Shopify IP Address listed in RBL/Blacklisted

[Medsales]

We have noticed that a lot of Shopify IP addresses are listed on the RBL / IP Blacklist database.

We use Mimecast for our mail server security and mimecast will not allow any mail from this address into our environment due to it coming in from an IP address listed in the RBL. Our email filter security system has noticed this.

Is there something you can do on your side or change the IP address to which you send the communication?

We have several order confirmations, email requests & quote requests from our shopify stores that are being blocked.

When speaking with Shopify chat support they advised us to just whitelist the IP addresses – which is directly against our IT and security policy and frankly terrible advice.  

Surely, we cannot be the first customer to reach out with the issue?

We need a resolution that will not open our business to a security threat by whitelisting IP addresses that are shown on a blacklist database?

Does anyone have any advice? We cannot change our mail server as its a national business policy put in place to protect our business.  

[BlessifyInfotec]

Hi,

I'm also facing the same issue, please provide the solution on this.

[KH708]

@Ollie @Shay 

What is the status of this issue??? We are now experiencing issues with invoices not being delivered through quickbooks, because our email addresses are on the blacklists.

[KH708]

Update: We did a live support chat and the issue was escalated to the Tech Dept. We've received the following message: 

Hey!
 
This is William — a Technical Support Specialist here with Shopify!
 
Thank you for bringing the email deliverability issue to our attention. We understand how critical email communication is for your business operations and customer engagement.
 
Our developers are aware of the blacklisting issue with Suomispam and are actively working on options to get this removed. We are currently in discussions with Suomispam to resolve this matter as swiftly as possible.
 
However, at this time, we do not have an estimated resolution time and cannot provide a specific timeframe for when this issue will be fully resolved. We appreciate your patience and understanding as we work through this.

[ajc360]

Also having this problem. Shopify? 

[KH708]

Please tweet this issue to @Shopify and @shopifysupport. 

[Jeff2089]

I too have this issue and was sent to GoDaddy who of course said it is a Shopify issue. I requested to get me off of the server and was denied. What can be done?

[phil_CM]

Shopify do not understand that they need to remove themselves from blacklists. They are ignoring the advice. I have resorted to removing contact forms!

[Shay]

Hi @phil_CM 

If you have any specific IP addresses that you are having issues with please feel free to share them. I am happy to investigate and see if there is any actions we can take on our end to resolve the blacklist. 

[phil_CM]

149.72.155.155

[Ollie]

Hey @phil_CM and @hbenik.

We have provided these IP addresses to our internal team to take a further look. We appreciate that you have brought this to our attention. 

Let us know if you have any questions.

[Jeffrey]

please help:

domain's IP address (23.227.38.65) is currently blacklisted on several RBLS (Real-time Blackhole Lists).

Please refer to the following URLs for more details:

https://suomispam.net/#!lookup/23.227.38.65

https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a23.227.38.65&run=toolpage

The results from these tools confirm that the sending domain has a bad reputation, which is causing email deliverability issues.

[hbenik]

149.72.30.221

[KH708]

23.227.38.32

[HBIT]

Is anyone from Shopify even checking this community forum? 
Blacklisting and IP reputations are something that Shopify needs to do by themself. 
Why do clients need to monitor blacklists and IP reputation, if we are paying you for webhosting? 

[KH708]

We are on chat with shopify about this because it doesn't look like they are very responsive here. 

IMO, if their IP addresses are blacklisted, they should assign new clean IPs to those stores. This is their responsibility.

[hbenik]

Our Shopify Email campaigns have been negatively impacted because of this issue, and Shopify support has even suggested finding an alternative service to use. Researching a solution as we speak.

[HBIT]

Hi, 

We have the same issue. Here are IP addresses: 

23.227.38.32
23.227.38.65
23.227.38.33

Also, first 2 addresses have very poor reputation. 

[davidetonti]

Hi, I have the same problem.  My domain is being blacklisted as it shows the Shopify IP 23.227.38.65

[Italia-Straps]

Hi Everyone,

We are seeing the identical issue...23.227.38.65 on Suomispam Reputation blacklist

Did a spot check of a number of other stores we also know to be on the Shopify platform and the result is the same. 

Thanks

[Elias]

Hey, @Medsales & @Italia-Straps.

Thanks for reaching out and bringing this to our attention.

Our developers have been made aware of this issue, and they are working on clearing things up - please allow some time for the issue to get resolved. 

If you have any other questions on this topic, then don't hesitate to let us know!

[davidetonti]

Hi @Elias 

Do you have any update on this? We have issues with our email, and it has been about a week without any fix.

Regards,

[kk87]

Has there been a resolution to this? We are experiencing the email deliverability issues as well due to the 23.227.38.65 being on the Suomispam Reputation blacklist. Please advise!!

[giftboxgirl]

Hi! Just another user experiencing this issue (I think). Is it affecting your email deliverability even on emails not sent through Shopify itself? Our emails keep getting flagged as spam even when sent through our own email inbox and marketing platform. Just want to make sure we're experiencing the same thing as this thread

[KH708]

Yes, this is the same issue we are having. Our email address is associated with our shopify store. And the IP address for our store is on the blacklist, as are many other IPs that shopify provides. We are having deliverability issues across the board.  An easy fix would be to move the stores to clean IPs. I would think their developers could figure this out. So far, the response from Shopify is for us to be patient since 7/11. Maybe we can get answers if we post the issue for them here: https://x.com/shopify and to some of their top executives here: https://x.com/Shopify/affiliates 

[giftboxgirl]

Has it been resolved for you yet??

[Pat_Troy1]

some of our email notifications get through and others are stopped. I can see that shopify use different mailer addresses and some are on Block Lists and som e are not

[Pat_Troy1]

these are Global Block Lists and shopify should be getting its addresses cleaned, there is nothing the consumer can do

[Pat_Troy1]

after a week they "successfully removed the bounce suppressions"

[PGuarnieri]

Is anyone else still having this issue?   Has anyone found a way to get around the fact that all emails (including those just sent from our domain) are showing up in recipient's junk folders?

[Pat_Troy1]

i followed the step by step instructions with my domain support people

they still werent getting through an my domain was being flagged.

we finally fixed it with the txt file.

then there was the problem with the shopify mailer domains being blacklisted.

finally they were solved (apparently)

but even so i think approx 10-20% of my customer notifications go to their spam folders.

i get queries about comms not arriving all the time

[RevGenOne]

what txt record had they added to your DNS?

[Pat_Troy1]

v=DMARC1;p=none

[Jules77]

I am also dealing with this issue and appreciate a solution. 

[DragonflyGoods]

We are experiencing the same issue with our domain (hosted on GoDaddy) being flagged by multiple blacklists as Malicious and some ISPs blocking access altogether. Even though our site is cleared by Google Safe Browsing, we can't get off these lists because it's assigned to the IP given by Shopify. This has been affecting us since February with no end in sight.

1. When can we get some real answers on this issue?

2. Will transferring our domain to Shopify get us a new IP and resolve this?

[techheritagebks]

DragonflyGoods:

1. Based on their track record, getting real answers will take MUCH longer. The problem was first reported over a year ago and it's still a problem.

2. Transferring your domain to Shopify will be unlikely to help matters. We are having the same problem, also with a domain registered with another provider (Network Solutions) but hosted by Shopify. Since Shopify is the one hosting your store, our store and many other stores, the only way it will be fixed is if Shopify addresses the problem with those IPs, or assigns the stores affected by blacklisted IPs to new IPs. If they assign new IPs, the affected stores will have to change their Domain records to point them to a new IP. They may have decided that is too much work.

Our store is blacklisted by Suomispam Reputation blacklist, like others mentioned above. Our IP address is  23.227.38.32, same as others above. 

What is bizarre is that Suomispam Reputation is a blacklist for SPAM in the Finnish language. We are a US store, only working in English. Pretty sure there isn't any Finnish in any of our emails. And we sell history and genealogy books, not anything at all controversial (even though Google keeps flagging items as offensive -- one example was a book of deed records--how is that offensive?)

We also have SPF, DKIM, and DMARC set up on our domain, so I'm not understanding why this is a problem, except someone is apparently using Shopify IPs to spam people and the rest of us are paying the price.

[kbird]

In my humble opinion, what Shopify should actually do is place stores with authenticated domains (or pass additional verification steps) to servers whose IPs have a reputable standing and monitor those IPs for blacklisting. Better yet, exercise server isolation to reduce the blast radius when one store goes rogue. I know it's expensive, but surely some kind of deliberate isolation is the best way to protect small business owners who depend on Shopify for their livelihoods. Gather.town does something where if you pay for a subscription, they put you on their "premium servers". I would think that having a Shopify plan would count as a subscription and this kind of guarantee could be factored in, although I would argue that service uptime should be guaranteed regardless. I'm sure most users don't actually want to have to think about the reputation of Shopify's IPs.

(context: am an IT professional who has managed infrastructure on platforms and consults on digital strategy)

I'm currently on a chat with someone from Shopify and they've been really helpful. They're currently forwarding this issue along to their internal team. I hope that this will resolve soon. Will post back here if it gets resolved so that the fix can be replicated for everyone else.

[Unified]

If you search on the Suomispam website for any IP in the range that has been blocked, it mentions "nopeet.fi" in the Comment tab. That site is a Finnish site hosted on Shopify which seems to have been flagged for spam. It has taken every other Shopify site down on that IP range with it. All Shopify sites on that IP range (there are many) are blacklisted by Suomispam now. Support are aware of it and we wait for further action to be taken.