IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

One of our IP addresses is listed as sending SPAM

  • 1.  One of our IP addresses is listed as sending SPAM

    Posted Thu February 04, 2021 01:30 PM

    We have the IP address: 83.245.79.184

    This is part of a cluster of servers that send out emails for one of our clients. They all send out the same emails as part of a set of opt-in only mailing lists.

    This one server is getting repeatedly listed ,then quickly delisted, then listed again, and so on, by the IBM DNS Blacklist.

    We can't find any information as to how the emails are getting categorised as spam, or any difference in the activity from the server, or why this particular server out several identical ones is getting listed.

    Can anyone help with an answer, or point us to a way of getting more information out of the X-Force system to find out what is going on?

    Any help would be appreciated. Thanks

    Best regards,

    Kenneth



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: One of our IP addresses is listed as sending SPAM

    Posted Tue May 04, 2021 08:43 AM

    Hello support553,

    I believe your request got already processed but just for the people with similar issues:

    The easiest way to resolve IP/URL miss-classification is to use the "suggest edit" functionality that is available for everyone on the X-Force Exchange reports (e.g. https://exchange.xforce.ibmcloud.com/ip/83.245.79.184). The information provided using that dialog is forwarded to our analysts and ensures quick processing. If a user allows us to keep him/her informed, we also have the capability to reach out to the user in case of further questions.

    Regards

    Manuel Hauptmann



    #QRadar
    #Support
    #SupportMigration