It's Azure, not EOP.
Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been Processed." Open a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ? -----Original Message----- From: mailop <mailop-boun...@mailop.org> On Behalf Of Michael Peddemors via mailop Sent: Tuesday, July 11, 2023 11:02 AM To: mailop@mailop.org Subject: [EXTERNAL] [mailop] Outlook/o365 having DNS Troubles? Jul 11 08:20:04 be msd[1974542]: CONN: 52.96.233.45 -> 587 GeoIP = [US] PTR = NXDOMAIN OS = Windows NT kernel Jul 11 08:20:04 be msd[1974542]: EHLO command received, args: SJ1PR84MB3115.NAMPRD84.PROD.OUTLOOK.COM The fingerprint looks funky too.. trying to see if this is an actual cloud outlook, or a forgery.. Sure be nice if Microsoft properly SWIP'ed those segments of it's IP space dedicate to o365, instead of making people guess if this is an Azure abuse or not.. I am sure not ALL of this range is cloud outlook.. NetRange: 52.96.0.0 - 52.115.255.255 CIDR: 52.112.0.0/14, 52.96.0.0/12 NetName: MSFT NetHandle: NET-52-96-0-0-1 Parent: NET52 (NET-52-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Microsoft Corporation (MSFT) RegDate: 2015-11-24 Updated: 2021-12-14 Ref: https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Frdap.arin.net%2Fregistry%2Fip%2F52.96.0.0&data=05%7C01%7Cmichael.wise%40microsoft.com%7C2fa34f7a30104521059708db823a4ccb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638246959179279554%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=I6Lp9OAdVButkiCmbiiYSVGflJHUPMprFjqPgYpsdF8%3D&reserved=0<https://rdap.arin.net/registry/ip/52.96.0.0> OrgName: Microsoft Corporation -- "Catch the Magic of Linux..." ------------------------------------------------------------------------ Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.linuxmagic.com%2F&data=05%7C01%7Cmichael.wise%40microsoft.com%7C2fa34f7a30104521059708db823a4ccb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638246959179279554%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=7CWmf5Z9jncaoCdzcVbgHjNmz%2BYYsdfzrg9%2B87c0xYQ%3D&reserved=0<http://www.linuxmagic.com/> @linuxmagic A Wizard IT Company - For More Info https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.wizard.ca%2F&data=05%7C01%7Cmichael.wise%40microsoft.com%7C2fa34f7a30104521059708db823a4ccb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638246959179279554%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=2Cbd%2FhpTSZs8misRymb%2BAkWzyKBXsLpC0DIMdOL81RQ%3D&reserved=0<http://www.wizard.ca/> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. ------------------------------------------------------------------------ 604-682-0300 Beautiful British Columbia, Canada This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company. _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flist.mailop.org%2Flistinfo%2Fmailop&data=05%7C01%7Cmichael.wise%40microsoft.com%7C2fa34f7a30104521059708db823a4ccb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638246959179279554%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lZ4qY5O2DVrwHhafzEnB7MM8MhbE9E1Yfu6mjHYsAJU%3D&reserved=0<https://list.mailop.org/listinfo/mailop>
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
