We help IT Professionals succeed at work.

IP address is blacklisted

GEMCC asked

According to MXToolbox, my IP address is blacklisted by JUNKMAILFILTER.  When I go to their site per MXToolbox http://ipadmin.junkemailfilter.com/remove.php, I check to see if the address is blacklisted and it says it is not.  My Exchange server SMTPSend log states:

"554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means."

Also, I suspect there is one account that is sending out spam.  Any suggestions on what to use to find out?

There are a few messages stuck in the queue.

Please advise.

Have a great day,

Watch Question

Most Valuable Expert 2014

If you had a compromised account, you wouldn't have a few messages in the queues, you would have 1000s. A few in the queues is to be expected, most sites will have those, NDRs or OOTO from the spam that has got through.

Have you checked any of the major reputation sites? The one you have flagged isn't a major player (first I have heard of it and I have been working with email systems for over 10 years).

If you have a machine sending out spam, which is more likely, then blocking port 25 outbound for everything but your Exchange server will soon find them. The machine will fill up the logs very quickly.

You might also be in a block of blacklisted addresses. Sometimes a whole block will be blacklisted even if only one ip address is responsible. You can get more information by contacting the organization that is blacklisting you.

I disabled the suspicious account and then a few hours later the "stuck" messages were sent.

Have a great day,



Appears to have resolved the problem.