cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Go to solution

Wordfence GravityScan

Hi All

I used Wordfence GravityScan to check my website:

Correlectricalservices.co.uk

 

and got the following result shown below indicating that what I think is the server on godaddy 160.153.137.17.

Title:
[160.153.137.17] Blacklist Check Failed- abuseat
Type:
Blacklist
Severity:
Critical (10.0)
Product:
Reputation
Description:
160.153.137.17 is currently listed as a source of spam on the abuseat blacklist.
If you believe your site is listed erroneously, click here to request removal.

I looked on abuseat.org to check it out and got this:

https://www.abuseat.org/lookup.cgi?ip=160.153.137.17
Results of Lookup

160.153.137.17 is listed

This IP address was detected and listed 21 times in the past 30 days. The most recent detection was at Sat Jul 22 09:25:00 2017 UTC +/- 5 minutes

This IP address (160.153.137.17) is most likely a web server running some sort of CMS system
(like Drupal, Wordpress and so on), where a virtual host (customer web site) has been compromised into providing forwarding links to malicious web sites.
The infection is often caused by malware called Stealrat

 

Anyone have any ideas if this ip address 160.153.137.17 is infact godaddy and if it it is, how do I go about getting it sorted out?

 

Many Thanks

 

David Corr

Corr Electrical Services Ltd

 

 

2 REPLIES 2
Super User II Super User II
Super User II
Solution

Re: Wordfence GravityScan

@Docelectrical

 

That does appear to be a GoDaddy IP:

 

IP     :    160.153.137.17         
Host     :    ip-160-153-137-17.ip.secureserver.net   
Country :    United States

 

When this happened to me I would call into GoDaddy to make sure they were aware that the IP was on a blacklist.  They always assured me that they were "on top" of those issues but I felt more comfortable asking that they confirm they are aware and working to get the IP delisted.

 

HTH! Smiley Wink

Judith
"Do one thing every day that scares you." ~ Eleanor Roosevelt

Re: Wordfence GravityScan

Hi Muse

Thanks for that I was sure that it was the godaddy server, but did not want to 

start calling them and end up looking the fool, better to double check first.

Will call them and see what they say and check it again next week, just to keep them on their toe's

Thanks for the prompt reply

David