[mailop] Hat color of list washers / validators

[John Johnstone]

The list washers / validators must be doing a brisk business today. 
Many use Amazon hosting in what seems to be an attempt to evade blocking 
by IP.  Aside from the simple attempts I see some that are trying things 
like:


j...@domain.tld
john@domain.tld
jon@domain.tld
john-...@domain.tld
jonathon...@domain.tld
j...@domain.tld

and things even more obscure like

j...@domain.tld
j...@domain.tld

with up to 50 various permutations / combinations.

It seems somebody gave some fairly purposeful thought into coming up 
with the algorithms to generate these.  I'm curious to know what peoples 
thinking is as to the hat color of these attempts.  Particularly if 
there are any opinions on the risk / need to block them.


-
John J.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] mailop Digest, Vol 125, Issue 3

[Mihai Costea]

One approach is to have the landing page for the unsubscribe include another 
confirmation action/button. This way a GET of the page for security inspection 
will not trigger the  actual removal from the list


> On Mar 1, 2018, at 3:36 PM, "mailop-requ...@mailop.org" 
>  wrote:
> 
> Send mailop mailing list submissions to
>mailop@mailop.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> or, via email, send a message with subject or body 'help' to
>mailop-requ...@mailop.org
> 
> You can reach the person managing the list at
>mailop-ow...@mailop.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of mailop digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: Microsoft IPs automatically unsubscribing recipients?
>  (David Carriger)
>   2. Re: Microsoft IPs automatically unsubscribing recipients?
>  (Michael Wise)
> 
> 
> --
> 
> Message: 1
> Date: Thu, 1 Mar 2018 23:26:19 +
> From: David Carriger 
> To: Michael Wise , "mailop@mailop.org"
>
> Subject: Re: [mailop] Microsoft IPs automatically unsubscribing
>recipients?
> Message-ID: <061b37436bbb472d8fc5324af8cb6...@infusionsoft.com>
> Content-Type: text/plain; charset="windows-1252"
> 
> Yes, I'm still seeing this. So, an open question:
> 
> As an ESP, how am I supposed to tell my users to practice good list hygiene 
> and remove unengaged recipients from their lists when my data is being 
> tainted by Google/Microsoft/etc triggering all of my engagement mechanisms 
> (open tracking pixel, tracked links, etc)? These show up as their most 
> engaged recipients.
> 
> Obviously there are things that can be done on my end (look for all URIs in 
> the email being triggered with a short time frame from IP ranges that we know 
> do this behavior and don't count those as engagement), so I'll tread down 
> that path with our developers. Still, I find it frustrating, and wonder how 
> other people are dealing with this issue.
> 
> 
> From: Michael Wise 
> Sent: Monday, February 26, 2018 6:34:45 PM
> To: David Carriger; mailop@mailop.org
> Subject: RE: Microsoft IPs automatically unsubscribing recipients?
> 
> 
> Is this still on-going?
> I had heard that it had been addressed week before last…?
> 
> Aloha,
> Michael.
> --
> Michael J Wise
> Microsoft Corporation| Spam Analysis
> "Your Spam Specimen Has Been Processed."
> Got the Junk Mail Reporting 
> Tool ?
> 
> From: mailop  On Behalf Of David Carriger
> Sent: Friday, February 23, 2018 11:29 AM
> To: mailop@mailop.org
> Subject: [mailop] Microsoft IPs automatically unsubscribing recipients?
> 
> 
> I've just received an interesting escalation from our support team. We have a 
> customer sending mail to recipients at the following domains:
> 
> 
> andromeda.rutgers.edu
> apsu.edu
> barry.edu
> bsu.edu
> ccsnh.edu
> clarion.edu
> cofc.edu
> dcccd.edu
> gsu.edu
> hofstra.edu
> king.edu
> letu.edu
> mail.barry.edu
> mansfield.edu
> mercycollege.edu
> mssu.edu
> oldqueens.rutgers.edu
> queensu.ca
> rci.rutgers.edu
> rutgers.edu
> salemstate.edu
> trevecca.edu
> uncfsu.edu
> usi.edu
> vanderbilt.edu
> wcsu.edu
> 
> 
> With the exception of Rutgers, these are all hosted on Office 365. Once the 
> mail has delivered, I'm seeing all of the links inside the email hit within a 
> span of time varying between 1-10 seconds. For example, here's an unsubscribe 
> in our database for @mssu.edu:
> 
> List Unsubscribe Mon Feb 19 08:45:54 EST 2018 by 40.107.217.27
> 
> 
> 
> If I pull my web access logs for that, I've got the following timeline of 
> events (all times are EST):
> 
> 
> 
> 2018-02-19 08:45:55 /app/optOut/noConfirm/994494/72f6f3b025bfa2a1 
> 40.107.217.27
> 
> 2018-02-19 08:45:55 
> /app/optOut/8/bf58b2859105b738/994494/72f6f3b025bfa2a1 40.107.217.27
> 
> 2018-02-19 08:45:55 /app/emailOpened/994494/924 40.107.217.27
> 
> 2018-02-19 08:45:56 /app/optOut/noConfirm/994494/%3Cimg%20src= 
> 40.107.217.27
> 
> 2018-02-19 08:45:57 /app/hostedEmail/994494/72f6f3b025bfa2a1 
> 40.107.217.27
> 
> 2018-02-19 08:45:59 /app/emailOpened/994494/924 40.107.217.27
> 
> 
> 
> So, for this example, within a span of four seconds we've hit the one-click 
> opt-out link we use in our List-Unsubscribe header, the user-visible 
> unsubscribe link within the message body, the open tracking pixel, the 
> tracking link we provide for our customer's call-to-action...that's not human 
> behavior. That's machine behavior.
> 
> 
> 
> It's the same story for all of the other recipients I've looked at. This 
> behavior is occurring 

Re: [mailop] Microsoft IPs automatically unsubscribing recipients?

[Dave Warren]

On 2018-03-01 16:26, David Carriger wrote:

Yes, I'm still seeing this. So, an open question:

As an ESP, how am I supposed to tell my users to practice good list 
hygiene and remove unengaged recipients from their lists when my data is 
being tainted by Google/Microsoft/etc triggering all of my engagement 
mechanisms (open tracking pixel, tracked links, etc)? These show up as 
their /most/ engaged recipients.


Obviously there are things that can be done on my end (look for all URIs 
in the email being triggered with a short time frame from IP ranges that 
we know do this behavior and don't count those as engagement), so I'll 
tread down that path with our developers. Still, I find it frustrating, 
and wonder how other people are dealing with this issue.


I don't know if this has already been discussed, but what's the 
User-Agent? Any clues there?


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Microsoft IPs automatically unsubscribing recipients?

[Vick Khera]

On Thu, Mar 1, 2018 at 6:26 PM, David Carriger <
david.carri...@infusionsoft.com> wrote:

> Yes, I'm still seeing this. So, an open question:
>
> As an ESP, how am I supposed to tell my users to practice good list
> hygiene and remove unengaged recipients from their lists when my data is
> being tainted by Google/Microsoft/etc triggering all of my engagement
> mechanisms (open tracking pixel, tracked links, etc)? These show up as
> their *most* engaged recipients.
>
Build in some intelligence to the tracking to detect a single remote IP
tripping every single link in your message within a few seconds, and ignore
it. Over time you will start to learn the IPs to just ignore up front. I'm
sure you can come up with some more intelligent methods too, using neural
networks or some such fancy pants trendy technology. :)
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop