how to find out why IP is blocked

Question asked by Russ Michaels - 1/28/2015 at 9:32 AM

Unanswered

I have a client whose IP address keeps getting blocked, I have gone through the pop, imap and smtp logs and I cannot find any clue or mention of the reason.

In the logs I can see all the users connections, then being immediately disconnected, which I presume is when they are blocked.

But how and where do you find out why they got blocked in the first place ?

5 Replies

Reply to Thread

Employee Replied

1/28/2015 at 10:49 AM

Employee Post

Hi Russ. One common cause of an IP address being blocked is a compromised account being used to relay spam through your mail server. This KB Article will explain how to find a possible compromised account.

Webio Replied

1/28/2015 at 11:09 PM

IMHO you should vote for this topic:

http://portal.smartertools.com/community/a902/abuse-detection-blocks-history.aspx

Too bad that no one from ST didn't responded there. In my opinion this is badly needed logging and troubleshooting function.

Russ Michaels Replied

1/29/2015 at 2:26 PM

spam issues we can usually identify, we also have the scheduled reports to help with that. But the issue seems to be with abuse detection which is not logged at all, so there is no way at all to tell what caused it. The last one for example was caused by too many successive connections in 5 minutes as client had 68 users all connecting every couple of minutes. But there was no way at all to tell this, not a single thing in the logs. All we had was the blocked IP in the block list, but no explanation why.

Russ Michaels Replied

1/29/2015 at 2:26 PM

dang it appears this stupid forum stops you copying text too, so I cannot even copy that link

Employee Replied

1/29/2015 at 3:28 PM

Employee Post

Russ, what browser are you in? I have no problem copying the link from Chrome, Firefox or Safari.

Back to Community Threads

Please leave this box unchecked

5 Replies

Reply to Thread

Tags

Related Knowledge Base Articles