WordPress.org

Ian Dunn 4:03 pm on February 20, 2017
Tags: prio1 ( 38 )

Marx blacklisted by Barracuda

I noticed a legitimate message in the WordCampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more. Help Scout account was flagged as spam because 66.155.40.24 is blacklisted by Barracuda.

Lookup | Removal

I can request removal, but it seems like it’ll just get added again if we don’t figure out what outbound messages caused the blacklisting and prevent that from happening again.

#prio1

Barry 4:07 pm on February 20, 2017

I think it was blacklisted a while ago. I looked through the logs and there isn’t anything super suspicious there so I submitted the removal request.
- Ian Dunn 4:21 pm on February 20, 2017
  
  Cool, thanks 🙂
- Barry 4:25 pm on February 20, 2017
  
  We have removed 66.155.40.24 (Please wait 24-48 hours) from our blocklist for 30 days, at which time it will be re-evaluated.
Ian Dunn 2:44 pm on March 30, 2017

I noticed today that it’s blacklisted again, and causing messages to be flagged as spam.
- Ian Dunn 1:10 pm on June 23, 2017
  
  @vnsavage, I’ve gotten another report of messages being blocked because of this. Do you mind taking a look when you get a chance?
  - Thomas Bruehl 1:31 pm on June 23, 2017
    
    Just want to note that it is blocked by Proofpoint: https://ipcheck.proofpoint.com/?ip=66.155.40.24
Thomas Bruehl 1:35 pm on June 23, 2017

And also on two other Blacklists
http://www.ipvoid.com/ip-blacklist-check/
vnsavage 12:28 pm on June 27, 2017

The server still doesn’t seem to be sending spam at the moment. The reports I looked at, all seemed to be very old so I requested removal from all 3 places.
Ian Dunn 5:41 pm on November 10, 2017

@barry: We got a new report of Marx being blacklisted, this time by SORBS.

https://mxtoolbox.com/SuperTool.aspx?action=blacklist:66.155.40.24
- Barry 10:04 pm on November 17, 2017
  
  Looks like this is from April. Removed.
Ian Dunn 12:51 am on March 20, 2018

@barry: It looks like it’s been blacklisted again:

https://www.abuseat.org/lookup.cgi?ip=66.155.40.24
- Ian Dunn 5:24 pm on March 22, 2018
  
  @barry: Can you please take a look at this (or, let me know if there’s some reason that it’s not as urgent as it seems).
Kelly Dwan 4:48 pm on September 6, 2019

@barry It looks like it’s blacklisted again by SORBS: https://mxtoolbox.com/SuperTool.aspx?action=blacklist:66.155.40.24

Thanks for looking into this, and let me know if there’s anything I can do 🙂
- Ian Dunn 10:04 pm on January 10, 2020
  
  @barry, this is still causing problems for us.
  
  http://www.sorbs.net/lookup.shtml?66.155.40.24
  
  The web server is also blacklisted by SORBS:
  
  http://www.sorbs.net/lookup.shtml?198.143.164.146
Barry 3:28 am on February 1, 2020

I changed a bit how the email works for WordCamp.org to hopefully avoid problems in the future. Email from @wordcamp.org addresses are now sent via a dedicated IP address. This means if it gets blacklisted, it was from WordCamp.org activity. I also enabled DKIM signing for potentially better email deliverability and updated the SPF record to account for the new IP.

As far as the web server being blocked, that’s not the web server but a WP.org SMTP server. We’ll look into getting it delisted.
- Ian Dunn 5:21 pm on February 3, 2020
  
  Thanks!