Jump to content
Sign in to follow this  
rwm

Why was my site blocked?

Recommended Posts

Hello,

My site was blacklisted approx Feb 5 and 6. We learned of this Feb 8. By Feb 9,

we were not in the list anymore. I have been trying to determine why we were listed,

if anyone at my site was contacted, what info that warning email may have contained, and how we were then de-listed. If we have vulnerabilities, I need to know so we can fix ASAP.

198.8.3.62 mail2.no.entergy.com

Is there a way to retrieve history for an IP address?

Can anyone offer assistance?

Thank in advance,

Robyn

rmurh90[at]entergy.com

Share this post


Link to post
Share on other sites

More possibly useful info.

We got lots of bounced emails from our users like this:

The original message was received at Tue, 8 Feb 2005 09:44:55 -0600

(CST) from tcbyexs03.ar.entergy.com [148.194.24.96]

The original message was received at Tue, 8 Feb 2005 09:44:55 -0600

(CST)

----- The following addresses had permanent fatal errors -----

<>

(reason: 550 This system is configured to reject mail from

198.8.3.62 [198.8.3.62] (Host blacklisted - Found on Realtime Black List

server '62.3.8.198.bl.spamcop.net'))

----- Transcript of session follows -----

... while talking to mail.fec.net.:

<<< 550 This system is configured to reject mail from 198.8.3.62

[198.8.3.62] (Host blacklisted - Found on Realtime Black List server

'62.3.8.198.bl.spamcop.net') ... while talking to gwguardian.fec.net.:

>>> QUIT

<<< 550 This system is configured to reject mail from 198.8.3.62

[198.8.3.62] (Host blacklisted - Found on Realtime Black List server

'62.3.8.198.bl.spamcop.net') 554 5.0.0 Service unavailable

Share this post


Link to post
Share on other sites
I have been trying to determine why we were listed

There are no entries in your Report History. That could mean that they were spamtrap hits that only a deputy could reveal any information about.

More information on many reasons for spamtrap hits is at: http://mailsc.spamcop.net/bl.shtml?198.8.3.62

Senderbase is showing moderate increase in traffic seen from that server:

Volume Statistics for this IPĀ 

Magnitude Vol Change vs. Average

Last day 5.0 94%

Last 30 days 5.1 170%

Average 4.7

if anyone at my site was contacted

Reporting addresses:

postmaster[at]entergy.com

Spamtraps will not generate any reports, however.

<Moderator hat> Since there seems to be no response in the other forum and you repeated all information here, I am going to delete the other thread.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×