[Threat inteligence] OVH Private Exchange IP listed as HIGH RISK

[czeslaw]

Hello,

My Exchange server's IP (OVH Private Exchange 2013) was listed by McAfee as high risk, see link below:

92.222.111.12 - IP - McAfee Labs Threat Center

I've tried unlisting the ip with use of this form:

https://secure.mcafee.com/apps/mcafee-labs/threat-feedback.aspx?ip=92.222.111.12

but there is no answer coming back from McAfee.

It's very troubling as many of our business partners use McAfee software on their servers, what results with our messages being blocked (Denied by policy).

Please help me to resolve this issue. I have no idea why my ip address is on the list. DNS configuration looks good to me, and I can see no other reason why it could get listed.

OVH claimes it's not their fault and that it's my deal to contact McAfee (what I tried without luck).

There is no problem with other blacklists, only McAfee Threat Inteligence:

http://mxtoolbox.com/archive/?actionstring=blacklist:ex.api.org.pl

Please advise me what to do

[Peacekeeper]

Retry submitting your feedback We will see if another mod has an idea

[czeslaw]

Thank you for your reply.

I've submitted the form once again. I've selected Email False Positive.

[Peacekeeper]

Good luck I have asked another mod whether disputing via  trusted source would be worth a go.

[exbrit]

Moved this to SiteAdvisor.  Contact Trusted Source, usually gets results.

Peter

Moderator

[catdaddy]

,

             If I may add also, if you open a 'Ticket' with Trusted Source. Please keep for future reference if your issue continues to be unresolved. It will go a long way in us assisting you further, should that be the case.

All the Best

Catdaddy

[czeslaw]

I really appreciate your support!

************************************************************
Ticket_ID 985616 Reviewed Progress Report for URL Submissions
************************************************************


Status:Reviewed
URL: https://ex.api.org.pl
Initial categories: Web Mail
Post-review categories: Web Mail
Which List: ts
Please allow the Web Reputation some time to update.
In some cases, the Web Reputation shown at the time of the ticket closure may not reflect the updated Web Reputation.
Updates at times may take longer to complete. Please consult TrustedSource.org to verify the published Web Reputation for any given URL or IP address.
List Number Closed: -

I hope that TrustedSource single url verification also concernes Email reputation of the IP address.

The status here:

92.222.111.12 - IP - McAfee Labs Threat Center

did not change, but as stated in the progress report I'll give it some time to refresh / propagate.

[catdaddy]

Thank you for the prompt response. Give it several days, as generally is the case. I bookmarked the Ticket number for reference as well. As Colleagues Ex_Brit and Peacekeeper stated. Trusted Source is the quickest procedure to take.

[czeslaw]

Hello again,

Thank you a lot for your support last time. My address was delisted after your help. Now, after several months it's back in there as HIGH RISK.

I will open new support ticket, like last time, but still I have no idea what is the cause of this situation.

Please help

TICKET ID: #1079707

[catdaddy]

,

                 Give it a few days and see if the Rating changes, as before. As for the 'Dangerous/Malicious' Rating, has anything changed since it was deemed safe? Possibly a Download/Process?  If so, it might possibly be a process that has to be Cleared/Whitelisted by McAfee Labs?

All the Best,

Catdaddy

McAfee Community Moderator

Consumer Products