl102-d1.acc.dca2.hopone.net. 255USUnix: 20:35:48. 71
26151.3 ms [+0ms]
66.36.224.232 AS0
IANA-RSVD-0 gec2.core1.dca2.hopone.net. 0 miles [+0]254USUnix: 21:35:29. 17
312211.3 ms [+0ms]
66.36.224.18 AS0
IANA-RSVD-0 ge3-0.core1.iad1.hopone.net. 0 miles [+0]253USUnix: 20:37:31.545
41211.7 ms [+0ms]
206.223.115.86 AS2914
NTTA-2914 ge-4-1-0.mpr1.iad10.us.mfnx.net. 0 miles [+0]251USUnix: 20:35:08.131
51231.9 ms [+0ms]
64.125.30.118 AS6461
MFNX so-4-0-0.mpr1.iad2.us.above.net. 0 miles [+0]250USUnix: 20:35:08.163
64222.4 ms [+0ms]
64.125.27.74 AS6461
MFNX so-6-0-0.mpr1.iad5.us.above.net. 0 miles [+0]249USUnix: 20:35:08.195
72242.5 ms [+0ms]
64.125.29.229 AS6461
MFNX so-4-0-0.mpr1.iad1.us.above.net. 0 miles [+0]248USUnix: 20:35:08.227
83333.0 ms [+0ms]
64.125.28.125 AS6461
MFNX so-1-0-0.mpr1.dca2.us.above.net. 0 miles [+0]247USUnix: 20:35:08.261
9123747474 ms [+71ms]
64.125.27.58 AS6461
MFNX so-0-1-0.mpr1.lhr2.uk.above.net. 0 miles [+0]246USUnix: 20:35:08.429
1092899089 ms [+14ms]
64.125.27.178 AS6461
MFNX so-7-0-0.mpr1.ams5.nl.above.net. 0 miles [+0]249USUnix: 20:35:08.486
11100909090 ms [+0ms]
64.125.31.190 AS6461
MFNX so-4-0-0.cr2.ams2.nl.above.net. 0 miles [+0]249USUnix: 20:35:08.549
12102929090 ms [+0ms]
82.98.242.162 AS6461
MFNX gi3-0.r1.sbp.leaseweb.net. 0 miles [+0]248DEUnix: 20:35:08.602
1391909190 ms [+0ms]
85.17.9.244 AS16265
LEASEWEB novosibirsk.v-unix.sbp.attikh.net. 0 miles [+0]56NLUnix: 20:35:09.147
14124909090 ms [+0ms]
85.17.13.20 ASN=16265[Destination Unreachable] rakebacknation.com. 0 miles [+0]56 Unix: 20:35:09.196
15***99999 ms [+99909ms]
[Unknown][Unknown - Firewall did not respond] -1 miles [+0] 0 miles [+0]
16***99999 ms [+0ms]
[Unknown][Unknown - Firewall did not respond] -1 miles [+0]
---
Pinging 85.17.13.20 [85.17.13.20]:
Ping #1: Got reply from 85.17.13.20 in 90ms [TTL=56]
Ping #2: Got reply from 85.17.13.20 in 91ms [TTL=56]
Ping #3: Got reply from 85.17.13.20 in 89ms [TTL=56]
Ping #4: Got reply from 85.17.13.20 in 90ms [TTL=56]
Variation: 2.0ms (+/- 2%)
Shortest Time: 89ms
Average: 90ms
Longest Time: 91ms
Done pinging 85.17.13.20!
---
Traceroute/ping from dnsstuff to the new server (which works)...
---
HopT1T2T3BestGraphIPHostnameDistTTLCtryTime
11000.8 ms
66.36.240.2 AS14361
HOPONE-DCA c-vl102-d1.acc.dca2.hopone.net. 255USUnix: 20:17:56.686
20020.8 ms [+0ms]
66.36.224.232 AS0
IANA-RSVD-0 gec2.core1.dca2.hopone.net. 0 miles [+0]254USUnix: 21:17:37.642
35211.6 ms [+0ms]
66.36.224.18 AS0
IANA-RSVD-0 ge3-0.core1.iad1.hopone.net. 0 miles [+0]253USUnix: 20:19:40.257
42421.6 ms [+0ms]
206.223.115.86 AS2914
NTTA-2914 ge-4-1-0.mpr1.iad10.us.mfnx.net. 0 miles [+0]251USUnix: 20:17:16.839
56121.6 ms [+0ms]
64.125.30.118 AS6461
MFNX so-4-0-0.mpr1.iad2.us.above.net. 0 miles [+0]250USUnix: 20:17:16.879
62352.1 ms [+0ms]
64.125.29.133 AS6461
MFNX so-4-0-0.mpr2.iad1.us.above.net. 0 miles [+0]249USUnix: 20:17:16.906
733822.1 ms [+0ms]
64.125.27.210 AS6461
MFNX so-1-0-0.mpr2.dca2.us.above.net. 0 miles [+0]248USUnix: 20:17:16.975
876837474 ms [+72ms]
64.125.27.166 AS6461
MFNX so-0-1-0.mpr1.lhr3.uk.above.net. 0 miles [+0]247USUnix: 20:17:17.107
9104888683 ms [+8ms]
64.125.27.221 AS6461
MFNX so-1-0-0.mpr3.ams1.nl.above.net. 0 miles [+0]250USUnix: 20:17:17.208
10108858583 ms [+0ms]
82.98.247.34 AS6461
MFNX ge1-1.sr1.esy.nl.leaseweb.net. 0 miles [+0]251DEUnix: 20:17:17.241
11108838383 ms [+0ms]
77.235.33.50 AS0
IANA-RSVD-0 gianna.v-unix.esy.attikh.net. 0 miles [+0]59GRUnix: 20:19:10.519
1293**93 ms [+9ms]
77.235.37.113 AS0
IANA-RSVD-0
[Reached Destination]77.235.37.113 [No PTR] 59GRUnix: 20:19:10.550
---
Pinging 77.235.37.113 [77.235.37.113]:
Ping #1: Got reply from 77.235.37.113 in 84ms [TTL=59]
Ping #2: Got reply from 77.235.37.113 in 84ms [TTL=59]
Ping #3: Got reply from 77.235.37.113 in 83ms [TTL=59]
Ping #4: Got reply from 77.235.37.113 in 83ms [TTL=59]
Variation: 1.2ms (+/- 1%)
Shortest Time: 83ms
Average: 83ms
Longest Time: 84ms
Done pinging 77.235.37.113!
---
I tried pinging from the new server to 68.186.73.13 since that's showing on the traceroute path, then to 71.83.224.13 (which is the IP my router reports as it's WAN address).
---
root@alpha7 [~]# ping -c 1 68.186.73.13
PING 68.186.73.13 (68.186.73.13) 56(84) bytes of data.
--- 68.186.73.13 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms
---
root@alpha7 [~]# ping -c 1 71.83.224.131
PING 71.83.224.131 (71.83.224.131) 56(84) bytes of data.
From 12.127.79.30 icmp_seq=0 Packet filtered
--- 71.83.224.131 ping statistics ---
1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms
, pipe 2
---
I tried pinging from the old server to 68.186.73.13 since that's showing on the traceroute path, then to 71.83.224.13 (which is the IP my router reports as it's WAN address).
---
root@old [~]# ping -c 1 68.186.73.13
PING 68.186.73.13 (68.186.73.13) 56(84) bytes of data.
64 bytes from 68.186.73.13: icmp_seq=0 ttl=245 time=170 ms
--- 68.186.73.13 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 170.487/170.487/170.487/0.000 ms, pipe 2
---
root@old [~]# ping -c 1 71.83.224.131
PING 71.83.224.131 (71.83.224.131) 56(84) bytes of data.
64 bytes from 71.83.224.131: icmp_seq=0 ttl=53 time=179 ms
--- 71.83.224.131 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 179.271/179.271/179.271/0.000 ms, pipe 2
---
View 4 Replies
View Related
Nov 24, 2008
One of my clients is receiving spam from his email address. SpamAssassin is not marking it as spam. I have added an SPF record for the domain, but still gets these messages. Is there any workaround for this? I don't want to activate spambox for that.
Server is cPanel + CentOS 5.2
View 9 Replies
View Related
Dec 18, 2008
My server was abused by spammers and now it is blocked. How do I change this? CentOS 5.2 Cpanel/WHM 11.
View 4 Replies
View Related
Dec 10, 2008
we are receiving a new type of spam emails in most of the domains hosted on different servers. In this type of spam emails, the From address is the same as the To address and is of the user who is receiving the emails. For example, a@abc.com is sending email to a@abc.com which is not originating from the server. However, since the From Address is the same as the To address, it fools the antispam and the emails are delivered as genuine emails. Has anybody else faced the same problem lately? Does anybody have as workaround to stop these type of spam emails?
View 10 Replies
View Related
Jun 11, 2008
I have configured qmail+spamassassin. It working find but still I have 2 problem. I am receiving spam mails from my own account to my own account e.g. from=info@domain.com to info@domain.com. How can I block this spam?
View 2 Replies
View Related
Apr 3, 2015
Almost all mail adresses on my server is getting a spam mail from same mail marketing company everyday and i want to block them... Normally i just add the mail address to blacklist from "Spam Filter Settings" but this company is opening new addresses everyday and it is impossible to add all of them to blacklist so i need adding it as a regex to the blacklist...
The company i am talking about is opening mail addresses every day like below...
nrt150401@hotmail.com
nrt150402@gmail.com
nrt150403@yandex.com
nrt150404@mynet.com
As you can see all mail addresses begin with "nrt"+"6 digits of day"+"free mail provider", so right now i am using the regex below and it is already added to the blacklist but they are still able to send me... What can i do now?
View 3 Replies
View Related
Feb 6, 2015
My customer has an external facing Apache server that is acting as a reverse proxy to two internal applications. They have:
- external addresses for each app which resolve to different ip addresses, so app1.their_domain.com and app2.their_domain.com resolve to 77.3.170.10 and 77.3.170.11 respectively.
- the Apache server has two network interfaces with ip addresses 192.168.10.10 and 192.168.10.11
- the external ip addresses resolve to the above internal addresses
- the firewall between the Apache server and the internal app servers is configured to allow traffic from 192.168.10.10 to reach app_server1, and traffic from 192.168.10.11 to reach app_server2, both using port 7777.
I have configured a virtual host in httpd.conf for each ip, i.e.
Code:
<VirtualHost 192.168.10.10:80>
...
ProxyPass /app http://app_server1:7777/app
ProxyPassReverse /app http://app_server1:7777/app
RewriteRule ^/$ /app/app1 [R,L]
...
<VirtualHost>
and
Code:
<VirtualHost 192.168.10.11:80>
...
ProxyPass /app http://app_server2:7777/app
ProxyPassReverse /app http://app_server2:7777/app
RewriteRule ^/$ /app/app2 [R,L]
...
<VirtualHost>
This works fine in that the external address are being routed to the correct application, however the firewall is blocking requests to the second app as it appears the requests are coming from the Apache servers 'primary' ip address 192.168.10.10 instead of 192.168.10.11.
Is it possible to send requests using the ip address from the relevant VirtualHost?
Windows server 2008
Apache 2.2
View 1 Replies
View Related
Aug 4, 2008
I am using virtuozzo firewall to secure access.
I enter 58.27.175.211/255.255.255.0 for Source Address and Netmask for port 22.
But still I can connect using 58.181.103.217 or 58.27.151.120.
Second is it possible to enter two different ip address in source address?
View 4 Replies
View Related
Jul 26, 2007
I just bought a new ip address and want to setup this new ip as my server's main ip, making the 'existing main ip' as the secondary ip.
Which means, this new ip will be the server's default ip address for all services, including when connecting to other server.
I'm using CentOs 4.5 and swsoft's panels: HSPcomplete & Virtuozzo Power Panel, and Webmin.
View 1 Replies
View Related
Oct 17, 2013
Microsoft Windows Server 2008 R2 Service Pack 1
Panel version 11.0.9 Update #59, last updated at Oct 3, 2013 02:06 AM
MailEnable version 5
I see in the plesk documentation that the screen to enable SPAM filtering for an individual there is an option to "Move spam to the Spam folder". I don't see that option so I am wondering if it is only available on some versions of Plesk, or in combination with certain mail servers. How to make that option available?
View 3 Replies
View Related
Nov 8, 2007
I want to redirect a website to a particular URL so that the address bar shows the same URL and not the destination URL. I know it is possible via URL masking, however, I want it in such a way that whenever somebody clicks on any link in the website, the address bar should still show the original URL. To put it in simple words, Suppose I want to redirect [url] to [url]. Now if there is a link named contact/index.htm and somebody clicks on it the address bar should display [url]and not redirect to [url]
How can it be possible using URL Rewrite method in .htaccess file?
View 2 Replies
View Related
Aug 4, 2007
The problem usually goes like this:
- I can't access the webserver
- I'll try to restart httpd, and I'll get
Starting httpd: (98)Address already in use: make_sock: could not bind to address [::]:443
To fix this, I run
[root@www1 ~]# lsof -i tcp:443
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
perl 11307 apache 4u IPv6 476943447 TCP *:https (LISTEN)
There is always leftover process that is causing the restart to fail. Once i force kill the process, I am able to restart httpd properly.
Now it is ok if this just occurs once in a while, but this problem keeps repeating itself almost everyday at 4am server time (cron time?). What can I do to permanently fix this?
View 5 Replies
View Related
Dec 20, 2008
to understand everything about hosting services.
What is IP address?
View 6 Replies
View Related
Jun 6, 2008
I have new ip range and must add to server.
How can add this ip address to server with ssh access?
View 2 Replies
View Related
Aug 2, 2008
How many MAC addresses does a system will have and what are they?
If more than one MAC address will be there, then which MAC address is constant one, so that nobody can change it?
Somebody told me that there will be two MAC addresses, one is of Hardware's and second one is of CPU's. Is it correct?
View 1 Replies
View Related
Aug 29, 2007
My new host give me 1 ip to register for both (ns1 & ns2) nameserver. Is that correct?
Ex-host always gave me 2 ip's.
View 6 Replies
View Related
May 21, 2007
Im looking for a good IP address locator, I have already tryed a couplde such as Visula Route, but it just plain sucks. Im also looking for a good program to monitor packets. any sugestions?
View 0 Replies
View Related
Nov 25, 2008
I have a question is a Dedicated IP on a shared sever any better than just being on there with out a Dedicated IP.Im new to all this.
View 12 Replies
View Related
May 21, 2009
about adding IP addresses to cPanel.
I've added 8 IP's to my WHM, and I am slightly confused...
I moved one domain to the new IP address and it worked fine after 15 minutes. I then moved another to a new IP address and it did not work after waiting over 30 minutes. The only difference between the two accounts is one account has 2 domains attached to it and one has about 15 domains attached to it.
If I just were to leave it sitting and wait would it switch to the new IP?
I would have no problem with waiting except for the fact that it resolves to the "cPanel/WHM is now installed" screen, rather then the website.
View 5 Replies
View Related
Mar 16, 2009
I have a valid ssl certificate for the website but it still shows address not found error. But sometimes it just works fine.
is it related to dns issue?
View 6 Replies
View Related
Oct 25, 2009
thinking about adding web hosting to my reseller account. Can anyone tell me the difference between an IP address and a domain. If they are different who actually owns the domain and who owns the IP address?
View 9 Replies
View Related
Apr 14, 2008
i keep going down the list trying to figure out why im having so much trouble and then i noticed....
from a remote computer, every once in a while (every other day) when i type in my servers static ip i get all this information about my server and a page with stats and mac adresses. when i add the directory of my main website on the end of the adress i get a unique "pge under construction" page.
but then other times i just get absolutely nothing, generic "page not found". i kept messing with my name servers and godaddy trying to get this right but if i cant even access the server through the ip what could be happening?
View 2 Replies
View Related
