IP address in AzureWeb App custom domain high risk, blacklisted by SURBL - please help

Adam Westwood 0 Reputation points
2025-03-04T00:27:45.0633333+00:00

Hi,

I've been running a web app in Europe for the last 6 years with no issues.

We have an IP address provided by Azure hosting our site, locked down to username and password.

Our emails were recently blacklisted from sending, and we are working through the process to unblock these with SURBL.

However, they came back with the following comment on our shared IP address, see email below.

There is loads of phishing sites on your IP. Can you please explain what this MS IP is used for?And if you dont know please figure this out with Microsoft.Examples are:it-heipdesk[.]com l-clouds[.]com rricrosoft-offices[.]com

Checking an external IP address, is identified as high risk.

How do I update my IP to get off this list?

Azure Static Web Apps
Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
1,094 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Shree Hima Bindu Maganti 3,520 Reputation points Microsoft External Staff
    2025-03-05T12:10:38.0166667+00:00

    Hi @Adam Westwood ,
    Thanks for reaching out to Microsoft Q&A.
    If your Azure Web App's IP got blacklisted by SURBL because of shared IP usage with sketchy tenants, don't worry, you can fix it. First, try getting a dedicated outbound IP by hooking up your App Service with a Virtual Network (VNet) and setting up a NAT Gateway. This way, all outbound traffic goes through a static public IP, cutting down the risk of blacklisting due to other tenants. Check out Microsoft's guide on setting up a static outbound IP here: Azure App Service - Inbound and Outbound IPs. Also, locking down your app with IP access restrictions helps keep unauthorized access at bay. More info on that here: Azure App Service - IP Restrictions.

    Once you have a dedicated IP, ask SURBL to remove your new IP from their blacklist. Just provide the necessary details, like your dedicated IP and proof that your app isn't doing anything shady. Make sure all your security measures are solid to avoid future issues. You can also check this guide for how a domain was successfully removed from the SURBL blacklist.

    These steps will help keep your app safe and ensure your emails get through.
    If the answer is helpful, please click Accept Answer and kindly upvote it so that other people who faces similar issue may get benefitted from it.
    Let me know if you need more help.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.