Microsoft does not publish a queryable blocklist for Outlook.com, Hotmail, Live or Microsoft 365. What it has is internal reputation data, a set of rejection codes that tell you roughly which system objected, and — for IP-level blocks against Microsoft 365 — a self-service delist portal. Knowing which of those applies to your rejection decides whether there is a form to fill in at all.
Decode the rejection
| Rejection | What it means | Your route |
|---|---|---|
550 5.7.1 ... blocked ... (S3140) / (S3150) | The sending IP is on Microsoft's internal block list | Delist portal, after fixing the cause |
550 5.7.1 Unfortunately, messages from [IP] weren't sent | Outlook.com-side IP block | Sender support request, plus behaviour |
550 5.7.708 Access denied, traffic not accepted from this IP | Range-level block, often geography or pattern driven | Usually your provider's problem, not yours |
550 5.7.511 Access denied, banned sender | Sender or domain level ban | Behaviour; portals will not clear it |
451 4.7.500 / 4.7.650 and similar deferrals | Throttling against your IP or domain | Reduce volume, improve engagement |
550 5.7.509 ... does not satisfy DMARC requirements | Authentication and alignment failure | SPF, DKIM, DMARC |
Copy the exact code out of the bounce before you do anything else. The difference between an IP block with a portal and a sender-level ban without one is the difference between a ten-minute fix and a fortnight of reputation work.
The three Microsoft tools worth having
The Microsoft 365 anti-spam IP delist portal. For S3140/S3150-style IP blocks, Microsoft offers self-service delisting: you submit the IP and an email address and receive confirmation. It is genuinely quick. It is also not a reputation reset — if the cause persists, you will be blocked again, and repeated submissions do not help.
SNDS (Smart Network Data Services). If you own the sending IP, register it for per-IP data Microsoft will not otherwise share: complaint rates, trap hits, traffic volume and a colour-coded status. This is your only real visibility into the Outlook.com side.
JMRP (the Junk Mail Reporting Program). A feedback loop that forwards Outlook users' spam reports for your IPs. Enrol, and suppress every reported address permanently and immediately.
Note what is absent: there is no lookup that tells you whether your *domain* is in bad standing, and no portal that clears a domain-level problem.
Recovery, in order
- Read the code, and check whether the block is IP-level (portal-eligible) or sender-level (not).
- Confirm the IP is yours. On Google Workspace, Microsoft 365, SES, SendGrid, Mailgun or Postmark, it is not. Escalate to the provider and work on your domain instead.
- Find the cause before any submission. Check for compromise first — a hacked mailbox or an abused form is the most common reason for a sudden Microsoft block. Then look at volume shape and complaint sources.
- Fix authentication for alignment. SPF and DKIM passing, at least one aligned with the
Fromdomain, DMARC published. Microsoft enforces this directly, and5.7.509says so. - Correct reverse DNS on any IP you control, forward-confirmed, with a matching HELO.
- Enrol in SNDS and JMRP so the next incident is visible before it becomes a block.
- Submit to the delist portal if the code is IP-level, once the cause is resolved.
- Resume at low volume to your most engaged Microsoft recipients and rebuild over one to two weeks.
What not to do
- Do not submit the portal form repeatedly. It is self-service and it is logged. Repeat submissions with no change behind them work against you.
- Do not look for a Hotmail blocklist to check. There is nothing to query; SNDS is the closest thing and it only covers IPs you own.
- Do not treat a deferral as a block. A
451 4.7.xis throttling. Keep volume low, retry normally, and let it clear. - Do not rotate domains. Microsoft weights domain history heavily, and a new domain starts with none.
- Do not ignore 5.7.708. Range-level blocks are about the netblock you are in. If your provider cannot resolve it, that is information about your provider.
- Do not forget Spamhaus. Corporate Microsoft 365 tenants frequently add third-party lists of their own, so a Spamhaus listing can be the real reason a specific tenant refuses you.
The part with no portal
Sender- and domain-level standing at Microsoft recovers through changed behaviour over days to weeks, and nothing in Microsoft's tooling will confirm it. What you can observe is the deferral rate falling and placement in Outlook mailboxes returning, which means the measurement has to be yours.
MailPilot measures per-provider inbox placement daily, including Outlook and Microsoft 365, warms mailboxes back up at a controlled pace after a block, and verifies SPF, DKIM and DMARC alignment — so you can tell a genuine recovery from a quieter continued block.
Ready to reach the inbox every time?
Automated email warmup across real peer mailboxes. Live inbox placement monitoring. Free 7-day trial - no credit card required.
Start free trial