none
Mail getting abuse report

    Question

  • We currently have a 10 out of 10 score on all mail check platforms but when we send out more than 20 mails from our system we always get 

    This is an email abuse report for an email message received from IP 54.240.7.12 on Fri, 2 Jun 2017 07:41:06 -0700. The message below did not meet the sending domain's authentication policy.

    Can you please help

    Regards

    Andrew

    Saturday, June 3, 2017 7:38 AM

All replies

  • You have asked in the wrong forum. This forum is for questions and discussions about the TechNet Wiki.

    I was going to suggest you ask in a Microsoft Community/Answers forum, but I found the following two threads reporting a similar issue. In both cases, the person was directed to ask in a TechNet forum (although not this one). You might review these threads to see if your issue is similar, involving hotmail addresses (and altered IP address). You might also get clues for things to investigate:

    https://answers.microsoft.com/en-us/outlook_com/forum/oemail-osend/email-to-hotmail-address-generating-spfsoftfail/c5191e7d-6878-4f6a-811a-a676cbf655d8

    https://answers.microsoft.com/en-us/outlook_com/forum/oemail-osend/email-to-hotmail-and-other-ms-domains-rejected-due/34026f1a-9116-44cf-845e-66e5dcbc264e

    I will move this question to the best TechNet forum I can find.


    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Saturday, June 3, 2017 1:27 PM
  • From whom do you get this message?

    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Celebrating 20 years of providing Exchange peer support!

    Saturday, June 3, 2017 4:54 PM
    Moderator
  • Hello Andrew,

    To fix your issue, I want to confirm:
    1. Is it an Exchange environment?
    2. Is it an internal mail or external mail flow?
    3. Does this issue arise when send message to some special account or domain?

    Base on my research, we may get this error if SPF check fails.
    Thus, please check the SPF setting for your mail server firstly.

    Best Regards,

    Allen Wang


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 5, 2017 3:00 PM
    Moderator
  • We currently have a 10 out of 10 score on all mail check platforms but when we send out more than 20 mails from our system we always get 

    This is an email abuse report for an email message received from IP 54.240.7.12 on Fri, 2 Jun 2017 07:41:06 -0700. The message below did not meet the sending domain's authentication policy.

    Can you please help

    Regards

    Andrew

    The IP address this is coming from is an Amazon address (see report below).

    I have encountered this myself and had to email the Amazon abuse administrator to have the issue resolved.

    NetRange 54.240.0.0 - 54.255.255.255
    CIDR 54.240.0.0/12
    NetName AMAZON-2011L
    NetHandle NET-54-240-0-0-1
    Parent NET54 (NET-54-0-0-0-0)
    NetType Direct Allocation
    OriginAS AS16509
    Organization Amazon Technologies Inc. (AT-88-Z)
    RegDate 2011-12-09
    Updated 2012-04-02
    Ref https://whois.arin.net/rest/net/NET-54-240-0-0-1
    OrgName Amazon Technologies Inc.
    OrgId AT-88-Z
    Address 410 Terry Ave N.
    City Seattle
    StateProv WA
    PostalCode 98109
    Country US
    RegDate 2011-12-08
    Updated 2017-01-28
    Ref https://whois.arin.net/rest/org/AT-88-Z
    OrgNOCHandle AANO1-ARIN
    OrgNOCName Amazon AWS Network Operations
    OrgNOCPhone +1-206-266-4064
    OrgNOCEmail amzn-noc-contact@amazon.com
    OrgNOCRef https://whois.arin.net/rest/poc/AANO1-ARIN
    OrgTechHandle ANO24-ARIN
    OrgTechName Amazon EC2 Network Operations
    OrgTechPhone +1-206-266-4064
    OrgTechEmail amzn-noc-contact@amazon.com
    OrgTechRef https://whois.arin.net/rest/poc/ANO24-ARIN
    OrgAbuseHandle AEA8-ARIN
    OrgAbuseName Amazon EC2 Abuse
    OrgAbusePhone +1-206-266-4064
    OrgAbuseEmail abuse@amazonaws.com
    OrgAbuseRef https://whois.arin.net/rest/poc/AEA8-ARIN
    NetRange 54.240.0.0 - 54.240.63.255
    CIDR 54.240.0.0/18
    NetName AWSEMAIL-Z
    NetHandle NET-54-240-0-0-2
    Parent AMAZON-2011L (NET-54-240-0-0-1)
    NetType Reallocated
    OriginAS AS16509
    Organization Amazon Web Services, LLC (AMAZO-22)
    RegDate 2012-01-03
    Updated 2012-01-03
    Ref https://whois.arin.net/rest/net/NET-54-240-0-0-2
    OrgName Amazon Web Services, LLC
    OrgId AMAZO-22
    Address Amazon Web Services
    Address 1200 12th Avenue South
    City Seattle
    StateProv WA
    PostalCode 98144
    Country US
    RegDate 2010-03-08
    Updated 2017-01-28
    Ref https://whois.arin.net/rest/org/AMAZO-22
    OrgAbuseHandle ASA152-ARIN
    OrgAbuseName Amazon SES Abuse
    OrgAbusePhone +1-206-741-3696
    OrgAbuseEmail email-abuse@amazon.com
    OrgAbuseRef https://whois.arin.net/rest/poc/ASA152-ARIN
    OrgNOCHandle AANO1-ARIN
    OrgNOCName Amazon AWS Network Operations
    OrgNOCPhone +1-206-266-4064
    OrgNOCEmail amzn-noc-contact@amazon.com
    OrgNOCRef https://whois.arin.net/rest/poc/AANO1-ARIN
    OrgTechHandle ANO24-ARIN
    OrgTechName Amazon EC2 Network Operations
    OrgTechPhone +1-206-266-4064
    OrgTechEmail amzn-noc-contact@amazon.com
    OrgTechRef https://whois.arin.net/rest/poc/ANO24-ARIN

    • Proposed as answer by GADavies Monday, June 12, 2017 5:15 PM
    Monday, June 12, 2017 5:15 PM
  • Hi Andrew,

    Any update about your issue after correct SPF record?

    If the suggestion is useful, please be free to mark it as answer. Thanks.

    Regards,

    Allen Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, June 21, 2017 3:07 PM
    Moderator