Keats

Incorrect source information being returned?

4 posts in this topic

Over the last fortnight, I've had cause to report numerous e-mails coming from IP addresses in the 154.16.247.0 - 154.16.247.255 range. SpamCop is listing these as coming from Host1Plus.com, and is sending reports to abuse@host1plus.com. 

I've posted on one of Host1Plus's social media pages requesting that they take action (as the SC reports don't appear to having any effect), and they're claiming that the IP range is nothing to do with them. WHOIS searches shows that the range actually belongs to NodeBlade Solutions LLC (although at least one also shows the range as being allocated to AFRINIC). Another search shows Quadraet as being involved.

I've begun manually adding abuse@nodeblade.com in the "User Notification" field - just wondering why SC is returning Host1Plus.com as the source instead of NodeBlade?

Alternatively, it's quite possible that I'm misunderstanding something!

Share this post


Link to post
Share on other sites

Could you provide a Tracking URL for an example?

Share this post


Link to post
Share on other sites
1 hour ago, Keats said:

The IP is wired for SpamCop to send reports to 1&1 

the actual reporting address is abuse [ at  ] nodeblade [ dot ] com

spamCop Legacy issues mean that unlikely for this to be changed I use IPNetInfo (WhoIs) to get real reporting address. Windows Defender though did give false positive on IPNetInfo (seems MS have fixed issue)

Edited by petzl

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now