Be very curious if they are using 'common RBL Services', which ones ;)
This is another case where a little more accurate (explicit) rwhois
might be in order.. right now the whole /16 is still listed as:
route: 150.254.0.0/16
descr: POZMAN-EDU-980508
origin: AS9112
inetnum: 150.254.0.0 - 150.254.255.255
descr: Institute of Bioorganic Chemistry Polish Academy of
Science, Poznan Supercomputing and Networking Center
org: ORG-PSAN1-RIPE
Eg, maybe indicate which IPs are infrastructure (email clusters) vs
generic access points.. or maybe even different departments.
Aside from suggesting outbound rate limiters ;) which IPs are part of
your email cluster? PTR naming conventions don't make that obvious.
You mention in another thread this IP does 'some mailing local', which
is confusing.. as you mention it goes to Gaail.
What kind of 'local mailing' is this system doing?'
However, you might want to consider using HetrixTools or MXToolbox to
monitor those IPs. Watch other IPs activity on the same segment as well.
And keep an eye out for those router compromises as well ;)
On 2026-03-20 08:31, mathieu l. via mailop wrote:
In my experience, Google uses common RBL services.
Your domain "ifmpan.poznan.pl" seems linked to the IP address
150.254.201.17. That IP address is still on some blocklists:
https://multirbl.valli.org/lookup/150.254.201.17.html
Mathieu L.
for the Koumbit Network
Le 20/03/2026 à 11:08, Paweł Leśniak via mailop a écrit :
One of our new email accounts (in ifmpan.poznan.pl domain) has been
compromised and we've been sending spam from Mar 13 10pm for about 24
hours.
All the other services are accepting mails now, just gmail is blocking
us. In Google postmaster tools there is not a single user-reported spam.
On the "Compliance status" tab we meet all requirements, but we are
being treated as a subdomain of 'poznan.pl' domain which is a regional
domain, so all subdomains are primary. In this case I don't see a way
of reporting delivery issue with Google Postmaster Tools.
Best,
Pawel
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
