Nevermind, found it in splunk. 174.138.31.223 is the issue, as its included in your emails that are getting marked phish because of massive phish traffic from that ip. I submitted it for mitigation.
Yes, thanks. I got other replies as well and will follow up if needed. On Tue, Aug 24, 2021 at 6:55 PM Udeme Ukutt <[email protected]> wrote: Russell, I replied you off list. - Udeme On Tue, Aug 24, 2021 at 8:14 PM Russell Clemings via mailop <[email protected]> wrote: Does anyone on this list have a contact for Synacor, or at least one of the ISPs that appear to use them (centurylink.net, hughes.net, wowway.com, tds.net, q.com, possibly others)? We're seeing false-positive bounces ("554 5.7.1 [VI-1] Message blocked due to spam content in the message") from each of those. We're a non-profit trade association that, among other things, has an opt-in service for job advertisements. Those are being rejected, along with other organizational emails (e.g. opt-in updates on website content). Emails to postmaster@ have gone unanswered for more than a week and I don't see any relevant contacts on any of their websites. Thanks in advance for any help. -- =============================================== Russell Clemings <[email protected]> =============================================== _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop -- =============================================== Russell Clemings <[email protected]> =============================================== _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
_______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
