Judging by the 1) lack of rDNS and 2) paucity of actual email traffic across 
all the IPs, I'd suggest it's *NOT* Office365, but more likely rogue machines 
in Azure.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ?



-----Original Message-----
From: mailop <mailop-boun...@mailop.org> On Behalf Of Jesper Sörtoft
Sent: Tuesday, June 12, 2018 5:08 AM
To: mailop@mailop.org
Subject: Re: [mailop] Misleading clicks - thoughts



Hi,



those are in our webserverlogs too.



Kind of related, anyone seeing

40.107.194.*/40.107.200.*/40.107.201.*/40.107.202.* etc ?



Microsoft IP's, I'm guessing they are somehow related to Office 365. And they 
are "clicking" unsubscribe-links (more or less randomly), against the 
recipients wishes.





On 2018-06-12 13:17, Stefano Bagnara wrote:

> On Tue, 12 Jun 2018 at 10:25, Andy Onofrei via mailop 
> <mailop@mailop.org<mailto:mailop@mailop.org>> wrote:

>> [...]

>> I wanted to ask you if someone is experiencing misleading clicks ( caused by 
>> spam filters or something similar and not by bot farms ).

> Hi,

>

> Here are some of the IPs doing more "non-humans" clics in my list:

> 199.19.249.196, 195.45.128.131, 50.19.154.226, 94.237.41.127,

> 88.198.94.196, 52.44.93.197, 72.30.14.126.

> (216.244.66.199 and 216.244.66.246 seem to have stopped in march).

>

> I didn't investigate on them.,.. but maybe you want to check your data.

>

> Stefano

>

> _______________________________________________

> mailop mailing list

> mailop@mailop.org<mailto:mailop@mailop.org>

> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchill

> i.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7C

> michael.wise%40microsoft.com%7C83a4acbf881445ab9e3d08d5d05e3dfd%7C72f9

> 88bf86f141af91ab2d7cd011db47%7C1%7C0%7C636644025546553986&sdata=611rJz

> yNK2vtk3xSZlv3jazflA%2FtdHS%2FU5Ux5sJs8gU%3D&reserved=0



--

Best regards

Jesper Sörtoft

Deliverability Specialist

Stormgatan 11, 211 20 Malmö

https://na01.safelinks.protection.outlook.com/?url=www.apsis.se&data=02%7C01%7Cmichael.wise%40microsoft.com%7C83a4acbf881445ab9e3d08d5d05e3dfd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636644025546553986&sdata=tmT06p9wwjbCDPLxf7eSSB8TAvX8ac5fAyxUV7pF5g8%3D&reserved=0





_______________________________________________

mailop mailing list

mailop@mailop.org<mailto:mailop@mailop.org>

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C83a4acbf881445ab9e3d08d5d05e3dfd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636644025546553986&sdata=611rJzyNK2vtk3xSZlv3jazflA%2FtdHS%2FU5Ux5sJs8gU%3D&reserved=0
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to