Dshield - blacklisted

[akreider2]

I have a VPS that is connecting to a mysql server that runs on a comcast business connection.

The VPS has the IP address of the mysql server blacklisted.

I looked at iptables and it was listed under "DShield". Does this mean that someone else might have blacklisted our IP address? Or has our VPS blacklisted the IP address on its own?

I'm going to whitelist our IP - but I'm just checking to make sure we aren't blacklisted by other sites. Also, I'm very puzzled as to how we triggered the blacklist - is there a way to tell?

We have some mysql queries and send out emails - but I don't think enough to trigger a blacklist.


Aaron

[homoludens]

comcast business connection.

Do you have a static IP? You could just be collateral damage, people blacklisting entire ranges, like that.

I looked at iptables and it was listed under "DShield". Does this mean that someone else might have blacklisted our IP address? Or has our VPS blacklisted the IP address on its own?

It would probably mean that a whole bunch of people have blacklisted that IP address. Exactly how many people I don't know.

I'm going to whitelist our IP

You can do that within DShield itself by adding the IP address to the ignore option in dshieldpy.conf

is there a way to tell

Not that I know of.

There's a mailing list but the page appears to be broken at the moment.

[homoludens]

There's a mailing list but the page appears to be broken at the moment.

It should be up again some point later today.