path: root/dnslists.otl

TODO
	check and link (de)listing policy
		NOGO: delisting for money
	check and link usage policy
	check and link return codes
	find newsfeed or mailinglist
	give feedback?
	implement in exim
	implement in SA
	implement in rspamd
implement
	https://abuse.ro/
		policy
			spamtraps
			The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
			Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
			Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
00_META
	https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
	http://www.blalert.com/dnsbls
	http://www.dnsbl.info/dnsbl-list.php
	http://dnsbl.inps.de/index.cgi?lang=en&site=00002
	http://www.sdsc.edu/~jeff/spam/cbc.html
	http://moensted.dk/spam/
	https://whatismyipaddress.com/blacklist-check
	https://multirbl.valli.org/
	https://glockapps.com/blacklist/
	https://docs.hetrixtools.com/monitored-blacklists/
	https://www.blacklistmaster.com/
	https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
	https://github.com/zbetcheckin/DNSBLs
00_ELANG
	http://dnsbl.aspnet.hu/
		hungarian?
	http://spam-rbl.fr/
		french
	https://mav.com.br/
		maybe? they have antispam but it’s all portugese? or spanish? no idea
00_DEAD
	http://openrbl.org/
		as seems dead
			404s
			wiki is down
	http://mailhosts.org/
		dead
			https://www.blalert.com/dnsbl/shortlist.mailhosts.org
	blitzed.org
		dead since 2006
			https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
				referenced ML post is 404
	blackholes.five-ten-sg.com
		Offline as of 1/1/2013
			https://whatismyipaddress.com/five-ten-sg
	dynip.rothen.com
		On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
			https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
	fl.chickenboner.biz
		dead since 2011
			https://community.spiceworks.com/topic/329762-blacklist-removal
			https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
		website contains spam/crap
	http://cart00ney.surriel.com/
		cart00ney.org is dead
	http://dsbl.org/
		points to surriel.com
	http://csma.biz/
		domain is for sale
		dead since 2013
			https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
	http://dnsbl.net.au/
		website contains info about living in australia? called "AusBlog"
		http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
	http://moensted.dk/spam/
		dead since 2010
		https://moensted.dk/spam/
	http://rbl.mw-internet.net/
		domain was parked
		2023: it is an asian(?) gambling(?) website
	http://www.blackholes.us/
		dead since 2009
			https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
	http://www.deadbeef.com/
		dead, no info
	spamsources.dnsbl.info
		dead since 2011 or so
			http://www.dnsbl.info/spamsources-dnsbl-defunct.php
	http://www.gweep.ca/
		domain dead, no other info
	http://www.njabl.org/
		dead since 2013
			https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
	http://wytnij.to/
		website parked, no other info
	https://www.transip.nl/
		dead since 2013
			https://www.blalert.com/dnsbl/proxy.block.transip.nl
			https://www.blalert.com/dnsbl/residential.block.transip.nl
	pss.spambusters.org.ar
		NXDOMAIN
	rbl.snark.net
		NXDOMAIN
		https://snark.net/ gives access denied
	whois.rfc-ignorant.org
		NXDOMAIN
		rfc-ignorant.org registered but no A/AAAA record
		dead since 2012
			http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
			https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
	will-spam-for-food.eu.org
		unmaintained
		dead
			https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
	http://proxybl.org/
		dead, seemingly written on http://proxybl.org/blog but that’s also dead
		https://linuxreviews.org/Mail_Spam_Blacklists
		https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
	dev.null.dk
		timeout, also on the parent null.dk
		effectively dead
	dnsbl.mags.net
		seems dead, no info to be found
		domain does not respond
	http://msrbl.blogspot.ch/
		http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
		effectively dead
	http://www.olsentech.net/
		strange content on web
		effectively dead
	rbl.orbitrbl.com
		http://www.orbitrbl.com/
		timeout
	rbl.polarcomm.net
		NXDOMAIN
		registered but no A/AAAA record
	cidr.bl.mcafee.com
		https://kc.mcafee.com/corporate/index?page=content&id=KB53783
			404
		no info to be found
		dead?
	http://anti-spam.org.cn/?locale=en_US
		unreachable DNS
	rbl.talkactive.net
		seems dead
		talkactive.net redirects twice to some hosting company
		last listings in 2017
			https://multirbl.valli.org/detail/rbl.talkactive.net.html
			https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
	dnsbl.ipocalypse.net
		no policies published
		dead
			was a private list of an irc network
			network was renamed idlechat.net in 2014
			became a discord chat in 2022(?)
	http://blakjak.net/RBL
		external access disabled
		2023: seems dead, website is a weird error
		https://www.blalert.com/dnsbl/rbl.blakjak.net
			This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
	http://cyberlogic.net/
		french (canada)
		https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
			On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
		https://www.dnsbl.com/2018/05/
			As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
00_NEEDS_RECHECK
	https://antispam.imp.ch/
		no usage policy
		no return code info
		no good listing policy
		information received from inquiry to provider
			website will be updated
			return codes
				dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
					127.0.1.8 = default
					127.0.0.10 => TRAP (Email sent to a spamtrap)
					127.0.0.11 => REPO (Email reported as Spam by customer)
				spamrbl.imp.ch (3 days holding time)
					IPs are listed when trying to send mail to the spamtrap mailserver
					MD5 hash: attachment sent to the swinog blacklist
				wormrbl.imp.ch
					DEAD
	http://blacklist.woody.ch/rblcheck.php3
		dead?
		waiting for feedback
00_NEEDS_RESEARCH
	bl.tiopan.com
	blocked.hilli.dk
	dialups.visi.com
	dnsbl.antispam.or.id
	dob.sibl.support-intelligence.net
	intruders.docs.uu.se
	map.spam-rbl.com
	rbl.triumf.ca
	all.s5h.net
		http://www.usenix.org.uk/content/rbl.html
	torexit.dan.me.uk
	http://pedantic.org/
		as of 20140701
	rbl.fasthosts.co.uk
		https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
		seems dead?
		https://antispam.fasthosts.co.uk/
00_ALIVE
	00_RECONSIDER
		http://barracudacentral.org/rbl
			requires account with extensive information (more than spamhaus e.g.):
				your name.
				your company name.
				your phone number.
				your address.
				your city name.
				your state/province name.
				your zip/postal code.
				the name of the alternate contact.
				the phone number of the alternate contact.
				the email address of the alternate contact.
			seems well documented
	00_E_EVIL
		sbl.nszones.com
			http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
	00_E_INFORMATION
		blacklist.sci.kun.nl
			https://cncz.science.ru.nl/en/howto/email-spam/
			not really its own DNSBL?
			no usage information
			no usage policy
		http://anonmails.de/
			seems serious but missing necessary info
				usage policy
				listing policy
		http://blacklist.jippg.org/
			no usage policy
			no listing policy
			no return code info
		bip.virusfree.cz
			used by rspamd
			https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
		https://www.nixspam.net/
			previously http://www.dnsbl.manitu.net/
			query zone: ix.dnsbl.manitu.net
			provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
			difficult to find info regarding listing policy
			asked for more information to be added
				https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
		access.redhawk.org
			website works but barely any info, not even how to query it
			https://www.redhawk.org/?p=64
			https://www.redhawk.org/SpamHawk/index.php
		https://senderscore.org/
			requires registration?
			Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
			https://senderscore.org/assess/blocklist-lookup/
			FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
			no information how to query found
		mail-abuse.org
			https://ers.trendmicro.com/
			trendmicro paid service
			https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
				»If you don’t create an account, you can still query the reputation of an IP address«
			I don’t find any pricing or usage information
	00_E_PAID
	00_E_PRIVATE
		88.blacklist.zap
			http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
			https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
			https://www.blalert.com/dnsbl/88.blacklist.zap
				88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
			https://www.dnsbl.com/search/label/frontbridge
		http://drmx.org/
			»Use of any DrMX.ORG DNS Zone is by request and by contract only.«
		rbl.tdk.net
			tdk.net seems dead on http(s)
			private
				https://www.blalert.com/dnsbl/rbl.tdk.net
			old link: http://postmaster.tdc.dk/publish.php?id=31787
				tdc.dk redirects to yousee.dk
				https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
		rbl.zenon.net
			private
				https://www.blalert.com/dnsbl/rbl.zenon.net
			http://www.noc.zenon.net/rbl/
			russian(?)
		https://ahbl.org/
			was public until 2015
			now private, invite-only
	00_DOMAIN_BLACKLISTS
		http://rfc-clueless.org/
			lists domains that do not adhere to common best practices or requirements
			does NOT list spammers!
			listing criteria are explained well
				http://rfc-clueless.org/pages/listing_policy
			return codes are explained
				http://rfc-clueless.org/
			usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
		http://spameatingmonkey.com/
			lists IPs
			lists domains
			usage policy seems clear
				https://spameatingmonkey.com/faq/query-limits
			listing policy seems clear
				https://spameatingmonkey.com/services
			return codes documented
				https://spameatingmonkey.com/services
		http://uribl.com/
		http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
		http://www.rbl.jp/allrbl-e.html
		http://www.sorbs.net/
			good reputation
			seems sensible
			different kinds of lists
		http://www.spamhaus.org/
			good reputation
			very well done
			different kinds of lists!
		http://www.surbl.org/
		http://zapbl.net/
		https://rbl.foobar.hu/
		http://apews.org/?page=filter
			questionable
	00_DOMAIN_WHITELISTS
		http://uribl.com/
		http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
		http://www.spamhauswhitelist.com/en/
		https://www.dnswl.org/
	00_IP_BLACKLISTS
		00_E_FOCUS
			http://stopspam.org/rblcheck/index.php
				different kinds of lists
				none usable for me
			http://www.dnsblchile.org/
				chilenian spam
		00_LISTS_BLOGSPAMMERS
			http://blogspambl.com/
			https://www.madavi.de/madavibl/
			http://bsb.empty.us/
		00_LISTS_COUNTRIES
			http://countries.nerd.dk/
			korea
				http://korea.services.net/
		00_LISTS_DIALUPS
			http://dul.ru/dul.en.html
				DEAD for sale
		00_LISTS_OPENRESOLVERS
			http://dns.measurement-factory.com/surveys/openresolvers.html
		00_LISTS_TORNODES
			http://www.sectoor.de/tor.php
			https://www.dan.me.uk/dnsbl
		https://0spam.org/
			clear information on usage policy
				Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
				DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
			seems serious
			listing policies are a little less clear
				bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
				nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
				url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
			return codes not very clear
		http://anticaptcha.net/
		http://blacklist.lashback.com/
			http://ubl.unsubscore.com
		http://blacklist.woody.ch/rblcheck.php3
		http://cbl.abuseat.org/
		http://dnsbl.burnt-tech.com/
		http://dnsbl.iip.lu/
		http://dnsbl.inps.de/
		http://dnsbl.tornevall.org/
		http://dronebl.org/
		http://mailspike.net/usage.html
		http://psbl.org/
			query zone: psbl.surriel.com
		http://rbl.dns-servicios.com/rbl.php
		http://rbl.schulte.org/
		http://rbldata.interserver.net/
			may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
		http://relaytest.kundenserver.de/
		http://rv-soft.info/
		http://spamcannibal.org/dnsbl_check.shtml
		http://spamrats.com/
		http://spamstinks.com/
		http://st.technovision.dk/
		http://tor.efnet.org/
			http://rbl.efnetrbl.org/ MIRROR
		http://v4bl.org/
		http://virbl.bit.nl/
		http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
		http://wpbl.info/
		http://www.aupads.org/
		http://www.backscatterer.org/
			fragwuerdige policy - bezahlen fuer schnelleres delisting
		http://www.blockedservers.com/
		http://www.blocklist.de/en/index.html
		http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
		http://www.gbudb.com/truncate/
		http://www.justspam.org/
		http://www.kempt.net/dnsbl/
		http://www.leadmon.net/spamguard/
		http://www.rbl.jp/allrbl-e.html
		http://www.sorbs.net/
			good reputation
			seems sensible
			different kinds of lists
		http://www.spamcop.net/
			good policy
			good reputation
		http://www.spamhaus.org/
			good reputation
			very well done
			different kinds of lists!
		http://www.spamsources.fabel.dk/
			sensible policy
		http://www.srntools.com/blacklist/
		http://www.uceprotect.net/en/index.php
		http://www.usenix.org.uk/content/rbl.html
		http://zapbl.net/
		https://bl.konstant.no/
		https://choon.net/rbl.php
		https://puck.nether.net/or/
			might be good
		https://rbl.foobar.hu/
		https://www.abuse.ch/
			https://www.abuse.ch/?tag=httpbl
		https://www.kisarbl.or.kr/
		https://www.megarbl.net/
		https://www.team-cymru.org/Services/Bogons/dns.html
	00_IP_WHITELISTS
		http://mailspike.net/usage.html
			reputation-based
		http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
			very nice project!
		http://www.spamhauswhitelist.com/en/
			policies for listing and usage on the website
		http://www.whitelisted.org/
			paid subscription
			policy on site
		https://puck.nether.net/or/
			policies on website
		https://rbl.foobar.hu/
			usage and listing policies on website
		http://www.isipp.com/email-accreditation/iadb-query-instruction/
			requires signup
		https://choon.net/rbl.php
			not quite a usage policy, but seems ok
			strange split of ipv4 and ipv6
			seems dead?
		https://www.dnswl.org/