amuck-landowner

Poor IP Reputation from Client Abuse

BuzzzHost

New Member
One of the things that really gets under my skin as a vps provider is that when people simply abuse their leased IP address and then complain about being on several blacklist. It's very poor that people behave this way but this is something web must accept.
 

MannDude

Just a dude
vpsBoard Founder
Moderator
Unfortunately it's a fact of life. Suspend, clean up, and if it happens again provide them a backup and kindly show them the door. Develop a low tolerance for these folks as they're only going to cause you headache down the road. Get some decent monitoring in place so you can catch them before it's too late.
 

AMDbuilder

Active Member
Verified Provider
You wouldn't keep someone abusing node resources around, why keep someone abusing the IP resources around?
 

BuzzzHost

New Member
Client's on our Cloud are governed by an hourly outgoing email factor. We do suspend user's automatically who reaches the server's peek allowance. I am speaking of client's whom are on a VPS who do not have to abide by these limits initially.. We base things upon the complaints received and monitoring tools but no matter what you do, people are going to SPAM.
 

nunim

VPS Junkie
It frustrates me when a VPS or email account is compromised and used to send SPAM, then the clients try to demand fresh IP's because they're on a blacklist.  That and people bitching about their mail going into SPAM because according to them, their marketing emails aren't SPAM...
 

drmike

100% Tier-1 Gogent
SPAM remains a big problem.

Usually the real big league spammers have crazy spending habits.  It's recognizable easily.   They often deposit a good bit of extra money, buy a good bit of resources.   Big spenders, and this is why lots of providers look the other way.

Trick as a provider is to get ToS and AUP read and understood up front.  Ideally initialed as part of the buy process.  Filed for safe keeping also.  In such should be hefty penalties for spamming... Say $250+.  Tier it up for 2nd and 3rd offenses.  That should cover their notorious cash on hand, on your books as well as be legitimate reason for doing such.

As for the IPs, similar dance step.  Charge users for such a change $10?   If the prior IPs are found to be on lists for bad behavior $100. Tier it up also.

Downside is you scare some folks who probably are iffy to start with - away.  Upside is these issues go elsewhere and leave you to legitimate business.
 

nunim

VPS Junkie
If anyone has any convenient tool to scan entire subnet's that'd be great.
I don't know of one but it's easy enough to write a bash script to use rblcheck.

Here ya go:

There's a billion SBL/RBL so obviously you can't check them all but you can run this and if you get any hits you could always run that IP in MXToolBox or one of the others that checks 100+ lists.

Code:
#!/bin/bash
## RBLChecker
## v.0.1 ~ sonicboxes.com
## Depends on rblcheck
###########################
##subnet/24 to check, without last octet
IP="74.125.239"
## inset date/time into log
date +"%X - %x" >> rblchecker.log
COUNTER=0
## run check
while [ $COUNTER -lt 254 ]
do 
	COUNTER=$((COUNTER + 1))
	## check and report to rblchecker.log if found
	rblcheck -q "$IP"."$COUNTER" >> rblchecker.log
	sleep 2
done
## finish
clear
echo " !!  RBLChecker Is Finished  !!"
echo "   Review rblchecker.log For Results"
 
Last edited by a moderator:

TruvisT

Server Management Specialist
Verified Provider
We ask for faxed CC information and that instantly dropped spam and abuse. They spam. We have a signed contract allowing us to legally charge their card for clean up fees. :)
 

BuzzzHost

New Member
We ask for faxed CC information and that instantly dropped spam and abuse. They spam. We have a signed contract allowing us to legally charge their card for clean up fees. :)
Hmm, that is a unique approach.. Money is certainly a sure way to reach people's nerves.
 

blergh

New Member
Verified Provider
We ask for faxed CC information and that instantly dropped spam and abuse. They spam. We have a signed contract allowing us to legally charge their card for clean up fees. :)
That sounds nuts, whoever would be willing to agree to that is plain stupid. Now I am not defending spammers or any kind of abusive users, but giving my CC-info for some host to keep in a unencrypted-environment? How about nope.
 

NodeWest-Dan

New Member
I'm almost sure that keeping a written copy on file of a CC number is against some sort of regulation in the US. I know for a fact retail stores can't use the carbon swipers any more.
 

SkylarM

Well-Known Member
Verified Provider
I'm almost sure that keeping a written copy on file of a CC number is against some sort of regulation in the US. I know for a fact retail stores can't use the carbon swipers any more.
There was a discussion about it a while ago, I forget the exact details but either Master Card or Visa has a rule where a business cannot refuse service if a customer declines to show the physical card to the business? Technically you could lose processing privileges for doing so.
 

NodeWest-Dan

New Member
There was a discussion about it a while ago, I forget the exact details but either Master Card or Visa has a rule where a business cannot refuse service if a customer declines to show the physical card to the business? Technically you could lose processing privileges for doing so.
You can show it. They just aren't allowed to store it on paper.
 

Kakashi

Active Member
Verified Provider
We use : FreeBlacklistMonitor.com (paid account) It's like $10 a month or something and will keep an eye on entire subnets. 

It's worked out pretty well for us allowing us to fix up IP's even before the Datacenter pokes us about them.
 
Top
amuck-landowner