| Posted by new2world, 02-14-2016, 04:04 AM | |
Hi,
Can any one share their usa hosting isp spam list. I am trying to block all the spam hosting isps. So sharing will make huge list
Nobis Technology Group, LLC
Ubiquity Server Solutions
OVH Hosting
EGIhosting
Colocrossing
Webexxpurts
Bermantech
Enzu
LeaseWeb
Hetzner Online AG
Kindly let me know, if any one of you have list for such companies.
Thanks
Last edited by new2world; 02-14-2016 at 04:10 AM.
|
| Posted by Silvatech, 02-14-2016, 04:14 AM | |
for colo crossing I would follow this thread.
http://www.webhostingtalk.com/showthread.php?t=1314693
|
| Posted by net, 02-14-2016, 04:45 AM | |
Are you saying those providers are spammers? No, I do not think so.
If you want to block all spammers, then you should block the entire internet.
Providers/ISP do not spam but some of their clients do even from known ISP.
|
| Posted by DeltaAnime, 02-14-2016, 05:42 AM | |
It's more what ISP's will make deals to allow spammers on their ranges or don't deal with abuse complaints.
On the list the OP gave there's at least 4 providers that had large spam contracts that only stopped doing it after getting fully blacklisted by spamhaus. The usual outbursts about spamhaus not understanding the "new markets" were obviously muttered by each and every one of them.
Francisco
|
| Posted by net, 02-14-2016, 06:10 AM | |
I know colocrossing is known for spammers camp but I am talking about the others which are very strict when it comes to spamming. So, including everyone in the list is a very bad idea. The way I see it is he didn't do the intensive research about them. His choice of course.
|
| Posted by DeltaAnime, 02-14-2016, 06:38 AM | |
Well, if he blocked it/auto spam foldered all of their ranges it wouldn't be the end of the world. If the OP iptables it, well, that's another story all together
Francisco
|
| Posted by kpmedia, 02-14-2016, 09:20 AM | |
These have always pissed me off the most:
- Colocrossing = worst offender, has many aliases
- EGI Hosting
- Krypt Technologies
- Psychz Network
- VolumeDrive
- Wholesale Internet Inc
- Secure Servers
- HostNOC/Burst/Digiplus = good riddance!
- OVH
- Peg Tech Inc
Tons and tons of $hit comes from their IP ranges. I outright blocked several of them. And it's not just email spam, but forum spam, blog spam, malware, hack attempts, etc.
|
| Posted by vps_newbie, 02-14-2016, 03:59 PM | |
The problem is that anyone who offers hosting can get a bad customer who sends spam. Even if the provider cuts off the spam (and the customer) quickly, they may still find that the IP address got blacklisted. It is especially bad for shared hosting companies, where one spammer can blacklist the shared email server for all of the other innocent customers.
One problem with the OP's request is that spam is so dynamic. Any list you create will become quickly obsolete.
|
| Posted by DeltaAnime, 02-14-2016, 06:32 PM | |
There's a difference between "We had a few bad eggs" and "We willingly sell to spammers and rotate their space when they get blacklisted".
Francisco
|
| Posted by vps_newbie, 02-14-2016, 07:05 PM | |
Agreed, but figuring out which is which is not so easy.
|
| Posted by oldgrunt, 02-14-2016, 07:23 PM | |
What's worse to me is allowing scammers. People all over losing money and having problems so someone can make a few bucks on a server. Can't understand it.
|
| Posted by ElixantTechnology, 02-14-2016, 07:45 PM | |
I would be careful blocking entire ISPs, as you may lost quite a bit of legitimate traffic. I notice OVH on the list, keep in mind that OVH has hardware based protection for outgoing SPAM which blocks any emails with a SPAM core of 100 or higher from exiting their network and automatically blocks Port 25 on offending servers..
Colo Crossing however I can vouch for the negative traffic that originates from their network. We not only see large amounts of email spam from them, but numerous attempts of port scanning and brute force attacks.
|
| Posted by WII-Aaron, 02-14-2016, 09:08 PM | |
Here is a list of the top 10 worst ISPs for Spam:
https://www.spamhaus.org/statistics/networks/
|
| Posted by DeltaAnime, 02-14-2016, 09:43 PM | |
Top 10 worst ISP's to spam spamhaus addresses*.
A large chunk of the spammers these days have scrubbed their lists or stick to providers that don't report to Spamhaus (Comcast, Verizon, Hotmail, Gmail, etc).
Francisco
|
| Posted by WII-Aaron, 02-14-2016, 09:54 PM | |
The OP is looking for lists. I provided one, just like the others in the thread. Do you have one to contribute?
|
| Posted by hetzner_OL, 02-15-2016, 05:17 AM | |
Dear new2world,
Hetzner Online takes reports about spam very seriously. We have recently created a full-time position to deal exclusively with the spamming problem. Please, whenever you receive spam from an IP hosted by us, send us a mail at abuse@hetzner.de and make sure to include details about the spam. For example, you can attach the spam mail with the header. Our abuse department will then work to resolve the problem as soon as possible. --Katie, Marketing, Hetzner Online
|
| Posted by Silvatech, 02-15-2016, 12:12 PM | |
That is good to know, I will make sure to email you if I get any spam ,brute attacks etc.
|
| Posted by kpmedia, 02-16-2016, 02:12 AM | |
You can block http without blocking smtp. I do that for some bad hosts.
Others need everything blocked.
In some instances, I firewall a whole country, because they're not my demographic.
I rarely have issues with Hetzner anymore.
However, it's because I blocked many of your IP ranges in CloudFlare (prevent http access), as your network is abused by DDoS attackers and (to a lesser extent) forum/comment spammers. There's almost zero legit reason for a server to connect to another server via http. And no, I don't care about VPN users.
But email spam isn't really an issue.
Last edited by kpmedia; 02-16-2016 at 02:18 AM.
|
| Posted by new2world, 02-16-2016, 09:39 AM | |
Thank you guys for putting up such a great list. I have search for the hosts as well and found out that most of the vpn uses these of the ISP hosting provider the first post list + this list :
Canada|
OVH Systems
France|
Free SAS
Germany|
Leaseweb Germany GmbH
IS-Fun Internet Services
Hong Kong |
Pacswitch Globe Telecom
SoftLayer Dutch Holdings B.V
EDIS Gmb
Luxembourg|
root SA
Netherlands|
LeaseWeb B.V
Ecatel LTD
NForce Entertainment B.V
Romania|
Voxility S.R.L
Singapore|
SoftLayer Dutch Holdings B.V
Sweden|
Sweden Dedicated
Switzerland|
Private Layer Inc
UK|
UK Dedicated Servers Limited
UK2 - Ltd
USA|
Swiftway Communications
SoftLayer Technologies
WholeSale Internet
Secured Servers LLC
RamNode LLC
Choopa, LLC
Secured Private Network
SoftLayer Technologies
Ip address for all the above host and specifically to the countries mention above can be found
http://bgp.he.net/cc
Place the company name in the search and list will come up. Just wanted to update this thread so that other can fight against it or atleast low down the spam to better level
Thanks.
|
| Posted by domainbop, 02-16-2016, 10:22 AM | |
No block list would be complete without the addition of Ecatel (which is in the process of rebranding to Quasi Networks and moved its corporate headquarters to the Seychelles) AS29073
Hotmail in the past few weeks has become a major problem again with Gmail a close second. Comcast business is one of the largest US sources of brute force attacks, port scanning, etc (must be all those Windows users with infected PCs) . Blocking the ASNs of giant ISPs obviously isn't an option if you're running a business since a large percentage of customers use these services.
Related to the OP's post: CSF firewall recently added a new feature that lets you block by ASN which should make it easy for anyone who wants to block an entire provider's range
|
| Posted by Mr Terrence, 02-16-2016, 10:29 AM | |
Spam will come from pretty much every ISP you can think of not only the few listed on this thread.
|
| Posted by Andei, 02-16-2016, 10:32 AM | |
Exactly.
Besides blocking entire ISPs is often a bad idea, in my opinion, since you may end up blocking legit traffic/emails.
|
| Posted by new2world, 02-16-2016, 11:06 AM | |
Of course, spam can come from any ISP. Even I can spam with my own ISP but what I am talking about is common available source of spam like VPN(most of the vpn provider 1 week trial with 60-100 ips using above companies), proxies etc. For example, I never got an email from this LeaseWeb ip but got lots of spam. Situation may be vary for individuals. Blocking entire ISP is may be bad idea but blocking hosting ISP provider and specific server like from Canada|OVH Systems. Wouldn't hurt the traffic for sure. Just my thinking, could be wrong in this. But I fight a lot with the spam and came to this result
Thank you all of you guys.
|
| Posted by salso, 03-03-2016, 03:15 PM | |
This particular one? Yes, that is all they are.
https://www.spamhaus.org/sbl/listings/colocrossing.com
|
| Posted by salso, 03-08-2016, 11:18 AM | |
Another /16
That's a pretty big block of IP's.
Jon?
|
| Posted by spamblocker, 04-14-2016, 09:23 AM | |
It is very hard to believe this. Our servers receive a lot of spam from hetzner and if we block ip addresses, hetzner just rotate these to other ip address spaces.
We also receive a large amount of spam to our honeybot addresses. It is always the same, spam hosters say "we take spamming very seriously", but then ask endless number of evidence and whatever you do, nothing happens.
|
| Posted by WWS2010, 04-16-2016, 09:41 PM | |
That's not the Hetzner i know. They are very strict and always quick to suspend spammers, for real.
|
|
 Add to Favourites
 Print this Article
|
