dnslists.otl

   1 TODO
   2         check and link (de)listing policy
   3                 NOGO: delisting for money
   4         check and link usage policy
   5         check and link return codes
   6         find newsfeed or mailinglist
   7         give feedback?
   8         implement in exim
   9         implement in SA
  10         implement in rspamd
  11 implement
  12         https://abuse.ro/
  13                 policy
  14                         spamtraps
  15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
  16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
  17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
  18 00_META
  19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  20         http://www.blalert.com/dnsbls
  21         http://www.dnsbl.info/dnsbl-list.php
  22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
  23         http://www.sdsc.edu/~jeff/spam/cbc.html
  24         http://moensted.dk/spam/
  25         https://whatismyipaddress.com/blacklist-check
  26         https://multirbl.valli.org/
  27         https://glockapps.com/blacklist/
  28         https://docs.hetrixtools.com/monitored-blacklists/
  29         https://www.blacklistmaster.com/
  30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
  31         https://github.com/zbetcheckin/DNSBLs
  32         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
  33 00_ELANG
  34         http://dnsbl.aspnet.hu/
  35                 hungarian?
  36         http://spam-rbl.fr/
  37                 french
  38         https://mav.com.br/
  39                 maybe? they have antispam but it’s all portugese? or spanish? no idea
  40 00_DEAD
  41         http://openrbl.org/
  42                 as seems dead
  43                         404s
  44                         wiki is down
  45         http://mailhosts.org/
  46                 dead
  47                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
  48         blitzed.org
  49                 dead since 2006
  50                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
  51                                 referenced ML post is 404
  52         blackholes.five-ten-sg.com
  53                 Offline as of 1/1/2013
  54                         https://whatismyipaddress.com/five-ten-sg
  55         dynip.rothen.com
  56                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
  57                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
  58         fl.chickenboner.biz
  59                 dead since 2011
  60                         https://community.spiceworks.com/topic/329762-blacklist-removal
  61                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  62                 website contains spam/crap
  63         http://cart00ney.surriel.com/
  64                 cart00ney.org is dead
  65         http://dsbl.org/
  66                 points to surriel.com
  67         http://csma.biz/
  68                 domain is for sale
  69                 dead since 2013
  70                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
  71         http://dnsbl.net.au/
  72                 website contains info about living in australia? called "AusBlog"
  73                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
  74         http://moensted.dk/spam/
  75                 dead since 2010
  76                 https://moensted.dk/spam/
  77         http://rbl.mw-internet.net/
  78                 domain was parked
  79                 2023: it is an asian(?) gambling(?) website
  80         http://www.blackholes.us/
  81                 dead since 2009
  82                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
  83         http://www.deadbeef.com/
  84                 dead, no info
  85         spamsources.dnsbl.info
  86                 dead since 2011 or so
  87                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
  88         http://www.gweep.ca/
  89                 domain dead, no other info
  90         http://www.njabl.org/
  91                 dead since 2013
  92                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
  93         http://wytnij.to/
  94                 website parked, no other info
  95         https://www.transip.nl/
  96                 dead since 2013
  97                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
  98                         https://www.blalert.com/dnsbl/residential.block.transip.nl
  99         pss.spambusters.org.ar
 100                 NXDOMAIN
 101         rbl.snark.net
 102                 NXDOMAIN
 103                 https://snark.net/ gives access denied
 104         whois.rfc-ignorant.org
 105                 NXDOMAIN
 106                 rfc-ignorant.org registered but no A/AAAA record
 107                 dead since 2012
 108                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
 109                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
 110         will-spam-for-food.eu.org
 111                 unmaintained
 112                 dead
 113                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
 114         http://proxybl.org/
 115                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
 116                 https://linuxreviews.org/Mail_Spam_Blacklists
 117                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
 118         dev.null.dk
 119                 timeout, also on the parent null.dk
 120                 effectively dead
 121         dnsbl.mags.net
 122                 seems dead, no info to be found
 123                 domain does not respond
 124         http://msrbl.blogspot.ch/
 125                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
 126                 effectively dead
 127         http://www.olsentech.net/
 128                 strange content on web
 129                 effectively dead
 130         rbl.orbitrbl.com
 131                 http://www.orbitrbl.com/
 132                 timeout
 133         rbl.polarcomm.net
 134                 NXDOMAIN
 135                 registered but no A/AAAA record
 136         cidr.bl.mcafee.com
 137                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
 138                         404
 139                 no info to be found
 140                 dead?
 141         http://anti-spam.org.cn/?locale=en_US
 142                 unreachable DNS
 143         rbl.talkactive.net
 144                 seems dead
 145                 talkactive.net redirects twice to some hosting company
 146                 last listings in 2017
 147                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
 148                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
 149         dnsbl.ipocalypse.net
 150                 no policies published
 151                 dead
 152                         was a private list of an irc network
 153                         network was renamed idlechat.net in 2014
 154                         became a discord chat in 2022(?)
 155         http://blakjak.net/RBL
 156                 external access disabled
 157                 2023: seems dead, website is a weird error
 158                 https://www.blalert.com/dnsbl/rbl.blakjak.net
 159                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
 160         http://cyberlogic.net/
 161                 french (canada)
 162                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
 163                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
 164                 https://www.dnsbl.com/2018/05/
 165                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
 166         http://www.rbl.jp/allrbl-e.html
 167                 website asks for login or just errors
 168         http://www.spamhauswhitelist.com/en/
 169                 looks like a parked domain with ads
 170         http://stopspam.org/rblcheck/index.php
 171                 aka dul.pacifier.net
 172                 http://www.stopspam.org/rbl-info/
 173                         stopped in 2013
 174         http://countries.nerd.dk/
 175                 unable to connect, also for nerd.dk
 176         http://dul.ru/dul.en.html
 177                 DEAD for sale
 178         http://dns.measurement-factory.com/surveys/openresolvers.html
 179                 dead
 180                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
 181         http://www.sectoor.de/tor.php
 182                 timeouts
 183         http://anticaptcha.net/
 184                 for sale
 185         http://blacklist.lashback.com/
 186                 query zone: ubl.unsubscore.com
 187                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
 188                 rsync URLs seem dead, so does the download url
 189         http://blacklist.woody.ch/
 190                 no entries in the displayed "top 100"
 191                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
 192         http://cbl.abuseat.org/
 193                 https://www.abuseat.org/
 194                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
 195         http://dnsbl.burnt-tech.com/
 196                 domain is for sale
 197 00_NEEDS_RECHECK
 198         https://antispam.imp.ch/
 199                 no usage policy
 200                 no return code info
 201                 no good listing policy
 202                 information received from inquiry to provider
 203                         website will be updated
 204                         return codes
 205                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
 206                                         127.0.1.8 = default
 207                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
 208                                         127.0.0.11 => REPO (Email reported as Spam by customer)
 209                                 spamrbl.imp.ch (3 days holding time)
 210                                         IPs are listed when trying to send mail to the spamtrap mailserver
 211                                         MD5 hash: attachment sent to the swinog blacklist
 212                                 wormrbl.imp.ch
 213                                         DEAD
 214         http://blacklist.woody.ch/rblcheck.php3
 215                 dead?
 216                 waiting for feedback
 217         http://dnsbl.iip.lu/
 218                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
 219                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
 220                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
 221                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
 222         http://dnsbl.inps.de/
 223                 timeout
 224                 https://www.dnsbl.com/search/label/dnsbl.inps.de
 225                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
 226                 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
 227                         [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
 228                 https://glockapps.com/blacklist/dnsbl-inps-de/
 229                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
 230                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
 231                         This blacklist is offline as of May 1, 2020.
 232                 https://web.archive.org/web/20220428013500/http://www.inps.de/
 233 00_NEEDS_RESEARCH
 234         bl.tiopan.com
 235         blocked.hilli.dk
 236         dialups.visi.com
 237         dnsbl.antispam.or.id
 238         dob.sibl.support-intelligence.net
 239         intruders.docs.uu.se
 240         map.spam-rbl.com
 241         rbl.triumf.ca
 242         all.s5h.net
 243                 http://www.usenix.org.uk/content/rbl.html
 244         torexit.dan.me.uk
 245         http://pedantic.org/
 246                 as of 20140701
 247         rbl.fasthosts.co.uk
 248                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
 249                 seems dead?
 250                 https://antispam.fasthosts.co.uk/
 251 00_ALIVE
 252         00_RECONSIDER
 253                 http://barracudacentral.org/rbl
 254                         requires account with extensive information (more than spamhaus e.g.):
 255                                 your name.
 256                                 your company name.
 257                                 your phone number.
 258                                 your address.
 259                                 your city name.
 260                                 your state/province name.
 261                                 your zip/postal code.
 262                                 the name of the alternate contact.
 263                                 the phone number of the alternate contact.
 264                                 the email address of the alternate contact.
 265                         seems well documented
 266         00_E_EVIL
 267                 sbl.nszones.com
 268                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
 269         00_E_INFORMATION
 270                 blacklist.sci.kun.nl
 271                         https://cncz.science.ru.nl/en/howto/email-spam/
 272                         not really its own DNSBL?
 273                         no usage information
 274                         no usage policy
 275                 http://anonmails.de/
 276                         seems serious but missing necessary info
 277                                 usage policy
 278                                 listing policy
 279                 http://blacklist.jippg.org/
 280                         no usage policy
 281                         no listing policy
 282                         no return code info
 283                 bip.virusfree.cz
 284                         used by rspamd
 285                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
 286                 https://www.nixspam.net/
 287                         previously http://www.dnsbl.manitu.net/
 288                         query zone: ix.dnsbl.manitu.net
 289                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
 290                         difficult to find info regarding listing policy
 291                         asked for more information to be added
 292                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
 293                 access.redhawk.org
 294                         website works but barely any info, not even how to query it
 295                         https://www.redhawk.org/?p=64
 296                         https://www.redhawk.org/SpamHawk/index.php
 297                 https://senderscore.org/
 298                         requires registration?
 299                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
 300                         https://senderscore.org/assess/blocklist-lookup/
 301                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
 302                         no information how to query found
 303                 mail-abuse.org
 304                         https://ers.trendmicro.com/
 305                         trendmicro paid service
 306                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 307                                 »If you don’t create an account, you can still query the reputation of an IP address«
 308                         I don’t find any pricing or usage information
 309         00_E_PAID
 310         00_E_PRIVATE
 311                 88.blacklist.zap
 312                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 313                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 314                         https://www.blalert.com/dnsbl/88.blacklist.zap
 315                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
 316                         https://www.dnsbl.com/search/label/frontbridge
 317                 http://drmx.org/
 318                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
 319                 rbl.tdk.net
 320                         tdk.net seems dead on http(s)
 321                         private
 322                                 https://www.blalert.com/dnsbl/rbl.tdk.net
 323                         old link: http://postmaster.tdc.dk/publish.php?id=31787
 324                                 tdc.dk redirects to yousee.dk
 325                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
 326                 rbl.zenon.net
 327                         private
 328                                 https://www.blalert.com/dnsbl/rbl.zenon.net
 329                         http://www.noc.zenon.net/rbl/
 330                         russian(?)
 331                 https://ahbl.org/
 332                         was public until 2015
 333                         now private, invite-only
 334         http://rfc-clueless.org/
 335                 lists domains
 336                         that do not adhere to common best practices or requirements
 337                 does NOT list spammers!
 338                 listing criteria are explained well
 339                         http://rfc-clueless.org/pages/listing_policy
 340                 return codes are explained
 341                         http://rfc-clueless.org/
 342                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
 343                 many timeouts
 344                         first noticed in 2014 and deactivated
 345                         retried in 2023 and still the case
 346         http://spameatingmonkey.com/
 347                 lists IPs
 348                         that sent backscatter
 349                         that sent to spamtrap
 350                         added by policy
 351                                 this includes dial-up!
 352                                 https://spameatingmonkey.com/faq/policy-based-listing
 353                 lists domains/URIs
 354                         by age
 355                         in spam bodies
 356                 usage policy seems clear
 357                         https://spameatingmonkey.com/faq/query-limits
 358                 listing policy seems clear
 359                         https://spameatingmonkey.com/services
 360                 return codes documented
 361                         https://spameatingmonkey.com/services
 362                 http://blogspambl.com/
 363                         redirects to spameatingmonkey.com
 364         http://uribl.com/
 365                 lists domains/URIs
 366                         that appear in spam bodies
 367                         has whitelist
 368                 lists IPs
 369                         that URIs in spam bodies resolve to
 370                 return codes are documented
 371                         https://uribl.com/about.shtml#implementation
 372                         bitmasked
 373                         127.0.0.1 is used to signal abusive query behaviour
 374         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
 375                 called "hostkarma"
 376                 lists domains/URIs
 377                 lists IPs
 378                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
 379                 listing policy is documented
 380                 return codes are documented
 381                 seems very trustworthy
 382         http://www.sorbs.net/
 383                 good reputation
 384                 lists domains/URIs
 385                 lists IPs
 386                 usage policy is clear that it’s free
 387                 listing policy is documented
 388                 return codes are documented
 389                 seems trustworthy
 390         http://www.spamhaus.org/
 391                 good reputation
 392                 very well done
 393                 seems very professional
 394                 lists domains/URIs
 395                 lists IPs
 396                 usage policy is clear
 397                         https://www.spamhaus.org/organization/dnsblusage/
 398                 listing policies are clearly documented
 399                 return codes are clearly documented
 400         http://www.surbl.org/
 401                 good reputation
 402                 lists domains/URIs
 403                 usage policy is clear
 404                         https://surbl.org/usage-policy
 405                 listing policy is documented
 406                 return codes are documented
 407                         bitmasked
 408                         127.0.0.1 means blocked
 409         http://zapbl.net/
 410                 lists domains/URIs
 411                 lists IPs
 412                 listing policy seems clear
 413                         https://zapbl.net/policy
 414                 usage policy seems clearly free for everyone
 415                         https://zapbl.net/using
 416                 return codes are documented
 417                 seems well done
 418         https://rbl.foobar.hu/
 419                 lists domains/URIs
 420                 lists IPs
 421                 listing policy seems clear
 422                 usage policy seems clearly free for everyone
 423                 return codes are documented
 424                 possibly unmaintained or dead
 425                         footer says: ©2013-14
 426         http://apews.org/?page=filter
 427                 questionable
 428                         https://www.dnsbl.com/search/label/apews
 429                         https://whatismyipaddress.com/apews
 430                 dead?
 431                         no news on http://apews-user.blogspot.com/ since 2014
 432                 not further looked into because of the above
 433         https://www.dnswl.org/
 434                 seems to be run with best intentions but has had issues from what I have heard from some users
 435                 IRC channel has some activity
 436                 usage policy relatively clear
 437                         free within certain limits
 438                 listing policy
 439                         self-service
 440                 return codes are documented
 441         00_E_FOCUS
 442                 https://www.dnsblchile.org/index.en.html
 443                         chilenian spam so not interesting for me
 444                         seems alive
 445         00_LISTS_BLOGSPAMMERS
 446                 https://www.madavi.de/madavibl/
 447                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
 448                 http://bsb.empty.us/
 449                         does not exist anymore
 450                         empty.us returns »Nothing here, obviously.«
 451         00_LISTS_COUNTRIES
 452                 korea
 453                         http://korea.services.net/
 454         00_LISTS_DIALUPS
 455         00_LISTS_OPENRESOLVERS
 456         00_LISTS_TORNODES
 457                 https://www.dan.me.uk/dnsbl
 458         https://0spam.org/
 459                 clear information on usage policy
 460                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
 461                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
 462                 seems serious
 463                 listing policies are a little less clear
 464                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
 465                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 466                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 467                 return codes not very clear
 468         http://dnsbl.tornevall.org/
 469                 https://www.tornevall.net/
 470                 related to https://www.fraudbl.org/
 471                 seems a bit unstructured and not very well documented
 472                 seems active
 473         http://dronebl.org/
 474         http://mailspike.net/usage.html
 475         http://psbl.org/
 476                 query zone: psbl.surriel.com
 477         http://rbl.dns-servicios.com/rbl.php
 478         http://rbl.schulte.org/
 479         http://rbldata.interserver.net/
 480                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
 481         http://relaytest.kundenserver.de/
 482         http://rv-soft.info/
 483         http://spamcannibal.org/dnsbl_check.shtml
 484         http://spamrats.com/
 485         http://spamstinks.com/
 486         http://st.technovision.dk/
 487         http://tor.efnet.org/
 488                 http://rbl.efnetrbl.org/ MIRROR
 489         http://v4bl.org/
 490         http://virbl.bit.nl/
 491         http://wpbl.info/
 492         http://www.aupads.org/
 493         http://www.backscatterer.org/
 494                 fragwuerdige policy - bezahlen fuer schnelleres delisting
 495         http://www.blockedservers.com/
 496         http://www.blocklist.de/en/index.html
 497         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
 498         http://www.gbudb.com/truncate/
 499         http://www.justspam.org/
 500         http://www.kempt.net/dnsbl/
 501         http://www.leadmon.net/spamguard/
 502         http://www.rbl.jp/allrbl-e.html
 503         http://www.spamcop.net/
 504                 good policy
 505                 good reputation
 506         http://www.spamsources.fabel.dk/
 507                 sensible policy
 508         http://www.srntools.com/blacklist/
 509         http://www.uceprotect.net/en/index.php
 510         http://www.usenix.org.uk/content/rbl.html
 511         http://zapbl.net/
 512         https://bl.konstant.no/
 513         https://choon.net/rbl.php
 514         https://puck.nether.net/or/
 515                 might be good
 516         https://rbl.foobar.hu/
 517         https://www.abuse.ch/
 518                 https://www.abuse.ch/?tag=httpbl
 519         https://www.kisarbl.or.kr/
 520         https://www.megarbl.net/
 521         https://www.team-cymru.org/Services/Bogons/dns.html
 522         http://mailspike.net/usage.html
 523                 reputation-based
 524         http://www.spamhauswhitelist.com/en/
 525                 policies for listing and usage on the website
 526         http://www.whitelisted.org/
 527                 paid subscription
 528                 policy on site
 529         https://puck.nether.net/or/
 530                 policies on website
 531         https://rbl.foobar.hu/
 532                 usage and listing policies on website
 533         http://www.isipp.com/email-accreditation/iadb-query-instruction/
 534                 requires signup
 535         https://choon.net/rbl.php
 536                 not quite a usage policy, but seems ok
 537                 strange split of ipv4 and ipv6
 538                 seems dead?
 539         https://www.dnswl.org/