SpamRATS

Lookup

Information about 1.2.3.4

Below is the information we have on record about 1.2.3.4

Standards Compliance

Does IP Address resolve to a reverse hostname... Failed! Please read the below note!

Note!

You ONLY need to remove the IP Address from our list if you are running an outgoing mail server. If you are NOT running an email server, then this should not affect you from sending email, however you should ask your provider to provide reverse DNS as it can affect other services as well.

If it is affecting your ability to send emails, you should escalate this to your email provider, as the problem may with their email server.

And if you ARE running an email server, your server does not have a reverse DNS entry.

This does not conform to 'Best Practices' recommendations for Network Operators, and Email administration, and as such is much more likely to be a access point, from which Trojans and Bots are being used to send Spam.

You should first of course ensure that the problem that got your IP detected in the first place, (i.e. infected PC's or a Spam leakage) gets rectified, however once this is done you should contact your upstream provider or change the reverse DNS yourselves to something more suitable.

According to 'Best Practices' guidelines, the host name of an IP Address used to send email should resolve to the responsible parties domain. In this case, the host name resolves to your upstream provider, who aren't responsible for the mail server at that location. Simple changing the reverse DNS to something like:

e.g..

mail.your_domain.com

-- or --

gateway.your_domain.com

Once this is done, it would allow the IP Address to be removed, and also prevent the spread of Spam from Trojans and bots. You may need to wait for the DNS change to propagate before removal.

Thank you.

Does IP Address comply with reverse hostname naming convention... Not checked!

List Status

RATS-Dyna - On the list. Worst Offender Alert.

RATS-NoPtr - On the list.To be removed go here.

RATS-Spam - Not on the list.

RATS-Auth - Not on the list.

Alert: Your IP is part of a network listed as a Worst Offender

This is a Worst Offender Alert and this means that not only this IP address, but the whole class 'C' is also on the indicated SpamRATS List. Usually this means the whole range has the same issue of naming conventions or no reverse DNS AND that many IP's from this Class C have been used in Spam Attacks, Dictionary attacks or other forms of attacks, as detected by Mail Servers in the Data Collection Grid. You will NOT be able to use the removal form to remove your IP Addresses. If you have recently been assigned the IP Addresses, or have changed what these IP Addresses are used for, you can use the contact form and ask for a reclassification, but you will have to provide full disclosure, including whois for the ip addresses, your affiliation with the company that owns them, and a description of what the IP's were previously used for, and what they will be used for, in order for a Spam Auditor to consider reclassification. Remember, the majority of the IP's in this space WERE detected as being involved in some form of attack or abusive behaviour, so you had better have a good reason to ask for removal, and you need to own or control the IP addresses, as evidenced by ARIN whois.


Many thanks to our Sponsors, Subscription Holders, Users and Contributors.