Jump to content
Sign in to follow this  
pavelk

[Resolved] IP is not blocked despite reports

Recommended Posts

Good day all!

Several weeks I receive spam from some IPs (46.63.127.117, 46.63.127.118, for example). I report about it daily, but IPs still not blocked. Why? Here is report ids below:

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060170

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060162

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236607113

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236606913

Thanks in advance, Pavel.

Share this post


Link to post
Share on other sites

Hi, Pavel!

&nbsp &nbsp&nbsp&nbsp&nbsp Sorry that you have been misled -- reporting your spam does not cause it to be blocked. Whether to block e-mails is entirely up to your e-mail provider. The only way there would be a relationship between your reporting your spam via SpamCop and the spams then being blocked would be if both: (1) enough other people reported the same spam sources to SpamCop to get them onto the SC BL (for more about this, please see the SpamCop FAQ topic labeled "What is on the list?") and (2) your e-mail provider uses the SC BL to block spam.

Share this post


Link to post
Share on other sites

Hi, turetzsr!

I'm an administrator of mailhost, and i'm using SC BL for reject spam. It's strange to hear that only my mailsystem is bombed by spamers from reports above (I mean, strange that nobody more report that spam), but anyway thanks for clarification.

Share this post


Link to post
Share on other sites

Hi Pavel.

Only SC staff can view that spam from the report ID links you provide (you would need to post Tracking URLs if you wanted the general membership to see what it is you are discussing). However, you can retrieve the reporting history for any IP address* (last 90 days) by pasting the address into the submission window in your member's page, hitting "Process spam" then selecting the "[report history]" link from the resulting display - and select "Last 90 days" for all the data. That will give you an idea of how many others are reporting that address.

Alternatively, you can "drill down" through the IPv4 netspace map at https://members.spamcop.net/w3m?action=map to successive levels of detail. As noted in the link about what is on the SC BL indicated by Steve T, an address can pump out a lot of spam but if it also handles a much greater amount of real e-mail it is unlikely to be listed through reporter action alone.

* (if you are a paying reporter)

Edited by Farelf
amendment

Share this post


Link to post
Share on other sites

As of now when I checked the IP given in the SC history:
46.63.127.117 has a neutral email reputation
however
46.63.127.118 reputation is poor and currently is on two block list, sbl.spamhaus.org bl.spamcop.net

Share this post


Link to post
Share on other sites

Hi All.

Here are fresh tracking URLs of spams from that IPs.

https://www.spamcop.net/sc?id=z6030004578z30a465939550b3882a47ef0d3c70d492z

https://www.spamcop.net/sc?id=z6030004579z22281a351a242da7085ec90381a61379z

https://www.spamcop.net/sc?id=z6030004584z3cd8b4abeca40376d6feb8018a68b4c8z

Farelf, I don't see any "[report history]" links. Possibly because I'm not paying reporter.

Share this post


Link to post
Share on other sites
...Farelf, I don't see any "[report history]" links. Possibly because I'm not paying reporter.

Yes, that is the reason. Thanks for the links.

I currently see "46.63.127.118 listed in bl.spamcop.net (127.0.0.2)" IP address 46.63.127.117 cannot be far behind as the message volumes for those are similar according to SenderBase (http://www.senderbase.org/lookup/?search_string=46.63.127.118 & repeat for 46.63.127.117) - OR it could be 46.63.127.118 has hit spamtraps which have more influence than member reports. Note, when spam from it stops, a listed IP address will "time out" of the SC BL soon after (within 24 hours).

Here is the reporting history for 46.63.127.117

The earliest report is 24/11/2014 4:51:08 pm +0800. Each report summary begins with Submitted:

Share this post


Link to post
Share on other sites

And it is listed again.

https://www.spamcop.net/w3m?action=checkblock&ip=46.63.127.118

Currently,

46.63.127.118 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 16 hours.

Causes of listing
  • SpamCop users have reported system as a source of spam about 10 times in the past week
Additional potential problems
(these factors do not directly result in spamcop listing)
  • Too many delisting requests were made. Next request might be allowed after 23.6 days
Because of the above problems, express-delisting is not available
Listing History
In the past 25.2 days, it has been listed 12 times for a total of 9.2 days
Other hosts in this "neighborhood" with spam reports

46.63.127.28 46.63.127.56 46.63.127.92 46.63.127.107 46.63.127.117 46.63.127.122

As can be seen - it slips in and out of the BL, depending on reports received, The idiot owners tried to de-list it without stopping the spam so now they are not trusted to "express-delist", they must wait for the full time to expire.

Share this post


Link to post
Share on other sites

Uh, OK. Now I understand how it works. Thanks for your attention, and sorry for my dumb questions. Thread can be close I guess.

Share this post


Link to post
Share on other sites

Hi, Pavel,

&nbsp &nbsp&nbsp&nbsp&nbsp In my view, the only dumb questions are the ones that should have been asked but weren't! :) <g>

&nbsp &nbsp&nbsp&nbsp&nbsp This Topic is now marked as "Resolved."

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×