Wizard IT Products

Hello,

a have problem with a spammer they send the spam from google servers, from googlegroups , this IPS are in the blacklist but i receive the scam too:

this i see in the log in Magicspam

Tue Sep 25 @ 10:51pm
SPAM[block_rbl_lists (dnsbl.sorbs.net)]
209.85.160.199
sali2+bncbdvz7t4q2aibb7v3vloqkgqef7qdrvi@soso.host


Tue Sep 25 @ 11:07pm
SPAM[block_rbl_lists (dnsbl.sorbs.net)]
209.85.160.198
sali2+bncbdvz7t4q2aibb7v3vloqkgqef7qdrvi@soso.host

Tue Sep 25 @ 11:36pm
SPAM[block_rbl_lists (dnsbl.sorbs.net)]
209.85.222.200
sali2+bncbdvz7t4q2aibb7v3vloqkgqef7qdrvi@soso.host

the scam mail comes from the last ip 10:43PM

Received: from mail-qk1-f200.google.com (mail-qk1-f200.google.com [209.85.222.200])
X-BeenThere: sali2@soso.host
Received: by 2002:a37:2a48:: with SMTP id q69-v6ls4645033qkh.11.gmail; Tue, 25
Sep 2018 13:43:42 -0700 (PDT)
X-Received: by 2002:a37:9d43:: with SMTP id g64-v6mr32042qke.5.1537908222298;


comes the scam from a IPv6 ? but IPv6 is not activated in my server

thanks

Hello Antispam,

Thank you for your post.

Based on the provided information we see that emails from 209.85.222.200 have been detected as spam, as of Tue Sep 25 @ 11:36pm.

Can you please confirm that emails coming from IP address: 209.85.222.200 are being received after Tue Sep 25 @ 11:36pm?

Also, you mentioned that IP: 209.85.222.200 is in the blacklist; could you please provide us a screenshot of:

Settings / Exemptions / 'Sender IP Black List'

tab in your MagicSpam admin-interface panel? If you are unable to upload the screenshot here, feel free to send the it at our support email address: support@magicspam.com.

Please note that if you have not blacklisted the senders IP address, it is possible that their IP has been delisted from the dnsbl.sorbs.net reputation list in the meantime; could you please provide us MagicMail log entry for email in questions received at 10:43PM?