# US 10,454,866 B2 · Outbound IP address reputation control and repair

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,454,866 B2
- Document ID: US10454866B2
- Status: Granted
- Kind: B2
- Application number: 14/733,732
- Filed: 2015-06-08
- Published: 2015-12-31
- Granted: 2019-10-22
- Earliest claimed: 2013-07-10
- Assignees: Microsoft Technology Licensing, LLC
- Applicants: Microsoft Technology Licensing, LLC
- Inventors: David Nicholas Yost; Alexander Nikolayev
- Web page: https://patentgrep.com/patent/US10454866B2

## CPC

- H04L 51/212: using filtering or selective blocking
- H04L 51/48: Message addressing, e.g. address format or anonymous messages, aliases
- H04L 61/5007: Internet protocol [IP] addresses
- H04L 63/101: {Access control lists [ACL]}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Embodiments provide IP address partitioning features that can be used to source outbound email communications, but the embodiments are not so limited. In an embodiment, a computer-based method operates to remove blocked or potentially misused IP addresses from a partition and/or move good or reputable IP addresses from other partitions to account for volumetric shortfalls. A method of one embodiment operates to repair removed IP address reputations as part of recycling and reusing IP addresses. A system of an embodiment is configured in part to remove misused IP addresses from one or more partitions, source reputable IP addresses from other partitions, and/or repair and reuse IP addresses as needed. Other embodiments are included.

## Claims

### Claim 1

A system comprising a processor operatively coupled to a device, the device storing instructions that when executed, perform a method, the method comprising:
identifying a misused IP address in a first partition that includes a first plurality of IP addresses;
removing the misused IP address from the first partition;
determining an increase in volume absorbed by remaining IP addresses in the first partition in response to a volumetric shortfall of reputable IP addresses in the first partition based on the removal of the misused IP address from the first partition;
when the increase in volume is greater than a threshold:
identifying at least a second partition that includes a second plurality of IP addresses;
identifying one or more additional IP addresses in the second plurality of IP addresses to compensate for the volumetric shortfall; and
moving the one or more additional IP addresses to the first partition; and
when the increase in volume is not great than the threshold, using the first plurality of IP addresses in the first partition to source outbound email communications.

### Claim 2 (depends on 1)

The system of claim 1, the method further comprising:
reusing the misused IP address by including the misused IP address in a different partition and increasing a volume of outbound email communications over time using the misused IP address.

### Claim 3 (depends on 2)

The system of claim 2, the method further comprising:
increasing the volume of outbound email communications using the misused IP address until the volume of outbound email communications is equal or substantially equal to a volume of outbound email communications sourced by the different IP addresses.

### Claim 4 (depends on 3)

The system of claim 3, the method further comprising:
sourcing the different IP addresses from the partition based on a volume of outbound email communications sent by the different IP address over a defined amount of time.

### Claim 5 (depends on 1)

The system of claim 1, the method further comprising:
taking a corrective action after a number of IP addresses have been removed from the partition.

### Claim 6 (depends on 1)

The system of claim 1, wherein the misused IP address is one that has been blocked or blacklisted.

### Claim 7 (depends on 1)

The system of claim 1, wherein the misused IP address has been blocked based on a reputation of the misused IP address.

### Claim 8

A computer implemented method, performed by at least one processor, comprising:
identifying a misused IP address in a first partition that includes a first plurality of IP addresses;
removing the misused IP address from the first partition;
determining an increase in volume absorbed by remaining IP addresses in the first partition in response to a volumetric shortfall of reputable IP addresses in the first partition based on the removal of the misused IP address from the first partition;
when the increase in volume is greater than a threshold:
identifying at least a second partition that includes a second plurality of IP addresses;
identifying one or more additional IP addresses in the second plurality of IP addresses to compensate for the volumetric shortfall; and
moving the one or more additional IP addresses to the first partition;
when the increase in volume is not great than the threshold, using the first plurality of IP addresses in the first partition to source outbound email communications.

### Claim 9 (depends on 8)

The method of claim 8, the method further comprising:
reusing the misused IP address by including the misused IP address in a different partition and increasing a volume of outbound email communications over time using the misused IP address.

### Claim 10 (depends on 9)

The method of claim 9, the method further comprising:
increasing the volume of outbound email communications using the misused IP address until the volume of outbound email communications is equal or substantially equal to a volume of outbound email communications sourced by the different IP addresses.

### Claim 11 (depends on 10)

The method of claim 10, the method further comprising:
sourcing the different IP addresses from the partition based on a volume of outbound email communications sent by the different IP address over a defined amount of time.

### Claim 12 (depends on 8)

The method of claim 8, the method further comprising:
taking a corrective action after a number of IP addresses have been removed from the partition.

### Claim 13 (depends on 12)

The method of claim 12, wherein the misused IP address is one that has been blocked or blacklisted.

### Claim 14 (depends on 13)

The method of claim 13, wherein the misused IP address has been blocked based on a reputation of the misused IP address.

### Claim 15

A device storing instructions that when executed are capable of performing a method, the method comprising:
identifying a misused IP address in a first partition that includes a first plurality of IP addresses;
removing the misused IP address from the first partition;
determining an increase in volume absorbed by remaining IP addresses in the first partition in response to a volumetric shortfall of reputable IP addresses in the first partition based on the removal of the misused IP address from the first partition;
when the increase in volume is greater than a threshold:
identifying at least a second partition that includes a second plurality of IP addresses;
identifying one or more additional IP addresses in the second plurality of IP addresses to compensate for the volumetric shortfall; and
moving the one or more additional IP addresses to the first partition;
when the increase in volume is not great than the threshold, using the first plurality of IP addresses in the first partition to source outbound email communications; and
moving the misused IP address to the first partition after a predetermined time, wherein the misused IP address is a non-misused IP address after the predetermined time.

### Claim 16 (depends on 15)

The device of claim 15, the method further comprising:
reusing the misused IP address by including the misused IP address in a different partition and increasing a volume of outbound email communications over time using the misused IP address.

### Claim 17 (depends on 16)

The device of claim 16, the method further comprising:
increasing the volume of outbound email communications using the misused IP address until the volume of outbound email communications is equal or substantially equal to a volume of outbound email communications sourced by the different IP addresses.

### Claim 18 (depends on 17)

The device of claim 17, the method further comprising:
sourcing the different IP addresses from the partition based on a volume of outbound email communications sent by the different IP address over a defined amount of time.

### Claim 19 (depends on 15)

The device of claim 15, further comprising:
taking a corrective action after a number of IP addresses have been removed from the partition.

### Claim 20 (depends on 15)

The device of claim 15, wherein the misused IP address is one that has been blocked or blacklisted.