On 23 Jun 2020 19:24:14 -0400, John Levine via mailop <[email protected]> wrote:
>Pardot sends from 13.111.68.0/24 and since it is 100% spam, that's easy to >block. Looking at the >logs, I don't think I see any real mailfrom Sharepoint either in 52.100/16. Beginning Sat 2020-06-20 14:47 US EDT, the following MSFT prefixes have brought us traffic with fake pharmacy bargains/discounts and similar detritus. So far about 85% of them have eventually hit an "instant death" local spamtrap. They are aggressive in their retries. 102.133.128.0/17 104.208.0.0/13 104.40.0.0/13 13.64.0.0/11 137.116.0.0/15 191.232.0.0/13 20.150.0.0/15 20.48.0.0/12 23.96.0.0/14 40.112.0.0/13 40.120.0.0/14 40.127.0.0/16 40.127.0.0/19 40.74.0.0/15 51.107.0.0/16 52.136.0.0/13 52.148.0.0/14 52.160.0.0/11 52.224.0.0/11 65.52.0.0/14 When I worked there, it was difficult to identify what person(s) should be reading abuse@. It was even more difficult to determinw what, if any, was the procedure/policy set they would be acting upon. My efforts did not win me favour in Redmond. mdr -- We must not confuse statistical probability with some transcendental and utterly compelling force. -- Unspiek, Baron Bodissey (Life, Volume II) _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
