2 check and link (de)listing policy
3 NOGO: delisting for money
4 check and link usage policy
5 check and link return codes
6 find newsfeed or mailinglist
12 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13 http://www.blalert.com/dnsbls
14 http://www.dnsbl.info/dnsbl-list.php
15 http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16 http://www.sdsc.edu/~jeff/spam/cbc.html
17 http://moensted.dk/spam/
18 https://whatismyipaddress.com/blacklist-check
19 https://multirbl.valli.org/
20 https://glockapps.com/blacklist/
21 https://docs.hetrixtools.com/monitored-blacklists/
22 https://www.blacklistmaster.com/
23 https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24 https://github.com/zbetcheckin/DNSBLs
25 https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26 https://www.impressionwise.com/kb/threats/rbl-advisories.html
28 http://dnsbl.aspnet.hu/
33 maybe? they have antispam but it’s all portugese? or spanish? no idea
41 https://www.blalert.com/dnsbl/shortlist.mailhosts.org
44 https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45 referenced ML post is 404
46 blackholes.five-ten-sg.com
47 Offline as of 1/1/2013
48 https://whatismyipaddress.com/five-ten-sg
50 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
54 https://community.spiceworks.com/topic/329762-blacklist-removal
55 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56 website contains spam/crap
57 http://cart00ney.surriel.com/
64 https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
66 website contains info about living in australia? called "AusBlog"
67 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68 http://moensted.dk/spam/
70 https://moensted.dk/spam/
71 http://rbl.mw-internet.net/
73 2023: it is an asian(?) gambling(?) website
74 http://www.blackholes.us/
76 https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77 http://www.deadbeef.com/
79 spamsources.dnsbl.info
81 http://www.dnsbl.info/spamsources-dnsbl-defunct.php
83 domain dead, no other info
86 https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
88 website parked, no other info
89 https://www.transip.nl/
91 https://www.blalert.com/dnsbl/proxy.block.transip.nl
92 https://www.blalert.com/dnsbl/residential.block.transip.nl
93 pss.spambusters.org.ar
97 https://snark.net/ gives access denied
98 whois.rfc-ignorant.org
100 rfc-ignorant.org registered but no A/AAAA record
102 http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103 https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104 will-spam-for-food.eu.org
107 https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
109 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110 https://linuxreviews.org/Mail_Spam_Blacklists
111 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
113 timeout, also on the parent null.dk
116 seems dead, no info to be found
117 domain does not respond
118 http://msrbl.blogspot.ch/
119 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
121 http://www.olsentech.net/
122 strange content on web
125 http://www.orbitrbl.com/
129 registered but no A/AAAA record
131 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
135 http://anti-spam.org.cn/?locale=en_US
139 talkactive.net redirects twice to some hosting company
140 last listings in 2017
141 https://multirbl.valli.org/detail/rbl.talkactive.net.html
142 https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
144 no policies published
146 was a private list of an irc network
147 network was renamed idlechat.net in 2014
148 became a discord chat in 2022(?)
149 http://blakjak.net/RBL
150 external access disabled
151 2023: seems dead, website is a weird error
152 https://www.blalert.com/dnsbl/rbl.blakjak.net
153 This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154 http://cyberlogic.net/
156 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157 On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158 https://www.dnsbl.com/2018/05/
159 As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160 http://www.rbl.jp/allrbl-e.html
161 website asks for login or just errors
162 http://www.spamhauswhitelist.com/en/
163 looks like a parked domain with ads
164 http://stopspam.org/rblcheck/index.php
166 http://www.stopspam.org/rbl-info/
168 http://countries.nerd.dk/
169 unable to connect, also for nerd.dk
170 http://dul.ru/dul.en.html
172 http://dns.measurement-factory.com/surveys/openresolvers.html
174 »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175 http://www.sectoor.de/tor.php
177 http://anticaptcha.net/
179 http://blacklist.lashback.com/
180 query zone: ubl.unsubscore.com
181 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182 rsync URLs seem dead, so does the download url
183 http://blacklist.woody.ch/
184 no entries in the displayed "top 100"
185 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186 http://cbl.abuseat.org/
187 https://www.abuseat.org/
188 changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189 http://dnsbl.burnt-tech.com/
191 http://rbl.dns-servicios.com/rbl.php
192 website can not be found
193 http://spamcannibal.org/
194 dead, as of at least 2018
195 http://st.technovision.dk/
196 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197 [December 8, 2021] This RBL has stopped responding to DNS queries.
198 http://spamstinks.com/
199 cert is for generic hostname
200 website shows some login form
202 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203 January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204 http://www.blocklist.de/en/index.html
205 lots of timeouts as of 2023
206 forum link is dead, among others
207 seems unmaintained but alive
208 latest news is from 2016
209 latest blog entry from 2022
210 Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211 http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
213 http://www.leadmon.net/spamguard/
215 http://www.srntools.com/blacklist/
216 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
218 https://antispam.imp.ch/
221 no good listing policy
222 information received from inquiry to provider
223 website will be updated
225 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
227 127.0.0.10 => TRAP (Email sent to a spamtrap)
228 127.0.0.11 => REPO (Email reported as Spam by customer)
229 spamrbl.imp.ch (3 days holding time)
230 IPs are listed when trying to send mail to the spamtrap mailserver
231 MD5 hash: attachment sent to the swinog blacklist
234 http://blacklist.woody.ch/rblcheck.php3
238 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
239 in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
240 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
241 This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
242 http://dnsbl.inps.de/
244 https://www.dnsbl.com/search/label/dnsbl.inps.de
245 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
246 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
247 [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
248 https://glockapps.com/blacklist/dnsbl-inps-de/
249 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
250 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
251 This blacklist is offline as of May 1, 2020.
252 https://web.archive.org/web/20220428013500/http://www.inps.de/
258 dob.sibl.support-intelligence.net
263 http://www.usenix.org.uk/content/rbl.html
268 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
270 https://antispam.fasthosts.co.uk/
273 http://barracudacentral.org/rbl
274 requires account with extensive information (more than spamhaus e.g.):
280 your state/province name.
281 your zip/postal code.
282 the name of the alternate contact.
283 the phone number of the alternate contact.
284 the email address of the alternate contact.
285 seems well documented
288 http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
289 http://www.backscatterer.org/
290 questionable policy - pay for (quicker) delisting
291 https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
292 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
293 https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
294 in March 17, 2023 does not mention need to pay
295 https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
296 recommend against using it
297 https://whatismyipaddress.com/backscatterer
298 mentions strict delisting process and "express delisting" but nothing further
299 https://bobcares.com/blog/backscatterer-blacklist/
300 goes through the process with screenshots showing express delisting for 109$
301 https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
303 https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
304 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
305 https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
309 https://cncz.science.ru.nl/en/howto/email-spam/
310 not really its own DNSBL?
314 seems serious but missing necessary info
317 http://blacklist.jippg.org/
323 https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
324 https://www.nixspam.net/
325 previously http://www.dnsbl.manitu.net/
326 query zone: ix.dnsbl.manitu.net
327 provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
328 difficult to find info regarding listing policy
329 asked for more information to be added
330 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
332 website works but barely any info, not even how to query it
333 https://www.redhawk.org/?p=64
334 https://www.redhawk.org/SpamHawk/index.php
335 https://senderscore.org/
336 requires registration?
337 Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
338 https://senderscore.org/assess/blocklist-lookup/
339 FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
340 no information how to query found
342 https://ers.trendmicro.com/
343 trendmicro paid service
344 https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
345 »If you don’t create an account, you can still query the reputation of an IP address«
346 I don’t find any pricing or usage information
347 http://dnsbl.tornevall.org/
348 https://www.tornevall.net/
349 related to https://www.fraudbl.org/
350 seems a bit unstructured and not very well documented
351 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
353 http://rbl.schulte.org/
355 listing policy seems to be: they received spam from an IP
356 usage policy: Anyone can use this RBL list [sic]
357 return codes: probably boolean, i.e. either listed or not
358 http://relaytest.kundenserver.de/
359 by 1und1 (now ionos?), used internally
360 https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
361 no usage policy found
362 no listing policy found
363 no return code explanation found
364 http://www.blockedservers.com/
369 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
373 http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
374 https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
375 https://www.blalert.com/dnsbl/88.blacklist.zap
376 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
377 https://www.dnsbl.com/search/label/frontbridge
379 »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
381 tdk.net seems dead on http(s)
383 https://www.blalert.com/dnsbl/rbl.tdk.net
384 old link: http://postmaster.tdc.dk/publish.php?id=31787
385 tdc.dk redirects to yousee.dk
386 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
389 https://www.blalert.com/dnsbl/rbl.zenon.net
390 http://www.noc.zenon.net/rbl/
393 was public until 2015
394 now private, invite-only
395 http://rfc-clueless.org/
397 that do not adhere to common best practices or requirements
398 does NOT list spammers!
399 listing criteria are explained well
400 http://rfc-clueless.org/pages/listing_policy
401 return codes are explained
402 http://rfc-clueless.org/
403 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
405 first noticed in 2014 and deactivated
406 retried in 2023 and still the case
407 http://spameatingmonkey.com/
409 that sent backscatter
410 that sent to spamtrap
412 this includes dial-up!
413 https://spameatingmonkey.com/faq/policy-based-listing
417 usage policy seems clear
418 https://spameatingmonkey.com/faq/query-limits
419 listing policy seems clear
420 https://spameatingmonkey.com/services
421 return codes documented
422 https://spameatingmonkey.com/services
423 http://blogspambl.com/
424 redirects to spameatingmonkey.com
427 that appear in spam bodies
430 that URIs in spam bodies resolve to
431 return codes are documented
432 https://uribl.com/about.shtml#implementation
434 127.0.0.1 is used to signal abusive query behaviour
435 http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
439 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
440 listing policy is documented
441 return codes are documented
442 seems very trustworthy
443 http://www.sorbs.net/
447 usage policy is clear that it’s free
448 listing policy is documented
449 return codes are documented
451 http://www.spamhaus.org/
454 seems very professional
457 usage policy is clear
458 https://www.spamhaus.org/organization/dnsblusage/
459 listing policies are clearly documented
460 return codes are clearly documented
461 http://www.surbl.org/
464 usage policy is clear
465 https://surbl.org/usage-policy
466 listing policy is documented
467 return codes are documented
469 127.0.0.1 means blocked
473 listing policy seems clear
474 https://zapbl.net/policy
475 usage policy seems clearly free for everyone
476 https://zapbl.net/using
477 return codes are documented
479 https://rbl.foobar.hu/
482 listing policy seems clear
483 usage policy seems clearly free for everyone
484 return codes are documented
485 possibly unmaintained or dead
486 footer says: ©2013-14
487 http://apews.org/?page=filter
489 https://www.dnsbl.com/search/label/apews
490 https://whatismyipaddress.com/apews
492 no news on http://apews-user.blogspot.com/ since 2014
493 not further looked into because of the above
494 https://www.dnswl.org/
495 seems to be run with best intentions but has had issues from what I have heard from some users
496 IRC channel has some activity
497 usage policy relatively clear
498 free within certain limits
501 return codes are documented
503 https://www.dnsblchile.org/index.en.html
504 chilenian spam so not interesting for me
506 00_LISTS_BLOGSPAMMERS
507 https://www.madavi.de/madavibl/
508 »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
510 does not exist anymore
511 empty.us returns »Nothing here, obviously.«
514 http://korea.services.net/
516 00_LISTS_OPENRESOLVERS
518 https://www.dan.me.uk/dnsbl
519 http://rbl.efnetrbl.org/
520 aka http://tor.efnet.org/
522 lists open proxies, infected machines, tornodes, etc.
524 clear information on usage policy
525 Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
526 DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
528 listing policies are a little less clear
529 bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
530 nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
531 url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
532 return codes not very clear
536 The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
537 Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
538 Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
540 usage policy is clear: free for whatever
541 listing policy is not quite so clear
542 can be mostly inferred from the classes but not entirely clear IMHO
545 not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
547 query zone: psbl.surriel.com
548 no usage policy, but seems implied that usage is free
550 no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
552 not documented, probably only boolean
553 http://rbldata.interserver.net/
554 listing policy more or less clear
555 usage policy not given but since usage is explained it’s probably free for all
556 return codes seem to be binary, i.e. either listed or not
560 usage policy not explicit but seems to be free
561 listing policy also not explicit but can be inferred from return code explanation
562 return codes are explained
564 clear usage policy (ToS)
565 listing policies documented
566 return codes of aggregated list documented
569 usage policy documented
570 listing policy not really clear
571 return codes documented
573 listing procedure is documented
574 usage policy implied: free to use
575 return codes documented
576 http://www.aupads.org/
577 aka www.antispam-ufrj.pads.ufrj.br
579 listing policy more or less clear
581 usage policy seems clear: freely exported by anybody who wants to use them«
582 http://www.gbudb.com/truncate/
584 usage policy seems implied: free use
585 return codes documented
586 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
587 http://www.justspam.org/
588 listing policy documented
589 warning: relies on listings in other DNSBLs! also for delisting!
592 http://www.kempt.net/dnsbl/
593 listing policy documented
594 usage policy documented
595 return codes undocumented
596 http://www.spamcop.net/
599 http://www.spamsources.fabel.dk/
600 usage policy is: free
601 listing policy seems clear
603 http://www.uceprotect.net/en/index.php
604 https://bl.konstant.no/
605 https://choon.net/rbl.php
606 https://www.abuse.ch/
607 https://www.abuse.ch/?tag=httpbl
608 https://www.kisarbl.or.kr/
609 https://www.megarbl.net/
610 https://www.team-cymru.org/Services/Bogons/dns.html
611 http://mailspike.net/usage.html
613 http://www.whitelisted.org/
616 https://puck.nether.net/or/
618 http://www.isipp.com/email-accreditation/iadb-query-instruction/
620 not quite a usage policy, but seems ok
621 strange split of ipv4 and ipv6