False positives, probably because of a major Vodafone mishap...

Started by meyergru, May 14, 2026, 05:55:03 PM

Previous topic - Next topic
Background: I had a problem with a remote Plex access to my network earlier this month. This problem resurfaced today and now, I have found what eventually caused it.

The client was trying to access from a Deutsche Glasfaser account with IP 93.104.119.235 (nothing private to that, because it is CG-NAT).
As it turns out, at the time of writing, this IP is listed at Q-Feeds. It also was listed at Blocklist.de, because of IMAP attacks on 1st of May.

You cannot view this attachment.

Ironically, this was caused by a prolonged outage of Vodafone's IMAP services. It seems that they also notified some blacklisting services because of failed IMAP attempts that they caused themselves. I already reported this as a false positive, but the IP above is only one example, so in case you see problems, now you know... Q-Feeds should dismiss all reports on this IMAP problem.


Proof:

https://forum.vodafone.de/t5/MeinVodafone-E-Mail/Sammelthread-IMAP-Problem-mit-Vodafone-E-Mail-Konto/td-p/3329568


P.S.: There is no contradiction, as using a free e-mail account on one of Vodafone's domains but still having any other access provider is perfectly fine....
Intel N100, 4* I226-V, 2* 82559, 16 GByte, 500 GByte NVME, ZTE F6005

1100 down / 450 up, Bufferbloat A+

indeed, many vodafone ips are on the blocklist now, with good reputation.

And a lot more from other providers, still. Now 94.31.108.115 (also DG) is blocked.
Intel N100, 4* I226-V, 2* 82559, 16 GByte, 500 GByte NVME, ZTE F6005

1100 down / 450 up, Bufferbloat A+

We found a solution (for the majority) and it will be done within the next couple of hours. The IP you listed has been removed from the list already. thank you for letting us know!

Your Threat Intelligence Partner  qfeeds.com

Yeah, I have noticed massive battery drain on my mobile when connected via WiFi at home recently caused by the email client, and also unable to send emails. When I have checked Tip, exchange2019.ionos.co.uk is also on the list which is Ionos UK Exchange Server for all their customer emails.