Process for checking IP ranges issued.

[drmike]

Lots of providers here...

What do folks do, where you aren't owning your own IPs, but depending on DC for issuance to check such are clean?

Seems to be reoccurring problem for a lot of folks getting upstream pre-soiled IPs issued and then clients end up eating crap from it and whole ticket insanity happens and snowballs out of control.

Someone have a tool they recommend to check ranges up front?   

 

[Francisco]

Hosts should do their own due diligence when it comes to picking datacenters anyway.

- Are you finding plenty of that DC's IP's on stopforumspam ?

- When you search "<datacenter name> spam" on google, does it come up with walls of links?

- Are they know to be receptive about abuse on their network?

- Are they on any of the larger mail RBLs (spamhaus, baracudda, etc)?

People shouldn't host with dirty datacenters then get upset when their mail gets blocked or their subnets are part of dirty host listings? We see it all the time where some DC's just don't care and have straight up said "Yeah, that happens, I guess you can try to get them delisted yourself".

Francisco

 

[john]

SenderBase will allow you to check larger block sizes.

freeblacklistmonitor is a good tool for actively monitoring blocks. 

 

[DomainBop]

Adding to the list of places to check, you can also check by AS on CleanTalk before signing up with a DC.  If you see a provider who has a high spam rate  (pointing my finger upstate at a DC with an 85.33% spam rate) then you shouldn't be surprised when you get assigned a bunch of dirty IPs.

https://cleantalk.org/blacklists/ASxxxxx

Hosts should do their own due diligence when it comes to picking datacenters anyway.

They should do their due diligence, but a large percentage of small providers pick DCs the same way low end customers pick providers "OMG, I read the bad reviews, but the deal was too good to pass up!" which is the only reason some of these crap magnet datacenters stay in business.

Seems to be reoccurring problem for a lot of folks getting upstream pre-soiled IPs issued and then clients end up eating crap from it and whole ticket insanity happens and snowballs out of control.

Refer to the above statements on due diligence.  I don't have a lot of sympathy for people who aren't willing to do the necessary research when making important business decisions.  All of those problems those providers are experiencing could have been easily avoided by doing a little manual leg work before signing on the dotted line.

 

[caceyjones]

I dont know if this is what you're looking for but its one of my favorites

http://multirbl.valli.org/

 

[AMDbuilder]

I dont know if this is what you're looking for but its one of my favorites

http://multirbl.valli.org/

That's also one of my favorites, however it's limited to per address instead of blocks.  If you are checking a larger block say a /22, you are going to spend a long time on their site.

 

[mojeda]

Adding to the list of places to check, you can also check by AS on CleanTalk before signing up with a DC.  If you see a provider who has a high spam rate  (pointing my finger upstate at a DC with an 85.33% spam rate) then you shouldn't be surprised when you get assigned a bunch of dirty IPs.

https://cleantalk.org/blacklists/ASxxxxx

That was the first and only time he acknowledge that

 

[SkylarM]

Detected IPs are just IPs that hit their system at some point. We have ~35k IPs and it says we have ~300 IPs. Great way to track down forum/blog spammers though

 

[PortCTL]

That was the first and only time he acknowledge that

It never happened though if you question him about it.

 

[VPS4LESS]

just get your own ip from Arin it not hard only cost $500 a year /22 thats what i did i never have to worry about ip;s being clean or dirty.

 

[Shoaib_A]

just get your own ip from Arin it not hard only cost $500 a year /22 thats what i did i never have to worry about ip;s being clean or dirty.

I hope that was only a suggestion for hosting companies to get their own IPs directly from RIPE/ARIN rather than an open invitation for spammers to sign up with your company

 

[cspacews]

I hope that was only a suggestion for hosting companies to get their own IPs directly from RIPE/ARIN rather than an open invitation for spammers to sign up with your company

Uh? No.

What you could do is keep a bunch of 10-15 or so IPs for these tricky spammy clients. Keep banning and rotating these would help you from saving the other ones.

Simple Fraud check or Profile check should give you the answer who should be given what IP.