Jump to content

[Resolved] IP is not blocked despite reports


pavelk
 Share

Recommended Posts

Good day all!

Several weeks I receive spam from some IPs (46.63.127.117, 46.63.127.118, for example). I report about it daily, but IPs still not blocked. Why? Here is report ids below:

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060170

https://www.spamcop.net/mcgi?action=gettrack&reportid=6237060162

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236607113

https://www.spamcop.net/mcgi?action=gettrack&reportid=6236606913

Thanks in advance, Pavel.

Link to comment
Share on other sites

Hi, Pavel!

&nbsp &nbsp&nbsp&nbsp&nbsp Sorry that you have been misled -- reporting your spam does not cause it to be blocked. Whether to block e-mails is entirely up to your e-mail provider. The only way there would be a relationship between your reporting your spam via SpamCop and the spams then being blocked would be if both: (1) enough other people reported the same spam sources to SpamCop to get them onto the SC BL (for more about this, please see the SpamCop FAQ topic labeled "What is on the list?") and (2) your e-mail provider uses the SC BL to block spam.

Link to comment
Share on other sites

Hi, turetzsr!

I'm an administrator of mailhost, and i'm using SC BL for reject spam. It's strange to hear that only my mailsystem is bombed by spamers from reports above (I mean, strange that nobody more report that spam), but anyway thanks for clarification.

Link to comment
Share on other sites

Hi Pavel.

Only SC staff can view that spam from the report ID links you provide (you would need to post Tracking URLs if you wanted the general membership to see what it is you are discussing). However, you can retrieve the reporting history for any IP address* (last 90 days) by pasting the address into the submission window in your member's page, hitting "Process spam" then selecting the "[report history]" link from the resulting display - and select "Last 90 days" for all the data. That will give you an idea of how many others are reporting that address.

Alternatively, you can "drill down" through the IPv4 netspace map at https://members.spamcop.net/w3m?action=map to successive levels of detail. As noted in the link about what is on the SC BL indicated by Steve T, an address can pump out a lot of spam but if it also handles a much greater amount of real e-mail it is unlikely to be listed through reporter action alone.

* (if you are a paying reporter)

Edited by Farelf
amendment
Link to comment
Share on other sites

Hi All.

Here are fresh tracking URLs of spams from that IPs.

https://www.spamcop.net/sc?id=z6030004578z30a465939550b3882a47ef0d3c70d492z

https://www.spamcop.net/sc?id=z6030004579z22281a351a242da7085ec90381a61379z

https://www.spamcop.net/sc?id=z6030004584z3cd8b4abeca40376d6feb8018a68b4c8z

Farelf, I don't see any "[report history]" links. Possibly because I'm not paying reporter.

Link to comment
Share on other sites

...Farelf, I don't see any "[report history]" links. Possibly because I'm not paying reporter.

Yes, that is the reason. Thanks for the links.

I currently see "46.63.127.118 listed in bl.spamcop.net (127.0.0.2)" IP address 46.63.127.117 cannot be far behind as the message volumes for those are similar according to SenderBase (http://www.senderbase.org/lookup/?search_string=46.63.127.118 & repeat for 46.63.127.117) - OR it could be 46.63.127.118 has hit spamtraps which have more influence than member reports. Note, when spam from it stops, a listed IP address will "time out" of the SC BL soon after (within 24 hours).

Here is the reporting history for 46.63.127.117

The earliest report is 24/11/2014 4:51:08 pm +0800. Each report summary begins with Submitted:

Link to comment
Share on other sites

And it is listed again.

https://www.spamcop.net/w3m?action=checkblock&ip=46.63.127.118

Currently,

46.63.127.118 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 16 hours.

Causes of listing
  • SpamCop users have reported system as a source of spam about 10 times in the past week
Additional potential problems
(these factors do not directly result in spamcop listing)
  • Too many delisting requests were made. Next request might be allowed after 23.6 days
Because of the above problems, express-delisting is not available
Listing History
In the past 25.2 days, it has been listed 12 times for a total of 9.2 days
Other hosts in this "neighborhood" with spam reports

46.63.127.28 46.63.127.56 46.63.127.92 46.63.127.107 46.63.127.117 46.63.127.122

As can be seen - it slips in and out of the BL, depending on reports received, The idiot owners tried to de-list it without stopping the spam so now they are not trusted to "express-delist", they must wait for the full time to expire.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...