Jump to content

[Resolved] IP is not blocked despite reports


pavelk

Recommended Posts

Posted

Good day all!

Several weeks I receive spam from some IPs (46.63.127.117, 46.63.127.118, for example). I report about it daily, but IPs still not blocked. Why? Here is report ids below:

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060170

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060162

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236607113

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236606913

Thanks in advance, Pavel.

Posted

Hi, Pavel!

&nbsp &nbsp&nbsp&nbsp&nbsp Sorry that you have been misled -- reporting your spam does not cause it to be blocked. Whether to block e-mails is entirely up to your e-mail provider. The only way there would be a relationship between your reporting your spam via SpamCop and the spams then being blocked would be if both: (1) enough other people reported the same spam sources to SpamCop to get them onto the SC BL (for more about this, please see the SpamCop FAQ topic labeled "What is on the list?") and (2) your e-mail provider uses the SC BL to block spam.

Posted

Hi, turetzsr!

I'm an administrator of mailhost, and i'm using SC BL for reject spam. It's strange to hear that only my mailsystem is bombed by spamers from reports above (I mean, strange that nobody more report that spam), but anyway thanks for clarification.

Posted

Hi Pavel.

Only SC staff can view that spam from the report ID links you provide (you would need to post Tracking URLs if you wanted the general membership to see what it is you are discussing). However, you can retrieve the reporting history for any IP address* (last 90 days) by pasting the address into the submission window in your member's page, hitting "Process spam" then selecting the "[report history]" link from the resulting display - and select "Last 90 days" for all the data. That will give you an idea of how many others are reporting that address.

Alternatively, you can "drill down" through the IPv4 netspace map at https://members.spamcop.net/w3m?action=map to successive levels of detail. As noted in the link about what is on the SC BL indicated by Steve T, an address can pump out a lot of spam but if it also handles a much greater amount of real e-mail it is unlikely to be listed through reporter action alone.

* (if you are a paying reporter)

Posted
...Farelf, I don't see any "[report history]" links. Possibly because I'm not paying reporter.

Yes, that is the reason. Thanks for the links.

I currently see "46.63.127.118 listed in bl.spamcop.net (127.0.0.2)" IP address 46.63.127.117 cannot be far behind as the message volumes for those are similar according to SenderBase (http://www.senderbase.org/lookup/?search_string=46.63.127.118 & repeat for 46.63.127.117) - OR it could be 46.63.127.118 has hit spamtraps which have more influence than member reports. Note, when spam from it stops, a listed IP address will "time out" of the SC BL soon after (within 24 hours).

Here is the reporting history for 46.63.127.117

The earliest report is 24/11/2014 4:51:08 pm +0800. Each report summary begins with Submitted:

Posted

And it is listed again.

https://www.spamcop.net/w3m?action=checkblock&ip=46.63.127.118

Currently,

46.63.127.118 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 16 hours.

Causes of listing
  • SpamCop users have reported system as a source of spam about 10 times in the past week
Additional potential problems
(these factors do not directly result in spamcop listing)
  • Too many delisting requests were made. Next request might be allowed after 23.6 days
Because of the above problems, express-delisting is not available
Listing History
In the past 25.2 days, it has been listed 12 times for a total of 9.2 days
Other hosts in this "neighborhood" with spam reports

46.63.127.28 46.63.127.56 46.63.127.92 46.63.127.107 46.63.127.117 46.63.127.122

As can be seen - it slips in and out of the BL, depending on reports received, The idiot owners tried to de-list it without stopping the spam so now they are not trusted to "express-delist", they must wait for the full time to expire.

Posted

Uh, OK. Now I understand how it works. Thanks for your attention, and sorry for my dumb questions. Thread can be close I guess.

Posted

Hi, Pavel,

&nbsp &nbsp&nbsp&nbsp&nbsp In my view, the only dumb questions are the ones that should have been asked but weren't! :) <g>

&nbsp &nbsp&nbsp&nbsp&nbsp This Topic is now marked as "Resolved."

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...