Spam - any tips?

Any chance to block these mails by Extra-RBL? Tell abuse@outlook.com what’s going on, maybe they care about.

Best regards

Alex

The UTM is now blocking and registering them as Malware/Phish.

Still hitting us every 10 minutes or so constantly and all coming from Microsofts servers.

You would think that they would know what's going on by scanning outgoing content....

Louis sent me the headers of one of these emails.  There's nothing there to find as the emails are coming from valid Outlook accounts.  My guess would be infected user workstations as opposed to phished credentials.

In this case, the best thing would be to submit a report to abuse@microsoft.com for any such email.

Cheers - Bob

They are starting to turn up on blacklists but it makes you wonder what Microsoft are doing ie do they stop mail being sent through the offending IP altogether.

Is that IP ever recycled eg used to send email from again.

On top of that, you would still think Microsoft would scan mail outgoing??

They are starting to turn up on blacklists but it makes you wonder what Microsoft are doing ie do they stop mail being sent through the offending IP altogether.

Is that IP ever recycled eg used to send email from again.

On top of that, you would still think Microsoft would scan mail outgoing??

I'd be surprised if the IPs would be on an RBL, Louis.  What was the reason that the SMTP log gave for blocking one of those emails?

Cheers - Bob

I checked the IP via mxtoolbox and some of them eventually went onto blacklists although not all did.

Others were eventually detected as Malware/Phish

And some got through and continue to get through.