Why is my IP address listed in CSS?
Back
Why is my IP address listed in CSS?
Spamhaus is a reputation data producer. The actions taken by email/internet service providers that are based on our data will vary by ISP.
- It is up to the provider to decide how to treat IP addresses listed in CSS.
IP addresses listed in CSS have been detected sending mail which matches CSS heuristics.
- CSS listings expire three (3) days after the last detection.
- If an IP is listed, the problem is recent!
CSS rules look for several problems, including snowshoe spam, mail from known bad actors, infected or compromised websites or CMS, bots, and other insecure or misconfigured applications or devices.
- If an IP is listed in CSS, the first thing to do is check all technical settings for correctness. For more information please see our FAQ on this topic.
- If an IP is listed because it is compromised, we have an FAQ that is a good place to start.
NOTE: We do not provide spam samples related to CSS listings, though in some cases of compromise we may be able to provide some additional information if we have it.
- We recommend that all domain and mail server administrators monitor the appropriate role accounts and feedback loops for their domains and network space.
- Server logs might also have useful information.
If an IP address is listed, please check to see if any related domains are in the DBL.
- This IP and Domain Reputation Checker has the ability to check both IP addresses and domains.
- If you are authoritative for an IP address, and you believe the issues that caused the listing have been solved, you can request a delisting.