Is this still on-going? I had heard that it had been addressed week before last...?
Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been Processed." Got the Junk Mail Reporting Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ? From: mailop <mailop-boun...@mailop.org> On Behalf Of David Carriger Sent: Friday, February 23, 2018 11:29 AM To: mailop@mailop.org Subject: [mailop] Microsoft IPs automatically unsubscribing recipients? I've just received an interesting escalation from our support team. We have a customer sending mail to recipients at the following domains: andromeda.rutgers.edu apsu.edu barry.edu bsu.edu ccsnh.edu clarion.edu cofc.edu dcccd.edu gsu.edu hofstra.edu king.edu letu.edu mail.barry.edu mansfield.edu mercycollege.edu mssu.edu oldqueens.rutgers.edu queensu.ca rci.rutgers.edu rutgers.edu salemstate.edu trevecca.edu uncfsu.edu usi.edu vanderbilt.edu wcsu.edu With the exception of Rutgers, these are all hosted on Office 365. Once the mail has delivered, I'm seeing all of the links inside the email hit within a span of time varying between 1-10 seconds. For example, here's an unsubscribe in our database for <redacted>@mssu.edu: List Unsubscribe Mon Feb 19 08:45:54 EST 2018 by 40.107.217.27 If I pull my web access logs for that, I've got the following timeline of events (all times are EST): 2018-02-19 08:45:55 /app/optOut/noConfirm/994494/72f6f3b025bfa2a1 40.107.217.27 2018-02-19 08:45:55 /app/optOut/8/bf58b2859105b738/994494/72f6f3b025bfa2a1 40.107.217.27 2018-02-19 08:45:55 /app/emailOpened/994494/924 40.107.217.27 2018-02-19 08:45:56 /app/optOut/noConfirm/994494/%3Cimg%20src= 40.107.217.27 2018-02-19 08:45:57 /app/hostedEmail/994494/72f6f3b025bfa2a1 40.107.217.27 2018-02-19 08:45:59 /app/emailOpened/994494/924 40.107.217.27 So, for this example, within a span of four seconds we've hit the one-click opt-out link we use in our List-Unsubscribe header, the user-visible unsubscribe link within the message body, the open tracking pixel, the tracking link we provide for our customer's call-to-action...that's not human behavior. That's machine behavior. It's the same story for all of the other recipients I've looked at. This behavior is occurring from the following IPs/ranges, all owned by Microsoft: 104.47.61.250 40.107.217.0/24 40.107.218.0/24 40.107.222.0/24 40.107.234.0/24 40.107.238.0/24 40.107.242.0/24 Are we the only ones experiencing this, or are others seeing this as well? Small Business Growth Expert DAVID CARRIGER Linux Systems Administrator -- david.carri...@infusionsoft.com<mailto:david.carri...@infusionsoft.com>
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
