Website is hosted on a server with a blocked IP address

Support
1

Hi everyone,

I’m deploying a personal website (adina-wagner.com, Netlify site name: serene-minsky-03ffb7) via Netlify. I have a link to this website in my email signature.

Recently, my e-mails started to get rejected by mail servers. Our internal IT informed me that the reason is that my website is hosted on a server with a blocked IP address: https://check.spamhaus.org/listed/?searchterm=35.198.80.163

Is there anything I can do about this?

Thanks in advance

3

hi @adswa

welcome to our forums! That IP is one of our CDN nodes in France. What do you mean it’s blocked, is this blocked on your internal network?

We have several other customers using that node every day and this is the first time I’m seeing such a report.

Can you please provide more details on this?

Thanks

4

Hi @gualter,

Thanks for getting back to me so swiftly. Unfortunately I don’t have any more information than what our company’s IT services have provided me with.
To quote from their response to the Ticket:

In this specific case, we already can tell you the issue. It is a link in your mail signature (www . adina - wagner . com). Your website is hosted on a server with a blocked IP address: https://check.spamhaus.org/listed/?searchterm=35.198.80.163
This is why the mails get blocked, if you write someone or someone answers you with this link in the mail body it gets rejected. Also, we can’t do anything about it. The IP addess needs to be removed from the blocked list from spamhaus.org in order to unblock the link.

Likewise, the spamhaus.org link does not provide me with much actionable information. They say:

This IP address has been observed to be involved in at least one of the following activities; sending spam, snowshoe spamming,hijacked IP space, or associated with bulletproof hosting.
As a result, this IP address is listed in the Spamhaus Blocklist (SBL)

The details contain the following information:

2023-01-20 17:55:08 - [google.com](https://www.spamhaus.org/sbl/listings/google.com)

### Phishing hosting @35.198.80.163

Phishing hosting located here:
https://post-ch-return.com/
-> https://track.em-trkcd.com/?a=X&c=X&co=X&mt=X
--> https://t.findbestonly.site/aff_c?offer_id=X&aff_id=X&aff_sub=X&aff_sub2=X&aff_sub5=&#rafl
---> https://sitebest.store/c/THHFvF9?s1=X&s2=X&s3=X&offer_id=X&first=&last=&country=&zip=&city=&address=&email=&phone=

$ dig +short post-ch-return.com
35.198.80.163
34.141.72.9

I am out of my depth on this topic, and could only guestimate what might wrong, so I’ll refrain from stating unhelpful hypotheses. I did find the following post on the forum though, which looks like it could be a related issue: The website is blocked by Malwarebytes on some ip-adresses

If there is nothing about the blocked IP that can be done on your end, is there a possibility to have my website hosted on a different server?

Thanks

6

Hey,

Sorry for pinging again - Is there anything I can do on my side? I’ve removed the website from my signature (which is sad, and I would like to be able to put it back again), but also anyone who is replying to any of my past emails (that still have the website in the signature of the quoted response) gets their emails flagged and returned as non-deliverable.

Thanks again

7

Hi @adswa,

Please refer to: