Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Additional screenshot of the blocked IP from Spamcop.

@AlexV while I appreciate your response. I don't believe you understood the issue. Or did not read the issue completely.

The issue at hand is not with a vendor, nor is it with my company accepting email.

The problem is that a pair of Intuit's mail servers are appearing on a public spam blocklist called Spamcop. I provided the screenshot of the block that's visible for any and all to see. If any company's mail filter utilizes this public spam blocklist (as many do) Intuit's email will be rejected.

Additionally, the IPs that are appearing are NOT in Intuit's documented mail server list.

The emails that are being rejected due to the IP's being on the blocklist are from [email address removed] not from [email address removed]. And we won't be blindly allowing that address through to skip mail protections.

The link you posted "Connect your email to QuickBooks"
https://quickbooks.intuit.com/learn-support/en-us/help-article/account-management/connect-email-quic...

Doesn't have a single one of Intuit's IP's or servers on it.

If anything you should have linked to the first support article in my first post.
HOWEVER, as I said before, the IPs we're seeing blocked, are not in this list.

I am having the same issue. In fact the IP 167.89.82.160 is listed on four separate IP Blacklists and blocked by my own spam filter. This meant that I wasn't even receiving copies of the Estimates and Invoices I was sending out. This appears to be something Quickbooks themselves need to address

@mathersa Thanks for speaking up on this also. I don't think they seem to understand that it's their mail servers that are on the IP blocklists. And that it has nothing to do with any customer configuration. Based on previous responses I'm not sold that this can be resolved on their community forum.

If you are able to open a support case with them and they actually see the issue, please post an update here.

Good luck!

Please forward this notice to your IT department as there is NOTHING that WE as users of quickbooks can do to change this problem. INTUIT must contact spamcop to be removed from the blocking that has been placed on emails coming from [email address removed] Server logs showed "167.89.58.138 listed in bl.spamcop.net (127.0.0.2) Causes of listing • System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop) SpamCop users have reported system as a source of spam less than 10 times in the past week" -Daniil Ruban Visionary Broadband Technical Support

This issue is getting worse, the sending IP addresses of Quickbooks servers have now been blacklisted in:

• 15 different databases for 167.89.58.138:

• 23 different databases for 167.89.58.229:

• 11 different databases for 167.89.82.160:

Any company that uses decent mail filtering software will automatically block these emails before data acceptance, and permitting these IP addresses with so many black-listings is not an option.

Quickbooks needs to remediate these listings ASAP or we will be looking for alternatives and recommending our customers also do the same.

This issue is highly technical related to IT security and is not related to any accounting issues. I'm not sure most of the first layer support team and Intuit Community team is familiar with the terms spam filters, firewalls, endpoint security and more. You should send a private message to any Community Moderators to escalate this issue to their IT Security team and fix it immediately.

Otherwise, explore another accounting app and purchase a 3rd party conversion service if required. 

Thank you for forwarding this through to your team, LieraMarie_A - I appreciate the prompt response.

Have a great day.

I have been having this same exact issue for a few months. But recently (as in the last few days) it has gotten worse. Not one single email/invoice is getting past SpamCop. I have spoken to the online chat team and they dont have a clue as to what I am talking about.

Has anyone heard if they are even trying to fix this, as its obviously useless trying to use this service if they are not going to fix it.

@hewi12 

As long as they don't announce any ticket numbers, they may ignore the issue. Try sending a private message to any of the Moderators here to get their attention.

Who are the mods?
There are several employees who have commented, I would have expected with this much noise on this thread a mod would have seen this by now.

Past 30 days I've seen 176 rejections due to IP blocklisting.
Always the same 3 IPs. None of which are in their mail IP lists.

@julezmbi 

Adrian_A is one of the Mods here. 

I was afraid you were going to say that.
That mod responded above already.

I've since reached out to Quickbooks and Quickbookscares on Twitter and had a response. I don't know if I'll ever hear anything back further, but we'll see.

Another concern is that I see only less than 10 Community members reporting the same issue in this thread. I didn't find another post in ALL QB Community forums asking the same question over the last few weeks. No wonder they didn't mention the ticket number to acknowledge it.

"

Past 30 days I've seen 176 rejections due to IP blocklisting.
Always the same 3 IPs. None of which are in their mail IP lists.

"

Yep, those are the same ones I am seeing as well.

My guess is most QuickBooks users, don't understand what's going on, nor want to, unless they have an IT department behind them that understands how email servers and blocklists work. As invoices aren't delivered and payments aren't made, I wouldn't doubt it'll continue to bubble up. More people will search for this issue, more people will post they have the same problem. But it'll take time.

When I posted this originally, the first date we saw this behavior was March 30th 2022. Prior to that, no issue. So we're about a month and some change into the 3 sendgrid IP's being listed on a blocklist.

If I had to venture a guess, they either started to use sendgrid for emailing outbound from their service. Or sendgrid switched their IPs since they aren't documented anywhere on the Intuit website at this point. My workaround for the time being, is to allow those IPs through, but hold all attachments for review. It's obnoxious, but at least it continues to protects us, and allow us to receive safe emails, until Intuit does something productive about it.

I'm debating on going a step further to send a notice on each email back to the sender stating that the emails are coming from malicious IP addresses, in the hopes that each one opens a ticket with Intuit. My hesitancy is that they'll just create a mail rule to delete those responses since people generally take the easy way out of everything.

Thank you julezmbi for staying in this fight for us impacted.

My entire business is run on QB with many invoices being sent out each month.  My trust this is being aggressively worked on it waning by the day. 

We've been reduced to adding extra help to ensure invoices are being received and paid, with no end in sight from QB.  

I will continue to check back for any progress made.  

I completely agree. Am commenting here to keep this issue live - as we are also being affected and no one in Support appears to understand that this is an issue that users cannot resolve. QuickBooks tech needs to get onto this and deal with the spam listings of their IPs. It has meant manually sending each invoice which knocks out a lot of the process gains of having QB software in the first place. I can't believe that more people aren't noticing this and reporting it to QuickBooks. Frustrating and hope they can resolve it very soon. 

I was on the phone with QB for 2 1/2 hours on Monday, not only did I come away with NO ANSWERS again I also have another "investigation" number.  This is being kept quiet by QB, even the first level tier agreed and said this is not the first time an issue this large has the QB lid on it.  Compared notes with my clients IT department on a couple of invoices, NOTHING lined up in terms of delivery and received.  It was showing viewed on my end and not even showing as received with IT.  I even had one invoice where it was "Viewed", but showing "Undeliverable".  WHO AND WHAT do you believe anymore???

I'm glad people with support agreements have been reaching out at least. My support with the Qbcares Twitter account seems to have been a dead end for the most part.

I've had no luck seeking support for this issue on behalf of our clients that are affected, so we have provided them with an explanation on what the issue is along with supporting information, and recommended that they raise the issue with Quickbooks Support directly.

This isn't a scalable solution by any means and those that have raised the issue with support report back that "...Quickbooks took a look and couldn't find any issues" or have misunderstood the issue entirely.

Just re-checking the status of the sending IPs and as expected, they've been added to additional RBL databases...

• 6 additional black-listings for 167.89.82.160 since my previous post.

• 9 additional black-listings for 167.89.58.138 since my previous post.

I just created an account so I could comment on this as well. I am not a QB user, but we are seeing the same issue with one of our vendors. They can't send us invoices because of the IPs being listed in Spamcop. I am also surprised that none of their other customers are reporting this. We also don't want to add the IPs in to just blindly allow potential malicious emails thru. Let's go quickbooks, get those IPs out of your send list or get Spamcop to remove them.