{"id":6578,"date":"2013-08-23T13:52:55","date_gmt":"2013-08-23T18:52:55","guid":{"rendered":"https:\/\/www.hostgator.com\/blog\/?p=6578"},"modified":"2016-05-03T10:35:36","modified_gmt":"2016-05-03T15:35:36","slug":"global-blacklisting-results-in-undeliverable-email","status":"publish","type":"post","link":"https:\/\/www.hostgator.com\/blog\/global-blacklisting-results-in-undeliverable-email\/","title":{"rendered":"Global Blacklisting Results in Undeliverable Email"},"content":{"rendered":"

Yesterday (August 22nd, 2013) a massive number of IP addresses used for email gateways on virtually every webhost<\/a> in the world became blacklisted on multiple networks.\u00a0 This resulted in a global inability for email to be received (any time the email originated from one of the blacklisted IPs and was “received” on one of the blacklisting networks).<\/p>\n

The issue is on-going at the time of this writing, and some customers are still being affected at this moment, however HostGator was one of the first companies to successfully mitigate the situation and we have since been assisting other companies with this issue.\u00a0 As it stands, we are presently working to now get our IP’s removed from the blacklists and restore full worldwide email deliverability from our network.<\/p>\n

This situation resulted from a combination of multiple factors stretching back a few months.\u00a0 Before we explain the circumstances, we want to once again stress the importance of keeping all scripts on all hosting accounts updated.\u00a0 Failure to update scripts, as well as\u00a0 not exercising basic security practices, is what allows situations like this to continue to occur.\u00a0 An out-dated script on a hosting account<\/a> is akin to an unlocked car left in a parking lot… it’s an invitation for maliciousness by unscrupulous individuals.<\/p>\n

Unlike the situation back in April that affected WordPress<\/a>, this time the target was Joomla.\u00a0 Back in May, there was a string of exploits against known vulnerabilities in Joomla.\u00a0 These vulnerabilities, related to a component called JCE, had been previously addressed via certain mod_sec rules.\u00a0 However, a workaround was discovered that allowed malware to be installed, and later activated, to allow the uploading and execution of mailing scripts.<\/p>\n

These mailing scripts were activated en masse yesterday, beginning a massive spamming campaign resulting in the blacklisting of email gateway IPs worldwide.\u00a0 One of the largest networks with users reporting issues initially was AOL, resulting in us creating this forum post<\/a>.<\/p>\n

As with all issues of this nature, there are lessons to be learned.\u00a0 The most important lesson here is to (again) keep all scripts on your hosting account up-to-date.\u00a0 Most scripts have a one-click feature to update<\/a> them anytime a new version is released.\u00a0 Keeping scripts up-to-date is paramount in ensuring a secure hosting account.<\/p>\n

HostGator has now added additional monitoring capability to our systems which will alert us to situations like this even faster than yesterday.\u00a0 Our work is on-going, though we should have the majority of the blocks resolved by tomorrow (spam lists move slow, with good reason).\u00a0 But remember, there is no better way to keep your car safe than to lock it.\u00a0 Please take this moment to log into your hosting script back-ends and ensure they are up-to-date.\u00a0 Don’t give the bad guys an open door to walk through.<\/p>\n","protected":false},"excerpt":{"rendered":"

Yesterday (August 22nd, 2013) a massive number of IP addresses used for email gateways on virtually every webhost in the world became blacklisted on multiple networks.\u00a0 This resulted in a global inability for email to be received (any time the email originated from one of the blacklisted IPs and was “received” on one of the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-6578","post","type-post","status-publish","format-standard","hentry","category-web-hosting-news"],"_links":{"self":[{"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/posts\/6578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/comments?post=6578"}],"version-history":[{"count":11,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/posts\/6578\/revisions"}],"predecessor-version":[{"id":6768,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/posts\/6578\/revisions\/6768"}],"wp:attachment":[{"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/media?parent=6578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/categories?post=6578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostgator.com\/blog\/wp-json\/wp\/v2\/tags?post=6578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}