Announcement

Collapse
No announcement yet.

Server is Blocked

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Server is Blocked

    Hi

    One of my customers recently reported that his site (and mine) were being blocked by his works' filter, giving the error message:

    "Page cannot be displayed
    Based on your corporate access policies this website (www....) has been blocked because it has been determined by Web Reputation Filters to be a security threat to your computer or corporate network.
    This website has been associated with Malware/Spyware.
    Threat type: other malware
    Threat reason
    IP address is either verified as a bot or has misconfigured DNS"

    He was obviously concerned and contacted me. I realise this may be a company issue of "over zealous filtering", however, I obviously needed to do some checks myself before giving him that reason.

    It would appear that that there is a valid reason for the company to have blocked the IP. When I ran the IP check at; Scan IP Addresses for Malicious Activity, Exploits, Malware and Spam. I found that there is suspicious activity and the server is listed as SUSPICIOUS due to CBL Abuseat - the result of which can be seen here: CBL Lookup for 78.129.128.40

    Please note the comments:
    "IP Address 78.129.128.40 is listed in the CBL. It appears to be infected with a spam sending trojan or proxy."

    ...and

    "ONLY the hosting company can fix these infections properly."

    Now whilst I am happy to suggest my client contact his company's IT admin, I don't want to look like an idiot by saying there is nothing wrong when seemingly there is.

    I would very much appreciate a full and frank answer to this problem.

    Am I on a suspicious server or not and are more of my clients sites being blocked?

    It would appear that this is an ongoing problem. (see CBL part - "It has been relisted following a previous removal at 2011-11-04 19:33 GMT (7 days, 19 hours, 9 minutes ago))

    Extremely Worrying...
    Last edited by Bud Boy; 12-11-2011, 17:40.

  • #2
    Originally posted by Bud Boy View Post
    Hi

    One of my customers recently reported that his site (and mine) were being blocked by his works' filter, giving the error message:

    "Page cannot be displayed
    Based on your corporate access policies this website (www....) has been blocked because it has been determined by Web Reputation Filters to be a security threat to your computer or corporate network.
    This website has been associated with Malware/Spyware.
    Threat type: other malware
    Threat reason
    IP address is either verified as a bot or has misconfigured DNS"

    He was obviously concerned and contacted me. I realise this may be a company issue of "over zealous filtering", however, I obviously needed to do some checks myself before giving him that reason.

    It would appear that that there is a valid reason for the company to have blocked the IP. When I ran the IP check at; Scan IP Addresses for Malicious Activity, Exploits, Malware and Spam. I found that there is suspicious activity and the server is listed as SUSPICIOUS due to CBL Abuseat - the result of which can be seen here: CBL Lookup for 78.129.128.40

    Please note the comments:
    "IP Address 78.129.128.40 is listed in the CBL. It appears to be infected with a spam sending trojan or proxy."

    ...and

    "ONLY the hosting company can fix these infections properly."

    Now whilst I am happy to suggest my client contact his company's IT admin, I don't want to look like an idiot by saying there is nothing wrong when seemingly there is.

    I would very much appreciate a full and frank answer to this problem.

    Am I on a suspicious server or not and are more of my clients sites being blocked?

    It would appear that this is an ongoing problem. (see CBL part - "It has been relisted following a previous removal at 2011-11-04 19:33 GMT (7 days, 19 hours, 9 minutes ago))

    Extremely Worrying...
    Could you be kind enough to provide me the ticket number to our support department please ?

    Thanks
    Ray

    Comment


    • #3
      Hi Ray

      I did already contact Live Support who said there wasn't a problem

      Ticket now raised: #NPX-914-25633

      Thanks

      Comment


      • #4
        Originally posted by Bud Boy View Post
        Hi Ray

        I did already contact Live Support who said there wasn't a problem

        Ticket now raised: #NPX-914-25633

        Thanks
        I will have a Linux tech check this out for you.

        Thanks,
        Ray

        Comment


        • #5
          Hello,

          I have replied the ticket NPX-914-25633. Kindly have a look once.

          As I have already mentioned in the ticket, IP 78.129.128.40 is blocked in the CBL for the mailing purpose which is already replaced with another IP to ensure proper functioning of emails.

          The websites can be browsed without any problem with the IP 78.129.128.40.

          The server is always monitored and we never let a culprit go if found responsible for any suspicious activities on the server.

          Thanks,
          Ambrose S

          Comment

          Working...
          X