2 check and link (de)listing policy
3 NOGO: delisting for money
4 check and link usage policy
5 check and link return codes
6 find newsfeed or mailinglist
12 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13 http://www.blalert.com/dnsbls
14 http://www.dnsbl.info/dnsbl-list.php
15 http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16 http://www.sdsc.edu/~jeff/spam/cbc.html
17 http://moensted.dk/spam/
18 https://whatismyipaddress.com/blacklist-check
19 https://multirbl.valli.org/
20 https://glockapps.com/blacklist/
21 https://docs.hetrixtools.com/monitored-blacklists/
22 https://www.blacklistmaster.com/
23 https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24 https://github.com/zbetcheckin/DNSBLs
25 https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26 https://www.impressionwise.com/kb/threats/rbl-advisories.html
28 http://dnsbl.aspnet.hu/
33 maybe? they have antispam but it’s all portugese? or spanish? no idea
41 https://www.blalert.com/dnsbl/shortlist.mailhosts.org
44 https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45 referenced ML post is 404
46 blackholes.five-ten-sg.com
47 Offline as of 1/1/2013
48 https://whatismyipaddress.com/five-ten-sg
50 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
54 https://community.spiceworks.com/topic/329762-blacklist-removal
55 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56 website contains spam/crap
57 http://cart00ney.surriel.com/
64 https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
66 website contains info about living in australia? called "AusBlog"
67 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68 http://moensted.dk/spam/
70 https://moensted.dk/spam/
71 http://rbl.mw-internet.net/
73 2023: it is an asian(?) gambling(?) website
74 http://www.blackholes.us/
76 https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77 http://www.deadbeef.com/
79 spamsources.dnsbl.info
81 http://www.dnsbl.info/spamsources-dnsbl-defunct.php
83 domain dead, no other info
86 https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
88 website parked, no other info
89 https://www.transip.nl/
91 https://www.blalert.com/dnsbl/proxy.block.transip.nl
92 https://www.blalert.com/dnsbl/residential.block.transip.nl
93 pss.spambusters.org.ar
97 https://snark.net/ gives access denied
98 whois.rfc-ignorant.org
100 rfc-ignorant.org registered but no A/AAAA record
102 http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103 https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104 will-spam-for-food.eu.org
107 https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
109 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110 https://linuxreviews.org/Mail_Spam_Blacklists
111 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
113 timeout, also on the parent null.dk
116 seems dead, no info to be found
117 domain does not respond
118 http://msrbl.blogspot.ch/
119 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
121 http://www.olsentech.net/
122 strange content on web
125 http://www.orbitrbl.com/
129 registered but no A/AAAA record
131 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
135 http://anti-spam.org.cn/?locale=en_US
139 talkactive.net redirects twice to some hosting company
140 last listings in 2017
141 https://multirbl.valli.org/detail/rbl.talkactive.net.html
142 https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
144 no policies published
146 was a private list of an irc network
147 network was renamed idlechat.net in 2014
148 became a discord chat in 2022(?)
149 http://blakjak.net/RBL
150 external access disabled
151 2023: seems dead, website is a weird error
152 https://www.blalert.com/dnsbl/rbl.blakjak.net
153 This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154 http://cyberlogic.net/
156 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157 On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158 https://www.dnsbl.com/2018/05/
159 As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160 http://www.rbl.jp/allrbl-e.html
161 website asks for login or just errors
162 http://www.spamhauswhitelist.com/en/
163 looks like a parked domain with ads
164 http://stopspam.org/rblcheck/index.php
166 http://www.stopspam.org/rbl-info/
168 http://countries.nerd.dk/
169 unable to connect, also for nerd.dk
170 http://dul.ru/dul.en.html
172 http://dns.measurement-factory.com/surveys/openresolvers.html
174 »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175 http://www.sectoor.de/tor.php
177 http://anticaptcha.net/
179 http://blacklist.lashback.com/
180 query zone: ubl.unsubscore.com
181 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182 rsync URLs seem dead, so does the download url
183 http://blacklist.woody.ch/
184 no entries in the displayed "top 100"
185 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186 http://cbl.abuseat.org/
187 https://www.abuseat.org/
188 changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189 http://dnsbl.burnt-tech.com/
191 http://rbl.dns-servicios.com/rbl.php
192 website can not be found
193 http://spamcannibal.org/
194 dead, as of at least 2018
195 http://st.technovision.dk/
196 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197 [December 8, 2021] This RBL has stopped responding to DNS queries.
198 http://spamstinks.com/
199 cert is for generic hostname
200 website shows some login form
202 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203 January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204 http://www.blocklist.de/en/index.html
205 lots of timeouts as of 2023
206 forum link is dead, among others
207 seems unmaintained but alive
208 latest news is from 2016
209 latest blog entry from 2022
210 Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211 http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
213 http://www.leadmon.net/spamguard/
215 http://www.srntools.com/blacklist/
216 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
217 https://bl.konstant.no/
218 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
219 [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
220 https://www.megarbl.net/
222 https://www.blalert.com/dnsbl/rbl.megarbl.net
223 »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
224 https://www.kisarbl.or.kr/
225 can’t find information about it
226 website redirects to https://spam.kisa.or.kr/ which gives a 404
228 https://antispam.imp.ch/
231 no good listing policy
232 information received from inquiry to provider
233 website will be updated
235 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
237 127.0.0.10 => TRAP (Email sent to a spamtrap)
238 127.0.0.11 => REPO (Email reported as Spam by customer)
239 spamrbl.imp.ch (3 days holding time)
240 IPs are listed when trying to send mail to the spamtrap mailserver
241 MD5 hash: attachment sent to the swinog blacklist
244 http://blacklist.woody.ch/rblcheck.php3
248 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
249 in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
250 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
251 This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
252 http://dnsbl.inps.de/
254 https://www.dnsbl.com/search/label/dnsbl.inps.de
255 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
256 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
257 [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
258 https://glockapps.com/blacklist/dnsbl-inps-de/
259 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
260 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
261 This blacklist is offline as of May 1, 2020.
262 https://web.archive.org/web/20220428013500/http://www.inps.de/
268 dob.sibl.support-intelligence.net
273 http://www.usenix.org.uk/content/rbl.html
278 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
280 https://antispam.fasthosts.co.uk/
283 http://barracudacentral.org/rbl
284 requires account with extensive information (more than spamhaus e.g.):
290 your state/province name.
291 your zip/postal code.
292 the name of the alternate contact.
293 the phone number of the alternate contact.
294 the email address of the alternate contact.
295 seems well documented
298 http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
299 http://www.backscatterer.org/
300 questionable policy - pay for (quicker) delisting
301 https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
302 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
303 https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
304 in March 17, 2023 does not mention need to pay
305 https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
306 recommend against using it
307 https://whatismyipaddress.com/backscatterer
308 mentions strict delisting process and "express delisting" but nothing further
309 https://bobcares.com/blog/backscatterer-blacklist/
310 goes through the process with screenshots showing express delisting for 109$
311 https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
313 https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
314 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
315 https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
319 https://cncz.science.ru.nl/en/howto/email-spam/
320 not really its own DNSBL?
324 seems serious but missing necessary info
327 http://blacklist.jippg.org/
333 https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
334 https://www.nixspam.net/
335 previously http://www.dnsbl.manitu.net/
336 query zone: ix.dnsbl.manitu.net
337 provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
338 difficult to find info regarding listing policy
339 asked for more information to be added
340 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
342 website works but barely any info, not even how to query it
343 https://www.redhawk.org/?p=64
344 https://www.redhawk.org/SpamHawk/index.php
345 https://senderscore.org/
346 requires registration?
347 Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
348 https://senderscore.org/assess/blocklist-lookup/
349 FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
350 no information how to query found
352 https://ers.trendmicro.com/
353 trendmicro paid service
354 https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
355 »If you don’t create an account, you can still query the reputation of an IP address«
356 I don’t find any pricing or usage information
357 http://dnsbl.tornevall.org/
358 https://www.tornevall.net/
359 related to https://www.fraudbl.org/
360 seems a bit unstructured and not very well documented
361 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
363 http://rbl.schulte.org/
365 listing policy seems to be: they received spam from an IP
366 usage policy: Anyone can use this RBL list [sic]
367 return codes: probably boolean, i.e. either listed or not
368 http://relaytest.kundenserver.de/
369 by 1und1 (now ionos?), used internally
370 https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
371 no usage policy found
372 no listing policy found
373 no return code explanation found
374 http://www.blockedservers.com/
379 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
380 https://choon.net/dnsbl.php
381 no usage policy or instructions
383 only automatic delisting after 30 days
387 http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
388 https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
389 https://www.blalert.com/dnsbl/88.blacklist.zap
390 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
391 https://www.dnsbl.com/search/label/frontbridge
393 »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
395 tdk.net seems dead on http(s)
397 https://www.blalert.com/dnsbl/rbl.tdk.net
398 old link: http://postmaster.tdc.dk/publish.php?id=31787
399 tdc.dk redirects to yousee.dk
400 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
403 https://www.blalert.com/dnsbl/rbl.zenon.net
404 http://www.noc.zenon.net/rbl/
407 was public until 2015
408 now private, invite-only
409 http://rfc-clueless.org/
411 that do not adhere to common best practices or requirements
412 does NOT list spammers!
413 listing criteria are explained well
414 http://rfc-clueless.org/pages/listing_policy
415 return codes are explained
416 http://rfc-clueless.org/
417 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
419 first noticed in 2014 and deactivated
420 retried in 2023 and still the case
421 http://spameatingmonkey.com/
423 that sent backscatter
424 that sent to spamtrap
426 this includes dial-up!
427 https://spameatingmonkey.com/faq/policy-based-listing
431 usage policy seems clear
432 https://spameatingmonkey.com/faq/query-limits
433 listing policy seems clear
434 https://spameatingmonkey.com/services
435 return codes documented
436 https://spameatingmonkey.com/services
437 http://blogspambl.com/
438 redirects to spameatingmonkey.com
441 that appear in spam bodies
444 that URIs in spam bodies resolve to
445 return codes are documented
446 https://uribl.com/about.shtml#implementation
448 127.0.0.1 is used to signal abusive query behaviour
449 http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
453 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
454 listing policy is documented
455 return codes are documented
456 seems very trustworthy
457 http://www.sorbs.net/
461 usage policy is clear that it’s free
462 listing policy is documented
463 return codes are documented
465 http://www.spamhaus.org/
468 seems very professional
471 usage policy is clear
472 https://www.spamhaus.org/organization/dnsblusage/
473 listing policies are clearly documented
474 return codes are clearly documented
475 http://www.surbl.org/
478 usage policy is clear
479 https://surbl.org/usage-policy
480 listing policy is documented
481 return codes are documented
483 127.0.0.1 means blocked
487 listing policy seems clear
488 https://zapbl.net/policy
489 usage policy seems clearly free for everyone
490 https://zapbl.net/using
491 return codes are documented
493 https://rbl.foobar.hu/
496 listing policy seems clear
497 usage policy seems clearly free for everyone
498 return codes are documented
499 possibly unmaintained or dead
500 footer says: ©2013-14
501 http://apews.org/?page=filter
503 https://www.dnsbl.com/search/label/apews
504 https://whatismyipaddress.com/apews
506 no news on http://apews-user.blogspot.com/ since 2014
507 not further looked into because of the above
508 https://www.dnswl.org/
509 seems to be run with best intentions but has had issues from what I have heard from some users
510 IRC channel has some activity
511 usage policy relatively clear
512 free within certain limits
515 return codes are documented
517 https://www.dnsblchile.org/index.en.html
518 chilenian spam so not interesting for me
520 00_LISTS_BLOGSPAMMERS
521 https://www.madavi.de/madavibl/
522 »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
524 does not exist anymore
525 empty.us returns »Nothing here, obviously.«
528 http://korea.services.net/
530 00_LISTS_OPENRESOLVERS
532 https://www.dan.me.uk/dnsbl
533 http://rbl.efnetrbl.org/
534 aka http://tor.efnet.org/
536 lists open proxies, infected machines, tornodes, etc.
538 clear information on usage policy
539 Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
540 DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
542 listing policies are a little less clear
543 bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
544 nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
545 url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
546 return codes not very clear
550 The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
551 Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
552 Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
554 usage policy is clear: free for whatever
555 listing policy is not quite so clear
556 can be mostly inferred from the classes but not entirely clear IMHO
559 not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
561 query zone: psbl.surriel.com
562 no usage policy, but seems implied that usage is free
564 no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
566 not documented, probably only boolean
567 http://rbldata.interserver.net/
568 listing policy more or less clear
569 usage policy not given but since usage is explained it’s probably free for all
570 return codes seem to be binary, i.e. either listed or not
574 usage policy not explicit but seems to be free
575 listing policy also not explicit but can be inferred from return code explanation
576 return codes are explained
578 clear usage policy (ToS)
579 listing policies documented
580 return codes of aggregated list documented
583 usage policy documented
584 listing policy not really clear
585 return codes documented
587 listing procedure is documented
588 usage policy implied: free to use
589 return codes documented
590 http://www.aupads.org/
591 aka www.antispam-ufrj.pads.ufrj.br
593 listing policy more or less clear
595 usage policy seems clear: freely exported by anybody who wants to use them«
596 http://www.gbudb.com/truncate/
598 usage policy seems implied: free use
599 return codes documented
600 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
601 http://www.justspam.org/
602 listing policy documented
603 warning: relies on listings in other DNSBLs! also for delisting!
606 http://www.kempt.net/dnsbl/
607 listing policy documented
608 usage policy documented
609 return codes undocumented
610 http://www.spamcop.net/
611 listing policy documented
612 The SCBL is aggressive and often errs on the side of blocking mail
613 usage policy is: free
615 return codes documented
616 http://www.spamsources.fabel.dk/
617 usage policy is: free
618 listing policy seems clear
620 http://www.uceprotect.net/en/index.php
621 takes money for faster delisting
622 listing policy is documented
623 usage policy is documented: free
625 https://www.heise.de/hintergrund/Spam-Golem-291396.html
628 https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
629 https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
630 https://uceprotect.wtf/
631 https://www.aaroncake.net/misc/showthought.asp?thought=57
632 https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
633 https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
634 https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
635 http://kontech.net/uceprotect-blacklist-scheme-2020/
636 http://www.whitelisted.org/
639 related to uceprotect, see there
640 https://www.abuse.ch/
641 https://www.abuse.ch/?tag=httpbl
642 https://www.team-cymru.org/Services/Bogons/dns.html
645 does not list spammers but bogons
647 usage policy not quite clear ATM
648 return codes documented: binary
649 http://mailspike.net/usage.html
651 https://puck.nether.net/or/
653 http://www.isipp.com/email-accreditation/iadb-query-instruction/
655 not quite a usage policy, but seems ok
656 strange split of ipv4 and ipv6