Jump to content

LIQUIDWEB, SOURCEDNS


n4af
 Share

Recommended Posts

Looks like liquid web has been a blackhat for a LONG time.

My question is I keep reporting the same sequence of email origination:

Tracking message source: 67.227.164.146:

Routing details for 67.227.164.146

[refresh/show] Cached whois for 67.227.164.146 : abuse[at]liquidweb.com

Using abuse net on abuse[at]liquidweb.com

abuse net liquidweb.com = admin[at]sourcedns.com, ipadmin[at]liquidweb.com, abuse[at]sourcedns.com, lisa[at]webclickhosting.com

Using best contacts admin[at]sourcedns.com ipadmin[at]liquidweb.com abuse[at]sourcedns.com lisa[at]webclickhosting.com

Yum, this spam is fresh!

Message is 0 hours old

67.227.164.146 not listed in cbl.abuseat.org

67.227.164.146 not listed in dnsbl.sorbs.net

67.227.164.146 not listed in accredit.habeas.com

67.227.164.146 not listed in plus.bondedsender.org

67.227.164.146 not listed in iadb.isipp.com

How is it conceivable/possible in this universe that they are not on a B.L. ???

Is it worth continuing to report them ???

I guess I do not understand how this works, gotta believe I am not the only one reporting this steady string of spam. BlackLotus and CC, I understand but how does the above ORIGINATOR of spam stay off the list ????

Is there any value to keep reporting them ???

Thanks, Howard

Link to comment
Share on other sites

Moved again. Lking had responded to this saying something like all reports contribute towards getting the individual IP addresses on the blocklist (if/once there is sufficient weight against those addresses). That post seems to have been lost in transition to the "new" forum.

Part of the story is that the ratio of spam to regular mail handled by that IP comes into the consideration. Another part is that spam hitting SC spamtraps has much more weight than member reports - if the spam is avoiding spamtraps it will need (at least) several members reporting the same IP within a short timespan, one of the order of 2 days. SCbl listings when they do occur are of short duration once the spam stops being reported. It is always a good idea to keep reporting, if able to do so. Stopping will considerably reduce the liklihood of 'bad' IP addresses being listed or of keeping them listed once their (comparatively excessive) spam activity has 'earned' them listing.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...