The Abusix noip List (Newly Observed IPs) is an IP-based blocklist or blacklist containing all newly observed IP addresses, which is helpful for scoring and meta-rules when combined with other data rather than being a definitive judgment on the IP's reputation.
The Abusix noip List (Newly Observed IPs) is a real-time blacklist that contains IP addresses that have been recently observed sending SMTP traffic. The purpose of this blocklist is not to explicitly identify 'bad' IPs but to flag them as new and unestablished. According to Abusix, being listed is not a definitive sign of malicious activity. Instead, the data is intended for use in email scoring systems and meta-rules, where it can be combined with other signals to make a more accurate assessment of an email's legitimacy.
The policy is straightforward: any IP address that sends SMTP traffic to Abusix's spam traps or partner networks for the first time is added to this list. The IP address must not have been seen within the previous 30 days. Once listed on this blacklist (or blocklist), the IP address remains for 25 hours before automatically expiring. This short duration reflects the list's purpose, which is to monitor new traffic sources rather than penalize them long-term.
Technical information
Abusix, the organization behind the noip List, is a specialist in network abuse management, email security, and threat intelligence. It provides comprehensive solutions aimed at securing networks and the broader internet. Their vision focuses on stopping cyber threats before they reach end-users, targeting primary vectors like email and network traffic.
The company positions itself as more than just a traditional blocklist operator. Abusix offers a suite of services designed to help ISPs, hosting providers, and other organizations manage network abuse, eliminate spam, and improve the exchange of cyber threat information. They emphasize proactive defense, aiming to block emerging email-borne threats in near real-time and help clients identify security risks earlier.
Since listings on the Abusix noip List (Newly Observed IPs) automatically expire after 25 hours, the simplest way to be removed is to wait. However, if the listing is causing immediate delivery issues, you can request a manual delisting. Delisting is free but requires creating an account to prevent abuse of the system.
Before you request removal, it is wise to investigate why you might be sending from a new or previously unused IP address. Common causes for being listed, especially on their other policy or spam-based blocklists, include:
To request removal, follow these steps:
Delisting requests are processed immediately. While DNS queries reflect the change right away, it can take up to five minutes for the change to propagate to customers who use RSYNC to sync the zone files.
The impact of being on the Abusix noip List (Newly Observed IPs) is generally medium. Since the list's purpose is to flag new IPs rather than outright malicious ones, a listing here will not typically cause widespread, outright blocking of your emails. Mailbox providers and filtering systems that use this specific blocklist (blacklist) are more likely to apply increased scrutiny to your messages.
A listing could contribute to a higher spam score, potentially causing emails to be delivered to the spam folder instead of the inbox. The impact is greater when combined with other negative signals, such as a lack of proper email authentication (SPF, DKIM, DMARC) or a poor sending reputation. For senders warming up new IP addresses, this listing is an expected part of the process and should resolve as the IP establishes a positive sending history.
Organization
Zone
Type
Impact
Delisting
Organization
Zone
Type
Impact
Delisting
Organization
Zone
Type
Impact
Delisting
Organization
Zone
Type
Impact
Delisting
Organization
Zone
Type
Impact
Delisting
Organization
Zone
Type
Impact
Delisting
19 resources
Do blacklists exist for newly registered domain names?
How impactful are Abusix blacklisted IPs from a shared IP pool?
How to handle a domain listed on Abusix or request delisting?
What are Abusix's services for email deliverability and how do they compare to Spamhaus?
What is the distinction between Abusix 'black' and 'black_css' abuse lists?
Why is my AWS hostname blacklisted in Abusix and how do I resolve it?