Protection against phishing, malware, and other threats targeting email and collaboration tools in Microsoft 365
The email delivery failure with error 550 5.1.8 Access denied, bad outbound sender AS(42004) indicates that Microsoft's Exchange Online Protection (EOP) has blocked the message because the sending domain or IP address lacks proper authentication records or has a poor sender reputation. To resolve this, verify that your domain's SPF, DKIM, and DMARC records are correctly configured and published in DNS to authorize your sending infrastructure. Additionally, ensure that the sending IP address is not listed on any blocklists and, if using a third-party relay or application, confirm that it is properly authenticated through Exchange Online via a connector or SMTP AUTH. If the issue persists after correcting DNS records, submit a delisting request through the Microsoft Defender portal or contact Microsoft Support to review the sender reputation.