Keats Posted December 5, 2017 Share Posted December 5, 2017 Over the last fortnight, I've had cause to report numerous e-mails coming from IP addresses in the 154.16.247.0 - 154.16.247.255 range. SpamCop is listing these as coming from Host1Plus.com, and is sending reports to abuse@host1plus.com. I've posted on one of Host1Plus's social media pages requesting that they take action (as the SC reports don't appear to having any effect), and they're claiming that the IP range is nothing to do with them. WHOIS searches shows that the range actually belongs to NodeBlade Solutions LLC (although at least one also shows the range as being allocated to AFRINIC). Another search shows Quadraet as being involved. I've begun manually adding abuse@nodeblade.com in the "User Notification" field - just wondering why SC is returning Host1Plus.com as the source instead of NodeBlade? Alternatively, it's quite possible that I'm misunderstanding something! Link to comment Share on other sites More sharing options...
Lking Posted December 5, 2017 Share Posted December 5, 2017 Could you provide a Tracking URL for an example? Link to comment Share on other sites More sharing options...
Keats Posted December 5, 2017 Author Share Posted December 5, 2017 2 minutes ago, Lking said: Could you provide a Tracking URL for an example? This is the most recent one: https://www.spamcop.net/sc?id=z6426947784zd400d222c4a07fb7da5b3080951aa6bbz And some others: https://www.spamcop.net/sc?id=z6426941673ze1a964ed7e03213649842257f159b91cz https://www.spamcop.net/sc?id=z6426771614zbb8947f61954f8a055494edbd782dfefz https://www.spamcop.net/sc?id=z6426681004za749351979f4ed8b8bd90edbb12bfc7fz https://www.spamcop.net/sc?id=z6426608159z79931ebcf2e9b07072f6808d8da488bcz https://www.spamcop.net/sc?id=z6426588843zb219b8f4fa100ab3f089e5db3b4f5586z https://www.spamcop.net/sc?id=z6426214306zc619b165994b08d458fd7ff20a20be07z https://www.spamcop.net/sc?id=z6426204022z9683d152a5fec93b6fc29a91bbf03f3bz https://www.spamcop.net/sc?id=z6426201772z2196d862ad1a60bd86a43d5ac97ba5c4z https://www.spamcop.net/sc?id=z6426117331zea78da03e9730d6d4b192e44f1cd79c1z https://www.spamcop.net/sc?id=z6425995995z4770a60e8b907df7cba97a9c0b93c6cbz Link to comment Share on other sites More sharing options...
petzl Posted December 5, 2017 Share Posted December 5, 2017 1 hour ago, Keats said: This is the most recent one: https://www.spamcop.net/sc?id=z6426947784zd400d222c4a07fb7da5b3080951aa6bbz The IP is wired for SpamCop to send reports to 1&1 the actual reporting address is abuse [ at ] nodeblade [ dot ] com spamCop Legacy issues mean that unlikely for this to be changed I use IPNetInfo (WhoIs) to get real reporting address. Windows Defender though did give false positive on IPNetInfo (seems MS have fixed issue) Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.