Follow up on this.

They use this service:
https://www.brightcloud.com/tools/url-ip-lookup.php

Which list the affected IP in 'high risk' category 'proxy'.

I opened a case with them to find out the cause.

They delistet 157.161.57.65 but not 157.161.57.70. Maybe I should
change the PTR of the later one :-). That only was an exit for very
short time (immediate abuse complaints).

Also 'Tor' is a separate category. So if my experiments with Tor
triggered that issue, why didn't they list it as 'Tor' which they have
as a category.

Another cause might be, that I use a transparent proxy to cache some
content in my LAN. But that only is accessible from my LAN, but of
course this might inject HTTP header indicating the proxy connection.

Also L2TP and PPTP is accessible, so I can access my private ipv4 space
from outside. So did they scan for those services and flag it as
'proxy'?

I'm looking forward for their reply.

-- 
Mit freundlichen Grüssen

-Benoît Panizzon- @ HomeOffice und normal erreichbar
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________


_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Antwort per Email an