Microsoft 365 5.7.705 / 5.7.708
5.7.705 Access denied, tenant has exceeded threshold, 5.7.708 Access denied, traffic not accepted from this IP
Microsoft 365 5.7.705 / 5.7.708 means: 5.7.705 Access denied, tenant has exceeded threshold, 5.7.708 Access denied, traffic not accepted from this IP. It is a permanent failure, so do not retry it unchanged. Stop sending from the affected account or IP until the cause is fixed. Check for a compromised account, and remove unverified and unengaged addresses before you resume.
Microsoft 365’s exact wording
Quoted from Microsoft Learn: Email non-delivery reports and SMTP errors in Exchange Online, checked 2026-11-05. Placeholders are Microsoft 365’s own.
Provider's description
5.7.705 Access denied, tenant has exceeded threshold, 5.7.708 Access denied, traffic not accepted from this IP
Possible cause
Most of the traffic from this tenant is detected as suspicious. Therefore, a ban is put on the sending ability of the tenant.
Provider's advice
Make sure that any compromises or open relays were resolved, and then contact support through your regular channel.
| Who sends it | Microsoft 365, Exchange Online and Outlook.com |
|---|---|
| Basic code | Microsoft 365 lists the enhanced code only |
| Enhanced code | 5.7.705: Microsoft 365-specific, not in the IANA registry. Its subject digit puts it under 5.7.0 other or undefined security status. |
| Permanent or temporary | Permanent (5xx) |
| Verifying the list prevents it | Partly |
In practice
5.7.705 means the whole Microsoft 365 tenant has been blocked from sending because most of its traffic looked suspicious, usually after an account was compromised and used for spam. 5.7.708 means traffic from the IP is not accepted, for the same reason. Both need a support request to Microsoft once the cause is fixed. A tenant that was recently created or recently compromised is most likely to see these codes, so secure all accounts before asking support to lift the block. Messages already rejected are not retried and need to be resent once the block is lifted.
What the sender should do
Stop sending from the affected account or IP until the cause is fixed. Check for a compromised account, and remove unverified and unengaged addresses before you resume.
Would verifying the list have prevented Microsoft 365 5.7.705 / 5.7.708?
Partly
The reply is not only about one address, but providers weigh how often a sender hits addresses that do not exist. Removing bad addresses before sending lowers that signal.
Common questions
- What does Microsoft 365 5.7.705 / 5.7.708 mean?
- Microsoft 365 5.7.705 / 5.7.708 means: 5.7.705 Access denied, tenant has exceeded threshold, 5.7.708 Access denied, traffic not accepted from this IP. It is a permanent failure, so do not retry it unchanged. Stop sending from the affected account or IP until the cause is fixed. Check for a compromised account, and remove unverified and unengaged addresses before you resume.
- Should I retry after Microsoft 365 5.7.705 / 5.7.708?
- No. It is a permanent (5xx) failure, so the same message to the same address will fail again. Fix the cause first. Stop sending from the affected account or IP until the cause is fixed. Check for a compromised account, and remove unverified and unengaged addresses before you resume.
- Would verifying my list have prevented Microsoft 365 5.7.705 / 5.7.708?
- Partly. The reply is not only about one address, but providers weigh how often a sender hits addresses that do not exist. Removing bad addresses before sending lowers that signal.
Sources
- Microsoft Learn: Email non-delivery reports and SMTP errors in Exchange Online (checked 2026-11-05)
Registry and provider wording is quoted exactly; guidance is written by the SimpleVerifier Team.
SimpleVerifier Team · Last checked against the sources 2026-11-05