Overview
For our application, we use SendGrid to send emails to many of our users. Recently over the past few weeks, our SendGrid IP addresses have been added to the RATS-Spam
blacklist multiple times. In our SendGrid profile, we can find the following logs in the Blocks
section suggesting that our IP address is in the list (I hid our IP address)
550 RBL-{IP Address}: RBL: spam.spamrats.com SPAMRATS IP Addresses See: http://www.spamrats.com/bl?{IP Address}
While it is quite easy to remove our IP addresses from the list, the impact is still visible as many users will not receive their emails.
Background
We looked into the number of spam reports when our IP address was blacklisted. Though the number of spam reports is indeed higher at these times, the number is not significant enough to suggest that these were the issues.
We also have a basic and overly prohibitive mechanism to detect emails to spam traps. Our IP addresses were blacklisted despite enabling this mechanism.
Online Resources
I already searched into other resources online, but they do not help us determine the root cause behind the blacklisting.
This whitepaper provides several reasons as to why the IP address would be banned. However, it is vague in their descriptions. For example, how is "unwanted email" determined in the statement below?
The IP attempted to deliver high volumes of unwanted email or non-existent email accounts across multiple unique ISPs (Internet Service Providers) within a short period of time
Most of the solutions here suggest that we do not use SpamRats. Unfortunately, we have many users that are using multiple unique domains all using SpamRats. It is not feasible at our current scale to tell our users not to use SpamRats.
We also already use MX Toolbox.
Question
- Did anyone else encounter this issue before? If so, how did you find the root cause and what was it?
- What are some methods that we can implement on our servers or SendGrid account that could prevent the issue? We cannot tell our users not to use SpamRats.
- How is
unwanted email
qualified andhigh volumes
/multiple unique
/short period
quantified? Are theseunwanted email
s from spam traps or spam reports or something else?