My understanding I think is that Cloudflare is a legitimate company that provides security services to web hosts/web sites. My question (I'm not sure if you answered exactly) is why did I end up with an IP address that was flagged as blacklisted? My machine does not send spam or try to attack web sites so I'm guessing I have inherited a nasty IP address floating around the ISP? Should the ISP even be circulating blacklisted IP's?
Did you read the Spamhaus link and fully absorb its ramifications?
It's a complicated area and there aren't any simplistic answers, but there are literally millions of blacklisted IP addresses which may have been put there legitimately (or not as it's a subjective assessment carried out by the blacklisting companies, of which Spamhaus is one of the biggest).
My ISP enabled IPv6 on their network a few years ago, since then most of the time when I do a search for "what's my IP" it returns my IPv6 address and I have to dig a little deeper into the site to find out my IPv4 address.
Looking at the results you can tell the difference IPv4 is probably what your used to seeing and looks in a format similar to this x.x.x.x for example this is what Google.com's address is for me "172.217.165.14"
Now when I look at the results It returns something similar to this "2607:f8b0:400b:802::200e" (that's also google).
Fun fact about IPv6, If you have more than one computer and do the "whats my IP " search on each computer you will get a different IPv6 address, they will all be on the same subnet but different, Whereas before with IPv4 it would return the same IP for every computer on my network.
If you do "ipconfig /all" command on your computer you will get two different types of IPv6, one or more is routable like what you get with the IP search and the others are non routable.
Non routable are handled by your router similar to "192.168.x.x" and start with either "fd00:" or "fe80:".
Also another fun fact is that all of your IPv6 address change very often, like next day often or reboot often unless you Disable Windows IPv6 Temporary Addresses.
Last edited by Digital Life; 24 Apr 2019 at 01:42. Reason: Formatted for better clairity
@Digital Life
My ISP appears to have IPv6 enabled also but it doesn't look like my machine is being assigned one. I will double check though.
I phoned the ISP today and they said this type of behavior (cloudflare etc) can sometimes be the DNS server being used. Does that make any sense? He remotely changed the DNS for the router to Googles DNS Servers. We also reset the router to renew the IP address. However I'm still be flagged/listed for dnsbl.spfbl.net at both https://www.dnsbl.info/dnsbl-database-check.php and https://whatismyipaddress.com/blacklist-check Is this still a problem?
My guess would be that it has nothing to do with the DNS server you are using, You could test this by changing your DNS server either on your router or you could change it on your computer.
I see you live in New Zealand so I'm not sure what DNS servers are local to you but you could try it if you want, You only need 1 but 2 is preferable.
Google DNS
Cloudflair DNSCode:8.8.8.8
If you use both of them in your computers lan settings after a while the computer will figure out the fastest one and use that.Code:1.1.1.1
Changing DNS servers will not take your IP off the blacklist so I don't know what that guy thinks it's going to do.
Resetting your router will only (in most cases) change the settings on your Lan side, Your problem is on the WAN side.
Did you try turning off your router for a while, Hopefully it will change your IP (on the WAN side)
If the above does not work you are going to have phone the ISP again and try and escalate it to get some tec guy that knows more, Most of the time when you call your ISP you end up with someone who does not have a clue about networking they just read some list with a bunch of symptoms and read the answer back to you and if it's not on the list they tell you to reset or reboot the router.
escalate escalate escalate Be a telephone tough guy if you have to and get a tec that knows what they are doing.
I use a browser extension available free or Pro @ £3.29 GBP
The problem is that it needs a lot of configuration so it's going to suit advanced users.
Trace - Changelog
Last edited by Callender; 24 Apr 2019 at 17:46. Reason: fix link (2)
No problem for me. What is your Antivirus - WD? and nothing else?
Check certificates. Grab a copy of:
UVK - Ultra Virus Killer
In the Tools & Tweaks section run Sigcheck -tv
See if any dodgy certificates are displayed.
Try running this:
Download ZHPCleaner 2019 (Free) - Anti-Malware Zone
Tutorial here:
Tutorial ZHPCleaner 2018 (Officiel)
Important:
Inspect all tabs and uncheck anything you want to keep. Validate your choices for each tab.
Also you will be asked "did you add this server" during the scan.
You need to check here - Option Two:
Change IPv4 and IPv6 DNS Server Address in Windows | Tutorials
Is should say Obtain DNS Server Address Automatically in which case your ISP's DNS Server is used.
If using another DNS Server it must be one that you specified.
Last edited by Callender; 25 Apr 2019 at 16:49. Reason: add info
Google search lead me to https://www.projecthoneypot.org/ip_118.149.107.43, then that has a link to https://www.spamhaus.org/query/ip/118.149.107.43. Spamhaus says my IP is listed in the PBL but it also says its normal for almost all dynamic IP addresses to be in the PBL.
I've just checked mine and it's not listed, I have had listed ones before (3 times) and it caused me all sorts of issues with not being able to post to forums et al.
I did the router/phone off trick (I have an unlimited 4G tethering deal as my main ISP) and that solved it every time. I never had to contact my ISP.
It's also dependent on the receiving end and how draconian they are with their implementation (via services like Cloudflare) if you appear on any blacklists, whether that is IP, domain or email addresses et al.
With so many spam, phishing email and general cybersecurity issues about the sensitivity has been turned up a fair bit recently.
Quote
