]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
571f5ab8a46c2af3b7eb2b596f6213ecc3d39356
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4                 how long does automatic delisting take?
5                         7d is already quite long
6                         anything >7d seems excessive and should probably not be used
7         check and link usage policy
8         check and link return codes
9         find newsfeed or mailinglist
10         give feedback?
11         implement in exim
12         implement in SA
13         implement in rspamd
14 00_META
15         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
16         http://www.blalert.com/dnsbls
17         http://www.dnsbl.info/dnsbl-list.php
18         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
19         http://www.sdsc.edu/~jeff/spam/cbc.html
20         http://moensted.dk/spam/
21         https://whatismyipaddress.com/blacklist-check
22         https://multirbl.valli.org/
23         https://glockapps.com/blacklist/
24         https://docs.hetrixtools.com/monitored-blacklists/
25         https://www.blacklistmaster.com/
26         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
27         https://github.com/zbetcheckin/DNSBLs
28         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
29         https://www.impressionwise.com/kb/threats/rbl-advisories.html
30 00_ELANG
31         http://dnsbl.aspnet.hu/
32                 hungarian?
33         http://spam-rbl.fr/
34                 french
35         https://mav.com.br/
36                 maybe? they have antispam but it’s all portugese? or spanish? no idea
37 00_DEAD
38         http://openrbl.org/
39                 as seems dead
40                         404s
41                         wiki is down
42         http://mailhosts.org/
43                 dead
44                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
45         blitzed.org
46                 dead since 2006
47                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
48                                 referenced ML post is 404
49         blackholes.five-ten-sg.com
50                 Offline as of 1/1/2013
51                         https://whatismyipaddress.com/five-ten-sg
52         dynip.rothen.com
53                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
54                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
55         fl.chickenboner.biz
56                 dead since 2011
57                         https://community.spiceworks.com/topic/329762-blacklist-removal
58                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
59                 website contains spam/crap
60         http://cart00ney.surriel.com/
61                 cart00ney.org is dead
62         http://dsbl.org/
63                 points to surriel.com
64         http://csma.biz/
65                 domain is for sale
66                 dead since 2013
67                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
68         http://dnsbl.net.au/
69                 website contains info about living in australia? called "AusBlog"
70                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
71         http://moensted.dk/spam/
72                 dead since 2010
73                 https://moensted.dk/spam/
74         http://rbl.mw-internet.net/
75                 domain was parked
76                 2023: it is an asian(?) gambling(?) website
77         http://www.blackholes.us/
78                 dead since 2009
79                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
80         http://www.deadbeef.com/
81                 dead, no info
82         spamsources.dnsbl.info
83                 dead since 2011 or so
84                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
85         http://www.gweep.ca/
86                 domain dead, no other info
87         http://www.njabl.org/
88                 dead since 2013
89                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
90         http://wytnij.to/
91                 website parked, no other info
92         https://www.transip.nl/
93                 dead since 2013
94                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
95                         https://www.blalert.com/dnsbl/residential.block.transip.nl
96         pss.spambusters.org.ar
97                 NXDOMAIN
98         rbl.snark.net
99                 NXDOMAIN
100                 https://snark.net/ gives access denied
101         whois.rfc-ignorant.org
102                 NXDOMAIN
103                 rfc-ignorant.org registered but no A/AAAA record
104                 dead since 2012
105                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
106                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
107         will-spam-for-food.eu.org
108                 unmaintained
109                 dead
110                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
111         http://proxybl.org/
112                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
113                 https://linuxreviews.org/Mail_Spam_Blacklists
114                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
115         dev.null.dk
116                 timeout, also on the parent null.dk
117                 effectively dead
118         dnsbl.mags.net
119                 seems dead, no info to be found
120                 domain does not respond
121         http://msrbl.blogspot.ch/
122                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
123                 effectively dead
124         http://www.olsentech.net/
125                 strange content on web
126                 effectively dead
127         rbl.orbitrbl.com
128                 http://www.orbitrbl.com/
129                 timeout
130         rbl.polarcomm.net
131                 NXDOMAIN
132                 registered but no A/AAAA record
133         cidr.bl.mcafee.com
134                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
135                         404
136                 no info to be found
137                 dead?
138         http://anti-spam.org.cn/?locale=en_US
139                 unreachable DNS
140         rbl.talkactive.net
141                 seems dead
142                 talkactive.net redirects twice to some hosting company
143                 last listings in 2017
144                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
145                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
146         dnsbl.ipocalypse.net
147                 no policies published
148                 dead
149                         was a private list of an irc network
150                         network was renamed idlechat.net in 2014
151                         became a discord chat in 2022(?)
152         http://blakjak.net/RBL
153                 external access disabled
154                 2023: seems dead, website is a weird error
155                 https://www.blalert.com/dnsbl/rbl.blakjak.net
156                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
157         http://cyberlogic.net/
158                 french (canada)
159                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
160                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
161                 https://www.dnsbl.com/2018/05/
162                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
163         http://www.rbl.jp/allrbl-e.html
164                 website asks for login or just errors
165         http://www.spamhauswhitelist.com/en/
166                 looks like a parked domain with ads
167         http://stopspam.org/rblcheck/index.php
168                 aka dul.pacifier.net
169                 http://www.stopspam.org/rbl-info/
170                         stopped in 2013
171         http://countries.nerd.dk/
172                 unable to connect, also for nerd.dk
173         http://dul.ru/dul.en.html
174                 DEAD for sale
175         http://dns.measurement-factory.com/surveys/openresolvers.html
176                 dead
177                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
178         http://www.sectoor.de/tor.php
179                 timeouts
180         http://anticaptcha.net/
181                 for sale
182         http://blacklist.lashback.com/
183                 query zone: ubl.unsubscore.com
184                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
185                 rsync URLs seem dead, so does the download url
186         http://blacklist.woody.ch/
187                 no entries in the displayed "top 100"
188                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
189         http://cbl.abuseat.org/
190                 https://www.abuseat.org/
191                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
192         http://dnsbl.burnt-tech.com/
193                 domain is for sale
194         http://rbl.dns-servicios.com/rbl.php
195                 website can not be found
196         http://spamcannibal.org/
197                 dead, as of at least 2018
198         http://st.technovision.dk/
199                 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
200                         [December 8, 2021] This RBL has stopped responding to DNS queries.
201         http://spamstinks.com/
202                 cert is for generic hostname
203                 website shows some login form
204         http://virbl.bit.nl/
205                 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
206                         January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
207         http://www.blocklist.de/en/index.html
208                 lots of timeouts as of 2023
209                 forum link is dead, among others
210                 seems unmaintained but alive
211                 latest news is from 2016
212                 latest blog entry from 2022
213                         Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
214         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
215                 placeholder/parked?
216         http://www.leadmon.net/spamguard/
217                 website times out
218         http://www.srntools.com/blacklist/
219                 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
220         https://bl.konstant.no/
221                 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
222                         [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
223         https://www.megarbl.net/
224                 connection times out
225                 https://www.blalert.com/dnsbl/rbl.megarbl.net
226                         »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
227         https://www.kisarbl.or.kr/
228                 can’t find information about it
229                 website redirects to https://spam.kisa.or.kr/ which gives a 404
230         https://www.abuse.ch/
231                 old, defunct link: https://www.abuse.ch/?tag=httpbl
232                 does not seem to have a DNSBL (anymore)
233                         might be incorporated into spamhaus?
234                 does host other databases about threats
235         https://puck.nether.net/or/
236                 website is dead
237 00_NEEDS_RECHECK
238         https://antispam.imp.ch/
239                 no usage policy
240                 no return code info
241                 no good listing policy
242                 information received from inquiry to provider
243                         website will be updated
244                         return codes
245                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
246                                         127.0.1.8 = default
247                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
248                                         127.0.0.11 => REPO (Email reported as Spam by customer)
249                                 spamrbl.imp.ch (3 days holding time)
250                                         IPs are listed when trying to send mail to the spamtrap mailserver
251                                         MD5 hash: attachment sent to the swinog blacklist
252                                 wormrbl.imp.ch
253                                         DEAD
254         http://blacklist.woody.ch/rblcheck.php3
255                 dead?
256                 waiting for feedback
257         http://dnsbl.iip.lu/
258                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
259                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
260                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
261                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
262         http://dnsbl.inps.de/
263                 timeout
264                 https://www.dnsbl.com/search/label/dnsbl.inps.de
265                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
266                 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
267                         [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
268                 https://glockapps.com/blacklist/dnsbl-inps-de/
269                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
270                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
271                         This blacklist is offline as of May 1, 2020.
272                 https://web.archive.org/web/20220428013500/http://www.inps.de/
273 00_NEEDS_RESEARCH
274         bl.tiopan.com
275         blocked.hilli.dk
276         dialups.visi.com
277         dnsbl.antispam.or.id
278         dob.sibl.support-intelligence.net
279         intruders.docs.uu.se
280         map.spam-rbl.com
281         rbl.triumf.ca
282         all.s5h.net
283                 http://www.usenix.org.uk/content/rbl.html
284         torexit.dan.me.uk
285         http://pedantic.org/
286                 as of 20140701
287         rbl.fasthosts.co.uk
288                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
289                 seems dead?
290                 https://antispam.fasthosts.co.uk/
291 00_ALIVE
292         00_RECONSIDER
293                 http://barracudacentral.org/rbl
294                         requires account with extensive information (more than spamhaus e.g.):
295                                 your name.
296                                 your company name.
297                                 your phone number.
298                                 your address.
299                                 your city name.
300                                 your state/province name.
301                                 your zip/postal code.
302                                 the name of the alternate contact.
303                                 the phone number of the alternate contact.
304                                 the email address of the alternate contact.
305                         seems well documented
306         00_E_EVIL
307                 sbl.nszones.com
308                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
309                 http://www.backscatterer.org/
310                         questionable policy - pay for (quicker) delisting
311                         https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
312                                 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
313                         https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
314                                 in March 17, 2023 does not mention need to pay
315                         https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
316                                 recommend against using it
317                         https://whatismyipaddress.com/backscatterer
318                                 mentions strict delisting process and "express delisting" but nothing further
319                         https://bobcares.com/blog/backscatterer-blacklist/
320                                 goes through the process with screenshots showing express delisting for 109$
321                         https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
322                                 more opinions
323                         https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
324                                 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
325                         https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
326                                 another opinion
327         00_E_INFORMATION
328                 blacklist.sci.kun.nl
329                         https://cncz.science.ru.nl/en/howto/email-spam/
330                         not really its own DNSBL?
331                         no usage information
332                         no usage policy
333                 http://anonmails.de/
334                         seems serious but missing necessary info
335                                 usage policy
336                                 listing policy
337                 http://blacklist.jippg.org/
338                         no usage policy
339                         no listing policy
340                         no return code info
341                 bip.virusfree.cz
342                         used by rspamd
343                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
344                 https://www.nixspam.net/
345                         previously http://www.dnsbl.manitu.net/
346                         query zone: ix.dnsbl.manitu.net
347                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
348                         difficult to find info regarding listing policy
349                         asked for more information to be added
350                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
351                 access.redhawk.org
352                         website works but barely any info, not even how to query it
353                         https://www.redhawk.org/?p=64
354                         https://www.redhawk.org/SpamHawk/index.php
355                 https://senderscore.org/
356                         requires registration?
357                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
358                         https://senderscore.org/assess/blocklist-lookup/
359                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
360                         no information how to query found
361                 mail-abuse.org
362                         https://ers.trendmicro.com/
363                         trendmicro paid service
364                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
365                                 »If you don’t create an account, you can still query the reputation of an IP address«
366                         I don’t find any pricing or usage information
367                 http://dnsbl.tornevall.org/
368                         https://www.tornevall.net/
369                         related to https://www.fraudbl.org/
370                         seems a bit unstructured and not very well documented
371                                 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
372                         seems active
373                 http://rbl.schulte.org/
374                         seems active
375                         listing policy seems to be: they received spam from an IP
376                         usage policy: Anyone can use this RBL list [sic]
377                         return codes: probably boolean, i.e. either listed or not
378                 http://relaytest.kundenserver.de/
379                         by 1und1 (now ionos?), used internally
380                         https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
381                         no usage policy found
382                         no listing policy found
383                         no return code explanation found
384                 http://www.blockedservers.com/
385                         no usage policy
386                         no listing policy
387                         no documentation
388                         "funny":
389                                 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
390                 https://choon.net/dnsbl.php
391                         no usage policy or instructions
392                         no listing policy
393                         only automatic delisting after 30 days
394         00_E_PAID
395         00_E_PRIVATE
396                 88.blacklist.zap
397                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
398                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
399                         https://www.blalert.com/dnsbl/88.blacklist.zap
400                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
401                         https://www.dnsbl.com/search/label/frontbridge
402                 http://drmx.org/
403                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
404                 rbl.tdk.net
405                         tdk.net seems dead on http(s)
406                         private
407                                 https://www.blalert.com/dnsbl/rbl.tdk.net
408                         old link: http://postmaster.tdc.dk/publish.php?id=31787
409                                 tdc.dk redirects to yousee.dk
410                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
411                 rbl.zenon.net
412                         private
413                                 https://www.blalert.com/dnsbl/rbl.zenon.net
414                         http://www.noc.zenon.net/rbl/
415                         russian(?)
416                 https://ahbl.org/
417                         was public until 2015
418                         now private, invite-only
419         http://rfc-clueless.org/
420                 lists domains
421                         that do not adhere to common best practices or requirements
422                 does NOT list spammers!
423                 listing criteria are explained well
424                         http://rfc-clueless.org/pages/listing_policy
425                 return codes are explained
426                         http://rfc-clueless.org/
427                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
428                 many timeouts
429                         first noticed in 2014 and deactivated
430                         retried in 2023 and still the case
431         http://spameatingmonkey.com/
432                 lists IPs
433                         that sent backscatter
434                         that sent to spamtrap
435                         added by policy
436                                 this includes dial-up!
437                                 https://spameatingmonkey.com/faq/policy-based-listing
438                 lists domains/URIs
439                         by age
440                         in spam bodies
441                 usage policy seems clear
442                         https://spameatingmonkey.com/faq/query-limits
443                 listing policy seems clear
444                         https://spameatingmonkey.com/services
445                 return codes documented
446                         https://spameatingmonkey.com/services
447                 http://blogspambl.com/
448                         redirects to spameatingmonkey.com
449         http://uribl.com/
450                 lists domains/URIs
451                         that appear in spam bodies
452                         has whitelist
453                 lists IPs
454                         that URIs in spam bodies resolve to
455                 return codes are documented
456                         https://uribl.com/about.shtml#implementation
457                         bitmasked
458                         127.0.0.1 is used to signal abusive query behaviour
459         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
460                 called "hostkarma"
461                 lists domains/URIs
462                 lists IPs
463                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
464                 listing policy is documented
465                 return codes are documented
466                 seems very trustworthy
467         http://www.sorbs.net/
468                 good reputation
469                 lists domains/URIs
470                 lists IPs
471                 usage policy is clear that it’s free
472                 listing policy is documented
473                 return codes are documented
474                 seems trustworthy
475         http://www.spamhaus.org/
476                 good reputation
477                 very well done
478                 seems very professional
479                 lists domains/URIs
480                 lists IPs
481                 usage policy is clear
482                         https://www.spamhaus.org/organization/dnsblusage/
483                 listing policies are clearly documented
484                 return codes are clearly documented
485         http://www.surbl.org/
486                 good reputation
487                 lists domains/URIs
488                 usage policy is clear
489                         https://surbl.org/usage-policy
490                 listing policy is documented
491                 return codes are documented
492                         bitmasked
493                         127.0.0.1 means blocked
494         http://zapbl.net/
495                 lists domains/URIs
496                 lists IPs
497                 listing policy seems clear
498                         https://zapbl.net/policy
499                 usage policy seems clearly free for everyone
500                         https://zapbl.net/using
501                 return codes are documented
502                 seems well done
503         https://rbl.foobar.hu/
504                 lists domains/URIs
505                 lists IPs
506                 listing policy seems clear
507                 usage policy seems clearly free for everyone
508                 return codes are documented
509                 possibly unmaintained or dead
510                         footer says: ©2013-14
511         http://apews.org/?page=filter
512                 questionable
513                         https://www.dnsbl.com/search/label/apews
514                         https://whatismyipaddress.com/apews
515                 dead?
516                         no news on http://apews-user.blogspot.com/ since 2014
517                 not further looked into because of the above
518         https://www.dnswl.org/
519                 seems to be run with best intentions but has had issues from what I have heard from some users
520                 IRC channel has some activity
521                 usage policy relatively clear
522                         free within certain limits
523                 listing policy
524                         self-service
525                 return codes are documented
526         00_E_FOCUS
527                 https://www.dnsblchile.org/index.en.html
528                         chilenian spam so not interesting for me
529                         seems alive
530         00_LISTS_BLOGSPAMMERS
531                 https://www.madavi.de/madavibl/
532                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
533                 http://bsb.empty.us/
534                         does not exist anymore
535                         empty.us returns »Nothing here, obviously.«
536         00_LISTS_COUNTRIES
537                 korea
538                         http://korea.services.net/
539         00_LISTS_DIALUPS
540         00_LISTS_OPENRESOLVERS
541         00_LISTS_TORNODES
542                 https://www.dan.me.uk/dnsbl
543                 http://rbl.efnetrbl.org/
544                         aka http://tor.efnet.org/
545                         lists IPs
546                         lists open proxies, infected machines, tornodes, etc.
547         https://0spam.org/
548                 clear information on usage policy
549                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
550                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
551                 seems serious
552                 listing policies are a little less clear
553                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
554                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
555                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
556                 return codes not very clear
557         https://abuse.ro/
558                 policy
559                         spamtraps
560                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
561                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
562                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
563         http://dronebl.org/
564                 usage policy is clear: free for whatever
565                 listing policy is not quite so clear
566                         can be mostly inferred from the classes but not entirely clear IMHO
567                 has an IRC channel
568                 return codes
569                         not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
570         http://psbl.org/
571                 query zone: psbl.surriel.com
572                 no usage policy, but seems implied that usage is free
573                 listing policy
574                         no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
575                 return codes
576                         not documented, probably only boolean
577         http://rbldata.interserver.net/
578                 listing policy more or less clear
579                 usage policy not given but since usage is explained it’s probably free for all
580                 return codes seem to be binary, i.e. either listed or not
581                 lists IPs
582                 lists domains/URIs
583         http://rv-soft.info/
584                 usage policy not explicit but seems to be free
585                 listing policy also not explicit but can be inferred from return code explanation
586                 return codes are explained
587         http://spamrats.com/
588                 clear usage policy (ToS)
589                 listing policies documented
590                 return codes of aggregated list documented
591                 lists IPs
592         http://v4bl.org/
593                 usage policy documented
594                 listing policy not really clear
595                 return codes documented
596         http://wpbl.info/
597                 listing procedure is documented
598                 usage policy implied: free to use
599                 return codes documented
600         http://www.aupads.org/
601                 aka www.antispam-ufrj.pads.ufrj.br
602                 aka www.orve.org 
603                 listing policy more or less clear
604                 lists IPs and FQDNs
605                 usage policy seems clear: freely exported by anybody who wants to use them«
606         http://www.gbudb.com/truncate/
607                 listing policy
608                 usage policy seems implied: free use
609                 return codes documented
610                 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
611         http://www.justspam.org/
612                 listing policy documented
613                         warning: relies on listings in other DNSBLs! also for delisting!
614                 usage policy clear
615                 return codes: binary
616         http://www.kempt.net/dnsbl/
617                 listing policy documented
618                 usage policy documented
619                 return codes undocumented
620         http://www.spamcop.net/
621                 listing policy documented
622                         The SCBL is aggressive and often errs on the side of blocking mail
623                 usage policy is: free
624                 good reputation
625                 return codes documented
626         http://www.spamsources.fabel.dk/
627                 usage policy is: free
628                 listing policy seems clear
629                 lists IPs
630         http://www.uceprotect.net/en/index.php
631                 takes money for faster delisting
632                 listing policy is documented
633                 usage policy is documented: free
634                 a lot of drama
635                         https://www.heise.de/hintergrund/Spam-Golem-291396.html
636                                 german
637                                 also see comments
638                         https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
639                         https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
640                         https://uceprotect.wtf/
641                         https://www.aaroncake.net/misc/showthought.asp?thought=57
642                         https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
643                         https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
644                         https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
645                         http://kontech.net/uceprotect-blacklist-scheme-2020/
646         http://www.whitelisted.org/
647                 paid subscription
648                 policy on site
649                 related to uceprotect, see there
650         https://www.team-cymru.org/Services/Bogons/dns.html
651                 good reputation
652                 lists IPs
653                 does not list spammers but bogons
654                 clear listing policy
655                 usage policy not quite clear ATM
656                 return codes documented: binary
657         http://mailspike.net/usage.html
658                 reputation-based
659         http://www.isipp.com/email-accreditation/iadb-query-instruction/
660                 requires signup
661                 not quite a usage policy, but seems ok
662                 strange split of ipv4 and ipv6
663                 seems dead?