Abusix noip List (Newly Observed IPs)
The Abusix noip list is a blocklist or blacklist of new IPs. It aids scoring and meta-rules but does not define an IP reputation on its own.
Updated on 17 Jun 2026: We updated this guide with Abusix's 60-day observation window, clearer noip scoring guidance, and practical checks for new sending IPs.
Summarize with
Check if you are listed on Abusix noip List (Newly Observed IPs)
And 143 other blocklists.
Spamhaus
0Spam
Cisco
NoSolicitado
URIBL
abuse.ro
ALPHANET
Anonmails
Ascams
BLOCKEDSERVERS
Calivent Networks
EFnet
JustSpam
Kempt.net
NordSpam
RV-SOFT Technology
Scientific Spam
Spamikaze
SpamRATS
SPFBL
Suomispam
System 5 Hosting
Team Cymru
Validity
www.blocklist.de Fail2Ban-Reporting Service
ZapBL
2stepback.dk
Fayntic Services
ORB UK
technoirc.org
TechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftWhat is the Abusix noip List (Newly Observed IPs)?
The Abusix noip List (Newly Observed IPs) is a real-time blocklist or blacklist of IP addresses that have been newly observed sending SMTP traffic. A more precise way to read it is Newly Observed SMTP IPs. The list does not prove that an IP address is sending spam, but it does flag the IP as new and unestablished. Abusix intends this data for email scoring systems and meta-rules, where it can be combined with other signals to assess whether a message should be accepted, filtered, or rejected.
Abusix tracks SMTP-sending IPs for 60 days. When it sees an IP address that is not already in that observation window, the IP is added to the noip blacklist for 25 hours from first observation. New IPs that hit Abusix spam traps are automatically listed in the main IP blocklist, so noip should be treated as a newly seen SMTP source rather than a full reputation verdict.
Technical details
- Blocklist zone: noip.mail.abusix.zone
- Listing type: IP-based, covering IPv4 and IPv6
- Return code: listed IPs return 127.0.0.100. Test points include 127.0.0.2 and 127.0.0.100.
- Listing duration: 25 hours from first observation
Who runs the Abusix noip List (Newly Observed IPs)?
Abusix runs the noip List as part of its Guardian Mail data. Abusix works on network abuse management, email security, and threat intelligence for mailbox providers, hosting providers, ISPs, and security teams.
Abusix maintains multiple email and network abuse datasets. The noip list identifies newly seen SMTP senders, while the main IP blocklist handles IPs seen in spam-trap traffic and other abusive signals. That distinction matters when deciding whether a noip listing should add score, add metadata, or trigger rejection.
How do I get removed and delisted from the Abusix noip List (Newly Observed IPs)?
Since listings on the Abusix noip List (Newly Observed IPs) automatically expire after 25 hours, the simplest way to be removed is to wait. If the listing is causing immediate delivery issues, you can request manual delisting. Delisting is free but requires an account to prevent abuse of the removal process.
Before you request removal, check why the IP address started sending SMTP traffic after being unseen by Abusix. Common causes include:
- A newly configured mail server, NAT gateway, or outbound relay started sending SMTP.
- A sending provider, hosting provider, or cloud platform moved traffic to a fresh IP pool.
- A failover path or backup mail route started sending production traffic.
- A compromised account, application, or device started sending outbound mail.
- A mailing program sent traffic without confirmed opt-in, clean bounce handling, or suppression controls.
To request removal, follow these steps:
- Go to the Abusix lookup and delisting page.
- Enter the IP address that is listed on the blocklist.
- If the IP is listed, review the listing details and sign up or log in to the user portal.
- Follow the on-screen instructions to request removal from the blacklist or blocklist.
Delisting requests are processed immediately. DNS queries reflect the change right away, but it can take up to five minutes for the change to reach customers who use RSYNC to sync the zone files.
What's the impact of being listed on the Abusix noip List (Newly Observed IPs)?
The impact of being on the Abusix noip List (Newly Observed IPs) is usually medium, but it depends on how the receiving system uses the data. Some strict filters reject noip-listed SMTP sources outright. Others use the listing as metadata or add weight in a scoring policy.
A listing can contribute to a higher spam score and push messages toward the spam folder instead of the inbox. The impact increases when the noip signal appears with other negative signals, such as failed SPF, DKIM, or DMARC checks, weak reverse DNS, unusual volume, or poor sending reputation. Suped's DMARC reporting and email authentication workflows can help teams confirm that SPF, DKIM, and DMARC pass before a new IP rollout or warmup.
How should receivers use this list?
Use the Abusix noip List as a freshness signal. It is strongest when it appears with weak authentication, poor reverse DNS, mismatched HELO or EHLO identity, sudden volume changes, or other abuse signals. Treating it exactly like the main IP blacklist can be too strict for legitimate IP warmups, migrations, and failover routes.
- For inbound filtering, add score or metadata when the IP is newly observed instead of treating the noip result like a spam-based blocklist by default.
- For outbound operations, warm up new IP addresses gradually and make sure SPF, DKIM, and DMARC pass before volume increases.
- For incident response, compare noip hits with SMTP logs to identify unexpected relays, failover paths, compromised devices, and unauthorized applications.
- For monitoring, record when the IP was first seen so the 25-hour expiry is not mistaken for a manual delisting.
Other Abusix blocklists
Abusix Authbl Blocklist
Organization
Abusix
Zone
authbl.mail.abusix.zone
Type
IP
Impact
Medium
Delisting
Manual
Abusix Combined Blocklist
Organization
Abusix
Zone
combined.mail.abusix.zone
Type
IP
Impact
Medium
Delisting
Manual
Abusix Domain Blocklist
Organization
Abusix
Zone
dblack.mail.abusix.zone
Type
Domain or IP
Impact
Medium
Delisting
Manual
Abusix Exploit Blocklist
Organization
Abusix
Zone
exploit.mail.abusix.zone
Type
IP
Impact
Medium
Delisting
Manual
Abusix nod List (Newly Observed Domains)
Organization
Abusix
Zone
nod.mail.abusix.zone
Type
Domain
Impact
Medium
Delisting
Automatic
Abusix Policy Blocklist
Organization
Abusix
Zone
dynamic.mail.abusix.zone
Type
IP
Impact
Medium
Delisting
Manual
Abusix Spam Blocklist
Organization
Abusix
Zone
black.mail.abusix.zone
Type
IP
Impact
Medium
Delisting
Manual
