My IP is blacklisted

[crkm51]

Hi

I cannot access a particular domain (Easily.uk) and a website I have hosted by Easily. Technical Support at Easily say this is because my IP is blacklisted and that I must contact Virginmedia to get the blacklist removed

MX Tools https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a80.6.112.212&run=toolpage

tells me the IP address is blacklisted by Barracuda, SORBS DUHL, Spamhaus ZEN.

I am having no problem accessing any other site on the internet. I am having no problem with email.

Please advise

Thanks in advance for your help.

Christie Marrian

[Anonymous]

The Dynamic User and Host List (DUHL) is similar to other D.U.L. lists, however, a lot of others are actually Dial-Up Lists. The SORBS DUHL is a list of net blocks that the address space is Dynamically assigned to users and hosts, which makes identification of spam sources a little more difficult.

As the address is part of a dynamic range it will be listed on there. Along with every ISP with non static IPs.

If your host is blocking people based on this list they are stupid as they are blocking every UK ISP pretty much.

[jem101 · Accepted solution]

I’m really struggling to work out exactly what’s actually going on here, because someone has got things really wrong!

Firstly the three lists, the SORBS DUHL and Spamhaus ZEN lists are entire ranges of dynamic IP addresses owned and leased out by VM, my IP address are on those lists as if every single VM customer - as they should be. There was no ‘issue’ back in 2008, that’ll be when VM assigned the entire IP range as usable by their customers and hence it would have been listed as dynamic addresses.

That being said, I can access Easily’s website and your Real Tennis website so evidently inclusion on those lists don’t block anything.

The Barracuda list, I’m not on, but just like the other two, it is intended for Spam filtering, if you see emails coming from those addresses, they are probably a bit dodgy and should be blocked - not for anything else.

Your IP address (which you inadvertently exposed in your opening post) is on the Barracuda list for ‘poor reputation’ - fine, again this is intended for blocking known or suspected spam sources.

So I can see two options

a) For some reason Easily are using the Barracuda list to block you - which is frankly daft but you can request a delisting your self which even if you end up getting listed again, should give you sufficient time to get your data out.

or 

b) Easily have blocked you for some other reason and they are just giving you an excuse that you are on these blacklists.

Personally my money’s on b)

Other than the Barracuda list, you should be on these lists and absolutely won’t be taken off of them, even if VM were to request it (and they won’t), it would be politely declined.

[crkm51]

@Jem101 Thanks for the info. I'm struggling too!

Thanks for confirming you can access Easily & curtc.net. I assumed I couldn't be the only person with an ip address on these blacklists and its good to have that confirmed.

As to a) I agree and I'm now using a different IP address which is not on Barracuda's blacklist and I still cannot connect.

So it must be b)

The question is why...

I posted the e-mail from Easily in which they state the reason my VM IP address is blocked is because the IP address is on the blacklists so I have to assume that is indeed the reason. They also sent me the screen shot from mxtoolbox showing the blacklists

The only thing I can think off is that I access Easily and curtc.net more often than other users (I'm the admin for curtc.net) and do a fair amount of uploading (new content) and downloading (back-ups etc). So maybe the 'algorithm' being used by Easily adapts to the amount of traffic from an IP address. BTW, these problems started in March this year and prior to that I've had no problems accessing Easily or maintaining the website.

I did get through to VM yesterday and, with them, I did a traceroute to identify where the blocking occurs. VM has escalated the issue and indicated they would be able to resolve the issue in 48 hours. My fingers are crossed but I'm not holding my breath...

Thanks again

Christie

[ALF28]

I also have a blacklisted IP address, my ip address was changed recently by virgin and the new one is blacklisted-

 Barracuda, SORBS DUHL, Spamhaus ZEN, RATS Dyna

Not sure why this should be but virgin have swopped me to a blacklisted ip address.

My computer is clean on antivirus checks, so strange i should have this blacklisting.

It does not seem to affect me but some websites sometimes will not connect.

Looking at the replies virgin have no answers except sort it out yourself?

Sorbs dulhl is often listed but the other 3 are new to me.

This indicates either spam issues or computer malware or both.

alf28

[ALF28]

blacklisted ip

one solution is to use a vpn which hides your own ip address should any connection issues or email issues occur

see   Why is My IP Address Blacklisted ? (and How Do I fix it!) - Residential IP Address Proxies

alf28

[ALF28]

RATS Dyna-  so why am I on this list????   is it normal or not.

You should start with WHY did it happen. There are lots of reasons and I wont go in detail but usually is:

• bad configuration (no PTR records, missing SPF, missing DKIM )

• actual spamming (host got infected and started blasting viagra emails )

• new domains sending emails too soon (this might sound weird but from my experience i've seen that a domain must have at least 14 days around to be able to send mails that wont go directly into spam, gmail would flag that as spam most of the time

Spam Rats! - RATS-Dyna

[ALF28]

why have I got this????

More Information About Spamhaus Zen

Inclusion in the Spamhaus-ZEN Blacklist results from sub-listings in one more the following Blacklists:

• CBL - You have contracted a Virus or Malware that is operating a Botnet, either on your email server on a workstation behind the NAT - Continual delisting requests without eliminating the virus will result in permanent blacklisting;
• XBL (Spamhaus Exploits Block List) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies;
• PBL - Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.

Spamhaus Zen Reports Dynamic Ip Addresses

Dynamic-based Blacklists will list many DHCP ranges of IP Addresses from Internet Service Providers. You could be listed if your IP Address was previously dynamically assigned, or if your ISP gave you a static assignment and did not assign a distinguished PTR-Record, aka a "Reverse DNS Entry."

[ALF28]

why have I got this- I do not send spam-  but I do receive spam??

More Information About Barracuda

Listing in the Barracuda Blacklist could indicate any number of issues that need to be addressed in your network including but not limited to: virus-generated spam, poor server configuration, dynamic IP Addresses previously used by spammers, bulk mail sending that does not comply with the CAN-SPAM Act.

Barracuda Reports Sources Of Spam

Spam-based Blacklists are those that will list either single IP Addresses or entire ranges that have actually received Spam, i.e. Unsolicited Bulk Email (UBE) in their Spamtraps from an IP-Address. This could be a result of a compromised email account, an Open Relay, or simply sending mass emails / marketing and not following best practices according to the "CAN-SPAM Act of 2003" (ref: https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003)

Barracuda Requires A Manual Delisting Request

This blacklist does support a manual request to remove or delist your IP Address from their database. Please note that removal requests that are submitted without addressing the core problem will likely result in your IP Address or Domain being relisted in that database, which can cause subsequent problems and extended listing periods without release.

More information about BARRACUDA can be found at their website: http://barracudacentral.org/rbl

[ALF28]

why have i got this???? or do all virgin ip addresses have this  ???

More Information About Sorbs Duhl

The SORBS (Spam and Open Relay Blocking System), owned and operated by Proofpoint, Inc., provides free access to its DNS-based Block List (DNSBL) to effectively block email from more than 12 million host servers known to disseminate spam, phishing attacks and other forms of malicious email. The list typically includes email servers suspected of sending or relaying spam, servers that have been hacked and hijacked, and those with Trojan infestations. In an attempt to provide preemptive protection, SORBS also lists servers with dynamically allocated IP addresses.

Sorbs Duhl Reports Subnets

Subnet-based Blacklists are used to reject email from entire ranges of IP Addresses, i.e. providers that are hosting companies sending spam, as well as single IP Addresses that may fall in that range of IP Address.

Sorbs Duhl Reports Dynamic Ip Addresses

Dynamic-based Blacklists will list many DHCP ranges of IP Addresses from Internet Service Providers. You could be listed if your IP Address was previously dynamically assigned, or if your ISP gave you a static assignment and did not assign a distinguished PTR-Record, aka a "Reverse DNS Entry."

Sorbs Duhl Requires A Manual Delisting Request

This blacklist does support a manual request to remove or delist your IP Address from their database. Please note that removal requests that are submitted without addressing the core problem will likely result in your IP Address or Domain being relisted in that database, which can cause subsequent problems and extended listing periods without release.

More information about SORBS DUHL can be found at their website: http://www.sorbs.net/lookup.shtml

[gary_dexter]

Ask the people black listing you why they’ve done it.

Only they will have the answers.