Critical ErrorSMTP Error · Permanent (5.x.x)
550 5.7.511

Access denied, banned sender IP (Microsoft)

A 550 5.7.511 from Microsoft says "Access denied, banned sender". The IP address you send from was banned by Microsoft.

Updated June 13, 2026

SMTP Exchange / Mail Log
> MAIL FROM:<you@yourdomain.com>> RCPT TO:<recipient@example.com>✕ 550 5.7.511 Access denied, banned sender IP (Microsoft)
All guides

Is your domain affected?

Run a free check — we'll show you exactly what's misconfigured.

550 5.7.511 is a permanent SMTP reply meaning access denied, banned sender ip (microsoft). This is a block on the sending IP, not on one message. Microsoft's reference says to email delist@microsoft.com with the full bounce code and the IP address to ask for removal.

What 550 5.7.511 means

This is a block on the sending IP, not on one message. Microsoft's reference says to email delist@microsoft.com with the full bounce code and the IP address to ask for removal.

⚠️
This is a 5.x.x permanent failure — the message will keep bouncing until you fix the cause. Retrying the same message unchanged won't help.

Common causes

📨
#1

The IP sent spam or hit spam traps

Most common

High complaint rates or mail to trap addresses from that IP.

🔁
#2

A compromised account or server used the IP

Common

Spam from a hacked mailbox or an open relay on your network.

⚙️
#3

You share the IP with a bad sender

Less common

On shared IPs, another customer's mail can get the IP banned.

How to fix 550 5.7.511

  1. 1

    Fix the cause before asking

    Stop the spam source, secure accounts, and close any open relay.

  2. 2

    Ask Microsoft to delist the IP

    Email delist@microsoft.com with the full NDR code and the IP address, as Microsoft's reference says.

  3. 3

    Check other lists too

    Run a free blocklist check, because the same problem often lists the IP elsewhere.

Confirm your domain is set up correctly

Most delivery failures — permanent or temporary — trace back to authentication or reputation. Run a free EmailHealth check to confirm SPF, DKIM, DMARC, blacklist status, and TLS are all healthy for your sending domain. If you send in volume, free daily monitoring will alert you before a small issue becomes a flood of bounces.

Stop this error from coming back

Most delivery problems start when a DNS record changes, a key is removed or a domain lands on a blocklist. EmailHealth checks your sending domains every day and sends one alert, by email, Slack or webhook, with the exact fix.

1 domain free. Sending from many domains (cold email, agencies, MSPs)? Early access covers 10.

Frequently asked questions

Check your domain for free

SPF, DKIM, DMARC, MX, blocklists and TLS in about 2 seconds. No account needed.

Run the check