Bashed

Well-Known Member
Dec 18, 2013
143
4
68
cPanel Access Level
Root Administrator
Spamhaus has blacklisted a /24 of mine that has a few dozen different clients. I have asked them to show me proof of evidence of spam and explained there are several different long term clients on self managed VPS servers.

This is the response I get in return from Mike Anderson at Spamhaus after telling him that there's at least 20+ clients on one /24 subnet and SH has not provided anything for me to trace by:

Which user is using the IPs xxxx.xxx.32.49 and xxx.xxx.32.236 and most of the ones in between? That's the spammer.
Anyone else think this is ridiculous? How is a host supposed to trace a spammer in this situation when there's at least 20+ customers all on virtual servers and none of them are even new signups?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
4,453
561
273
cPanel Access Level
Root Administrator
Hey there! It would be nice if they provided some more details, especially when blacklisting a range of IPs like that. The subject line or sender would definitely be helpful to narrow that down.

While you may be familiar with these already, these articles share tools for tracking down spammers:


I would have also replied to Spamhaus asking for more specifics, since they decided to block that range of IPs.

It's also worthwhile to make sure that "Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak)" is set to "On" in WHM >> Tweak Settings to help prevent automated or compromised scripts from sending messages.
 

Bashed

Well-Known Member
Dec 18, 2013
143
4
68
cPanel Access Level
Root Administrator
I would have also replied to Spamhaus asking for more specifics, since they decided to block that range of IPs.
Did you even read my OP at all? I made it clear I asked him for details and the response I got was ridiculous.

Hey there! It would be nice if they provided some more details, especially when blacklisting a range of IPs like that. The subject line or sender would definitely be helpful to narrow that down.
I'm guessing you're just trolling. Subject line of what when I have no details even after asking SH for details?