cancel
Showing results for 
Search instead for 
Did you mean: 
julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

In the past 7 days, I have 145 emails from various vendors who are being flagged due to the sending IP address being found in Spamcop's blocking list. And 153 in the past 30 days. The IP's in question have varied, however the two that seem to be reoccurring are:

167.89.82.160
167.89.58.229 (this seems to possibly have been removed from the block list)

An additional one comes up as failing to retry when the email is deferred via greylisting:
167.89.58.138

None of these IP's are listed in Intuit's list of servers found here: https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-customers/3-solutions-customer...

And this seems to have started on March 30th 2022 based on my email logs.

Since I'm not a customer, I don't have a direct line to support.

131 Comments 131
julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Additional screenshot of the blocked IP from Spamcop.

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

@AlexV while I appreciate your response. I don't believe you understood the issue. Or did not read the issue completely.

The issue at hand is not with a vendor, nor is it with my company accepting email.

The problem is that a pair of Intuit's mail servers are appearing on a public spam blocklist called Spamcop. I provided the screenshot of the block that's visible for any and all to see. If any company's mail filter utilizes this public spam blocklist (as many do) Intuit's email will be rejected.

Additionally, the IPs that are appearing are NOT in Intuit's documented mail server list.

The emails that are being rejected due to the IP's being on the blocklist are from [email address removed] not from [email address removed]. And we won't be blindly allowing that address through to skip mail protections.

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

The link you posted "Connect your email to QuickBooks"
https://quickbooks.intuit.com/learn-support/en-us/help-article/account-management/connect-email-quic...

Doesn't have a single one of Intuit's IP's or servers on it.

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

If anything you should have linked to the first support article in my first post.
HOWEVER, as I said before, the IPs we're seeing blocked, are not in this list.

mathersa
Level 1

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I am having the same issue. In fact the IP 167.89.82.160 is listed on four separate IP Blacklists and blocked by my own spam filter. This meant that I wasn't even receiving copies of the Estimates and Invoices I was sending out. This appears to be something Quickbooks themselves need to address

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

@mathersa Thanks for speaking up on this also. I don't think they seem to understand that it's their mail servers that are on the IP blocklists. And that it has nothing to do with any customer configuration. Based on previous responses I'm not sold that this can be resolved on their community forum.

If you are able to open a support case with them and they actually see the issue, please post an update here.

Good luck!

ProMAAC
Level 1

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Please forward this notice to your IT department as there is NOTHING that WE as users of quickbooks can do to change this problem. INTUIT must contact spamcop to be removed from the blocking that has been placed on emails coming from [email address removed] Server logs showed "167.89.58.138 listed in bl.spamcop.net (127.0.0.2) Causes of listing • System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop) SpamCop users have reported system as a source of spam less than 10 times in the past week" -Daniil Ruban Visionary Broadband Technical Support

KDS4
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

This issue is getting worse, the sending IP addresses of Quickbooks servers have now been blacklisted in:

  • 15 different databases for 167.89.58.138:

image.png

  • 23 different databases for 167.89.58.229:

image.png

  • 11 different databases for 167.89.82.160:

image.png
Any company that uses decent mail filtering software will automatically block these emails before data acceptance, and permitting these IP addresses with so many black-listings is not an option.

Quickbooks needs to remediate these listings ASAP or we will be looking for alternatives and recommending our customers also do the same.

Fiat Lux - ASIA
Level 15

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

This issue is highly technical related to IT security and is not related to any accounting issues. I'm not sure most of the first layer support team and Intuit Community team is familiar with the terms spam filters, firewalls, endpoint security and more. You should send a private message to any Community Moderators to escalate this issue to their IT Security team and fix it immediately.

 

Otherwise, explore another accounting app and purchase a 3rd party conversion service if required. 

KDS4
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Thank you for forwarding this through to your team, LieraMarie_A - I appreciate the prompt response.

 

Have a great day.

hewi12
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I have been having this same exact issue for a few months. But recently (as in the last few days) it has gotten worse. Not one single email/invoice is getting past SpamCop. I have spoken to the online chat team and they dont have a clue as to what I am talking about.


Has anyone heard if they are even trying to fix this, as its obviously useless trying to use this service if they are not going to fix it.

Fiat Lux - ASIA
Level 15

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

@hewi12 

As long as they don't announce any ticket numbers, they may ignore the issue. Try sending a private message to any of the Moderators here to get their attention.

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Who are the mods?
There are several employees who have commented, I would have expected with this much noise on this thread a mod would have seen this by now.

Past 30 days I've seen 176 rejections due to IP blocklisting.
Always the same 3 IPs. None of which are in their mail IP lists.

167.89.58.138
167.89.82.160
167.89.58.229

 

Fiat Lux - ASIA
Level 15

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

@julezmbi 

Adrian_A is one of the Mods here. 

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I was afraid you were going to say that.
That mod responded above already.

I've since reached out to Quickbooks and Quickbookscares on Twitter and had a response. I don't know if I'll ever hear anything back further, but we'll see.

Fiat Lux - ASIA
Level 15

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Another concern is that I see only less than 10 Community members reporting the same issue in this thread. I didn't find another post in ALL QB Community forums asking the same question over the last few weeks. No wonder they didn't mention the ticket number to acknowledge it.

hewi12
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

"

Past 30 days I've seen 176 rejections due to IP blocklisting.
Always the same 3 IPs. None of which are in their mail IP lists.

167.89.58.138
167.89.82.160
167.89.58.229

"

 

 

 

Yep, those are the same ones I am seeing as well.

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

My guess is most QuickBooks users, don't understand what's going on, nor want to, unless they have an IT department behind them that understands how email servers and blocklists work. As invoices aren't delivered and payments aren't made, I wouldn't doubt it'll continue to bubble up. More people will search for this issue, more people will post they have the same problem. But it'll take time.

When I posted this originally, the first date we saw this behavior was March 30th 2022. Prior to that, no issue. So we're about a month and some change into the 3 sendgrid IP's being listed on a blocklist.

If I had to venture a guess, they either started to use sendgrid for emailing outbound from their service. Or sendgrid switched their IPs since they aren't documented anywhere on the Intuit website at this point. My workaround for the time being, is to allow those IPs through, but hold all attachments for review. It's obnoxious, but at least it continues to protects us, and allow us to receive safe emails, until Intuit does something productive about it.

I'm debating on going a step further to send a notice on each email back to the sender stating that the emails are coming from malicious IP addresses, in the hopes that each one opens a ticket with Intuit. My hesitancy is that they'll just create a mail rule to delete those responses since people generally take the easy way out of everything.

cirrusmarketing
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

Thank you julezmbi for staying in this fight for us impacted.

 

My entire business is run on QB with many invoices being sent out each month.  My trust this is being aggressively worked on it waning by the day. 

 

We've been reduced to adding extra help to ensure invoices are being received and paid, with no end in sight from QB.  

 

I will continue to check back for any progress made.  

dd87
Level 1

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I completely agree. Am commenting here to keep this issue live - as we are also being affected and no one in Support appears to understand that this is an issue that users cannot resolve. QuickBooks tech needs to get onto this and deal with the spam listings of their IPs. It has meant manually sending each invoice which knocks out a lot of the process gains of having QB software in the first place. I can't believe that more people aren't noticing this and reporting it to QuickBooks. Frustrating and hope they can resolve it very soon. 

cirrusmarketing
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I was on the phone with QB for 2 1/2 hours on Monday, not only did I come away with NO ANSWERS again I also have another "investigation" number.  This is being kept quiet by QB, even the first level tier agreed and said this is not the first time an issue this large has the QB lid on it.  Compared notes with my clients IT department on a couple of invoices, NOTHING lined up in terms of delivery and received.  It was showing viewed on my end and not even showing as received with IT.  I even had one invoice where it was "Viewed", but showing "Undeliverable".  WHO AND WHAT do you believe anymore???

julezmbi
Level 3

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I'm glad people with support agreements have been reaching out at least. My support with the Qbcares Twitter account seems to have been a dead end for the most part.

KDS4
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I've had no luck seeking support for this issue on behalf of our clients that are affected, so we have provided them with an explanation on what the issue is along with supporting information, and recommended that they raise the issue with Quickbooks Support directly.

 

This isn't a scalable solution by any means and those that have raised the issue with support report back that "...Quickbooks took a look and couldn't find any issues" or have misunderstood the issue entirely.

 

Just re-checking the status of the sending IPs and as expected, they've been added to additional RBL databases...

 

  • 6 additional black-listings for 167.89.82.160 since my previous post.

image.png

  • 9 additional black-listings for 167.89.58.138 since my previous post.

image.png

 

 

jrubow
Level 2

Intuit IPs found in Spamcop blocking list preventing vendors from sending invoices

I just created an account so I could comment on this as well. I am not a QB user, but we are seeing the same issue with one of our vendors. They can't send us invoices because of the IPs being listed in Spamcop. I am also surprised that none of their other customers are reporting this. We also don't want to add the IPs in to just blindly allow potential malicious emails thru. Let's go quickbooks, get those IPs out of your send list or get Spamcop to remove them. 

Need to get in touch?

Contact us