Why are Microsoft IPs blocking AWS SMTP servers?

Summary

Microsoft blocks AWS SMTP servers due to a confluence of factors, primarily revolving around poor IP reputation and the ease with which spammers can exploit AWS infrastructure. The AWS signup process makes it simple for malicious actors to quickly establish accounts and initiate spam campaigns. This high volume of spam originating from AWS IP ranges results in aggressive filtering and blocking by Microsoft to protect its users from unwanted email. The shared IP infrastructure of AWS SES exacerbates this issue, as the actions of one sender can negatively affect the reputation of others on the same IP. The result is that even legitimate senders on AWS may be inadvertently caught in these blocks. Best practice, as suggested by multiple sources, is to either avoid sending directly from AWS altogether, switch to a dedicated IP, ensure a proper warm-up process, authenticate email, and/or use a reputable Email Service Provider (ESP) to mitigate these deliverability challenges.

Key findings

  • Poor IP Reputation: AWS IP ranges are known for a high volume of spam and malicious activities, resulting in poor IP reputation.
  • Easy Exploitation: AWS's straightforward signup process enables spammers to quickly create accounts and send unwanted email.
  • Shared IP Risks: The shared IP infrastructure of AWS SES means the actions of one sender impact the deliverability of others on the same IP.
  • Aggressive Filtering: Microsoft employs aggressive filters against AWS IP space to protect its users from spam.

Key considerations

  • Avoid Direct AWS Sending: Consider avoiding sending directly from AWS if deliverability is critical.
  • Dedicated IPs: If using AWS, switch to a dedicated IP to manage your reputation.
  • IP Warm-up: Implement a gradual IP warm-up process to establish a positive sending history.
  • Email Authentication: Implement SPF, DKIM, and DMARC email authentication protocols to improve deliverability.
  • Use an ESP: Consider utilizing a reputable Email Service Provider (ESP) for enhanced deliverability.
  • rDNS Configuration: Update the rDNS record on your AWS host to reflect your brand/domain.
  • Monitor Reputation: Continuously monitor your IP and domain reputation to identify and address issues promptly.

What email marketers say
10Marketer opinions

Microsoft blocks AWS SMTP servers primarily due to the prevalence of spam and malicious activities originating from AWS IP ranges, leading to poor IP reputation. This is often exacerbated by the ease with which spammers can create accounts and send large volumes of emails, especially from shared IPs. As a result, Microsoft proactively blocks these IP ranges to protect its users.

Key opinions

  • IP Reputation: Poor IP reputation due to spam originating from AWS is the main reason for blocking.
  • Shared IPs: Shared IPs on AWS are often used by spammers, impacting the reputation of all users sharing the IP.
  • Ease of Abuse: The ease of creating AWS accounts facilitates spamming, leading to blocks by Microsoft.

Key considerations

  • Dedicated IPs: Use dedicated IPs instead of shared IPs to control your sending reputation.
  • Warming Up: Properly warm up your IP address to establish a good sending reputation.
  • rDNS: Update the rDNS on your AWS host to use your brand/domain.
  • Best Practices: Follow email sending best practices to avoid being flagged as spam.
  • ESPs: Consider using a reputable Email Service Provider (ESP) to handle email sending.
  • Authentication: Authenticate your email (SPF, DKIM, DMARC) to improve deliverability.
Marketer view

Email marketer from SocketLabs explains that problems arise from using shared IPs as your IP reputation can be affected by the activities of other users sending from the same IPs. If those activities are associated with spam or other negative behaviors, all users sharing that IP can be impacted. SocketLabs recommends using a dedicated IP address or a reputable sending platform.

September 2024 - SocketLabs
Marketer view

Email marketer from Email on Acid explains that deliverability issues stem from poor IP reputation. Because AWS is a service widely used by spammers, and it is simple to create new accounts for malicious use, Microsoft may block AWS IPs to protect users.

August 2024 - Email on Acid
Marketer view

Email marketer from SendGrid answers that Shared IPs are the quickest and easiest way to begin sending emails. However, because your sending reputation is shared with other senders, you risk your deliverability being impacted by another sender’s poor sending behavior. Consider switching to a dedicated IP address for greater control.

September 2021 - SendGrid
Marketer view

Marketer from Email Geeks says to never send from AWS directly, and if you send via some other platform please please update the rDNS on your AWS host to use your brand/domain.

January 2023 - Email Geeks
Marketer view

Email marketer from Stack Overflow shares that AWS IP ranges are known for being used for spam and other malicious activities, leading to poor reputation and blocking by services like Microsoft. They suggest using a dedicated IP address, warming it up properly, and following best practices for email sending.

June 2024 - Stack Overflow
Marketer view

Email marketer from SparkPost shares that negative IP reputation, especially on shared IPs, can lead to poor email deliverability. This happens when a sender engages in sending practices that are regarded as questionable, untrustworthy or unwanted. Microsoft may proactively block AWS IPs if they have negative reputations.

August 2024 - SparkPost
Marketer view

Email marketer from MXToolbox explains that IP reputation is crucial for email deliverability. If AWS IPs are frequently used by spammers, Microsoft is likely to block the entire range to protect its users. Monitoring IP reputation and addressing any issues promptly is essential.

March 2023 - MXToolbox
Marketer view

Email marketer from Mailjet shares that IP reputation is one of the most important factors for email deliverability. Mailjet recommends avoiding shared IPs and warming up dedicated IPs.

January 2022 - Mailjet
Marketer view

Email marketer from Litmus answers that maintaining a good sending reputation involves sending mail that people want, authenticating email and avoiding spam traps. Poor practices can impact IP reputation, leading Microsoft to block AWS IPs.

February 2022 - Litmus
Marketer view

Email marketer from Reddit responds that Microsoft likely blocks AWS IPs due to the high volume of spam originating from AWS. They recommend using a dedicated IP with a good reputation or using a reputable email service provider (ESP) instead of directly sending from AWS.

June 2022 - Reddit

What the experts say
7Expert opinions

Microsoft blocks AWS SMTP servers due to the platform's reputation for hosting spammers. The ease of signup and deployment allows malicious actors to quickly send spam, resulting in aggressive filtering and blocks of entire AWS IP ranges by Microsoft. This 'bad neighborhood' effect means legitimate senders on AWS can be penalized for the actions of others.

Key opinions

  • Reputation: AWS has a poor reputation due to spammers exploiting its infrastructure.
  • Ease of Abuse: The easy sign-up process makes AWS attractive to spammers.
  • Aggressive Filtering: Microsoft employs aggressive filters against AWS IP space.
  • Bad Neighborhood: Legitimate senders on AWS suffer from the actions of nearby spammers.

Key considerations

  • Avoid AWS: Consider avoiding sending directly from AWS infrastructure due to deliverability issues.
  • Alternative Platforms: Explore alternative sending platforms with better deliverability reputations.
  • Mitigation is Key: Understand that Microsoft is primarily mitigating the effects of spam and not necessarily targeting AWS.
Expert view

Expert from Email Geeks says you’re in a bad neighborhood and there’s not much you can do about that other than move.

March 2024 - Email Geeks
Expert view

Expert from Email Geeks explains that Microsoft pretty much hates AWS and a lot of folks go through this, and that the full IP space has a bad reputation. If someone nearby on your /24 (or sometimes larger range) sends spam, you’re going to get tarred with that brush.

March 2024 - Email Geeks
Expert view

Expert from Spam Resource responds that Microsoft may block AWS IPs because AWS provides infrastructure easily abused by spammers. Microsoft is not necessarily targetting AWS, just mitigating the impact of spam originating from their services.

March 2022 - Spam Resource
Expert view

Expert from Word to the Wise, Laura Atkins, responds that AWS has reputation problems stemming from its sign-up process, which makes it easy for spammers to get started sending. This results in large blocks, and a poor reputation.

November 2024 - Word to the Wise
Expert view

Expert from Email Geeks says you should never, ever send mail from AWS. Ever.

September 2021 - Email Geeks
Expert view

Expert from Email Geeks explains that Microsoft has a very aggressive filter against all of AWS space

May 2024 - Email Geeks
Expert view

Expert from Word to the Wise, Laura Atkins, shares that cloud infrastructure platforms like AWS suffer deliverability issues due to spammers abusing the ability to set up and send bulk emails easily, affecting IP reputation and causing blocks.

June 2024 - Word to the Wise

What the documentation says
4Technical articles

Microsoft blocks AWS SMTP servers primarily because of poor IP reputation stemming from spam and unwanted email originating from AWS. AWS's shared IP infrastructure means that the actions of one sender can negatively impact the deliverability of others, leading Microsoft to block entire ranges to protect its users. New AWS accounts also have sending limits and limited IP reputation, making them susceptible to blocking if not properly managed.

Key findings

  • Shared IP Impact: Shared IPs on AWS SES are vulnerable to the sending behavior of other users.
  • IP Reputation is Key: A good IP reputation is crucial for email deliverability.
  • Microsoft's Blocking Criteria: Microsoft blocks based on IP reputation, spam complaints, and sending volume.
  • New Account Limits: New AWS SES accounts have sending limits and limited IP reputation.

Key considerations

  • Dedicated IPs: Use dedicated IPs for greater control over your IP reputation.
  • Manage Sending Limits: Properly manage sending limits and gradually increase sending volume.
  • Monitor Reputation: Continuously monitor your IP reputation and address any issues promptly.
  • Avoid Spam: Adhere to email sending best practices to avoid being flagged as spam.
Technical article

Documentation from Microsoft explains that they block senders based on various factors, including IP reputation, spam complaints, and sending volume. If an AWS IP range is consistently sending unwanted email, Microsoft may block the entire range to protect its users from spam and phishing attempts.

September 2024 - Microsoft Outlook Postmaster
Technical article

Documentation from AWS notes that new AWS SES accounts have default sending limits and a limited IP reputation. Microsoft may automatically block emails from AWS if these factors are not properly managed, or are perceived as spam-like activity.

September 2021 - AWS SES Developer Guide
Technical article

Documentation from AWS explains that shared IP addresses on AWS SES can be affected by the sending behavior of other users. If other users send spam, it can negatively impact the reputation of the shared IP, leading to blocking by email providers like Microsoft. Using dedicated IPs is recommended for greater control over reputation.

July 2021 - AWS Documentation
Technical article

Documentation from Digital Ocean explains that Maintaining a good IP reputation is crucial for ensuring that your emails reach your intended recipients' inboxes. A poor IP reputation can lead to email blocking or filtering by email providers like Gmail, Yahoo, and Microsoft.

November 2024 - Digital Ocean