Home

Office 365 Exchange Online server blacklisted

%3CLINGO-SUB%20id%3D%22lingo-sub-31743%22%20slang%3D%22en-US%22%3EOffice%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31743%22%20slang%3D%22en-US%22%3E%3CP%3EAt%2010%3A20AM%2024%20Nov%20AEST%20I'm%20seeing%20reports%20that%20Office%20365%20Exchange%20Online%20server%26nbsp%3Bmail-me1aus01hn0228.outbound.protection.outlook.com%20is%20appearing%20on%20different%20blacklist%20sources%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fmxtoolbox.com%2FSuperTool.aspx%3Faction%3Dblacklist%253a104.47.116.228%26amp%3Brun%3Dtoolpage%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fmxtoolbox.com%2FSuperTool.aspx%3Faction%3Dblacklist%253a104.47.116.228%26amp%3Brun%3Dtoolpage%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20raised%20a%20support%20ticket%20but%20thought%20I'd%20post%20in%20here%20in%20case%20anyone%20else%20is%20impacted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt's%20preventing%20one%20of%20our%20clients%20emailing%20payslips%20to%20staff%20who%20have%20hotmail.com%20etc%20addresses%20or%20any%20personal%20address%20being%20protected%20by%20blacklist%20checks.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWill%20update%20this%20when%20Microsoft%20have%20resolved.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-31743%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35312%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35312%22%20slang%3D%22en-US%22%3E%3CP%3EOK%2C%20thanks.%20I'll%20get%20her%20to%20retry%20in%20the%20morning%20and%20will%20log%20a%20new%20call%20with%20support%20if%20we%20need%20to.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35288%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35288%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F8023%22%20target%3D%22_blank%22%3E%40Sonia%20Cuff%3C%2FA%3E%20No%2C%20none%20of%20our%20customers%20reported%20a%20problem%20like%20this%20since%20this%20one%20was%20resolved.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35250%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35250%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3194%22%20target%3D%22_blank%22%3E%40Peter%20Klapwijk%3C%2FA%3E%26nbsp%3BAre%20you%20seeing%20this%20again%3F%20We%20had%20a%20different%20client%20contact%20us%20today%20with%20a%26nbsp%3Bnon-suspicious%20email%20that%20had%20been%20blocked%20via%20the%20blacklisted%20high%20risk%20server%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32334%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32334%22%20slang%3D%22en-US%22%3E%3CP%3EI%20see%2C%20thanks%20for%20the%20link%20Peter%2C%20that%20was%20helpful.%3C%2FP%3E%3CP%3EI've%20been%20called%20today%20to%20say%20the%20Microsoft%20have%20fixed%20our%20issue%20which%20was%20impacting%20about%2020%20customers.%20I'm%20just%20about%20to%20retest%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32166%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32166%22%20slang%3D%22en-US%22%3EOk%2C%20but%20the%20issue%20was%20all%20email%20send%20to%20Hotmail%2C%20Gmail%20etc%20was%20send%20via%20the%20High%20Risk%20Delivery%20Pool%20and%20that%20issue%20was%20solved.%20Yes%20this%20pool%20of%20servers%20is%20still%20on%20the%20blacklist%2C%20but%20this%20is%20not%20the%20server%20pool%20which%20is%20used%20to%20send.%20Have%20a%20look%20at%20this%20article%20for%20more%20information%20about%20the%20server%20pool%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fen-GB%2Flibrary%2Fjj200746(v%3Dexchg.150).aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2Fen-GB%2Flibrary%2Fjj200746(v%3Dexchg.150).aspx%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-32022%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-32022%22%20slang%3D%22en-US%22%3E%3CP%3EMxtoolbox.com%20is%20still%20reporting%20that%20Exchange%20Online%20server%20as%20being%20blacklisted%20on%206%20different%20services.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31922%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31922%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft%20confirmed%20the%20issue%20is%20resolved.%3CBR%20%2F%3EI%20don%60t%20see%20messages%20send%20through%20the%20high%20risk%20delivery%20pool%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31908%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31908%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20where%20being%20an%20Exchange%20admin%20gets%20frustrating.%20On%20our%20own%20servers%2C%20we'd%20investigate%2C%20remediate%20and%20apply%20for%20the%20listing%20to%20be%20removed.%20With%20Exchange%20Online%2C%20Microsoft%20will%20do%20the%20same%20%26nbsp%3B...%20eventually.%20It%20just%20takes%20them%20longer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20the%20upside%20I%26nbsp%3Bnever%20need%20eseutil.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20we%20wait.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Sonia%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-31774%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Online%20server%20blacklisted%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-31774%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Sonia%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMaybe%20same%20issue%20as%20my%20customers%20have%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FExchange%2FExchange-Online-send-mail-through-high-risk-delivery-pool%2Fm-p%2F31640%23M414%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FExchange%2FExchange-Online-send-mail-through-high-risk-delivery-pool%2Fm-p%2F31640%23M414%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20see%20a%20lot%20of%20emails%20are%20send%20through%20the%20high%20risk%20delivery%20pool%20and%20yes%20this%20pool%20is%20on%20some%20blacklists%2C%20but%20the%20regular%20pool%20is%20not.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20spoke%20to%20a%20MS%20engineer%20yesterday%2C%20the%20see%20the%20last%20days%20more%20of%20this%20issues%20at%20customers%2C%20it%20is%20already%20escaleted%20to%20the%20team%20who%20is%20responsible%20for%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

At 10:20AM 24 Nov AEST I'm seeing reports that Office 365 Exchange Online server mail-me1aus01hn0228.outbound.protection.outlook.com is appearing on different blacklist sources 

http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a104.47.116.228&run=toolpage

 

I've raised a support ticket but thought I'd post in here in case anyone else is impacted.

 

It's preventing one of our clients emailing payslips to staff who have hotmail.com etc addresses or any personal address being protected by blacklist checks.

 

Will update this when Microsoft have resolved.

 

-Sonia

9 Replies

Hi Sonia,

 

Maybe same issue as my customers have: https://techcommunity.microsoft.com/t5/Exchange/Exchange-Online-send-mail-through-high-risk-delivery...

 

I see a lot of emails are send through the high risk delivery pool and yes this pool is on some blacklists, but the regular pool is not.

 

I spoke to a MS engineer yesterday, the see the last days more of this issues at customers, it is already escaleted to the team who is responsible for this.

 

Regards,

 

Peter

This is where being an Exchange admin gets frustrating. On our own servers, we'd investigate, remediate and apply for the listing to be removed. With Exchange Online, Microsoft will do the same  ... eventually. It just takes them longer.

 

On the upside I never need eseutil.

 

So we wait.

 

-Sonia

Microsoft confirmed the issue is resolved.
I don`t see messages send through the high risk delivery pool anymore.

 

Regards,

 

Peter

Mxtoolbox.com is still reporting that Exchange Online server as being blacklisted on 6 different services.

Ok, but the issue was all email send to Hotmail, Gmail etc was send via the High Risk Delivery Pool and that issue was solved. Yes this pool of servers is still on the blacklist, but this is not the server pool which is used to send. Have a look at this article for more information about the server pool:
https://technet.microsoft.com/en-GB/library/jj200746(v=exchg.150).aspx

I see, thanks for the link Peter, that was helpful.

I've been called today to say the Microsoft have fixed our issue which was impacting about 20 customers. I'm just about to retest it.

 

-Sonia

@Peter Klapwijk Are you seeing this again? We had a different client contact us today with a non-suspicious email that had been blocked via the blacklisted high risk server again.

Hi @Sonia Cuff No, none of our customers reported a problem like this since this one was resolved.

OK, thanks. I'll get her to retry in the morning and will log a new call with support if we need to.

 

-Sonia

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Dev channel update to 80.0.355.1 is live
josh_bodner in Discussions on
67 Replies