]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
update abuse.ch
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 00_META
12         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13         http://www.blalert.com/dnsbls
14         http://www.dnsbl.info/dnsbl-list.php
15         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16         http://www.sdsc.edu/~jeff/spam/cbc.html
17         http://moensted.dk/spam/
18         https://whatismyipaddress.com/blacklist-check
19         https://multirbl.valli.org/
20         https://glockapps.com/blacklist/
21         https://docs.hetrixtools.com/monitored-blacklists/
22         https://www.blacklistmaster.com/
23         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24         https://github.com/zbetcheckin/DNSBLs
25         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26         https://www.impressionwise.com/kb/threats/rbl-advisories.html
27 00_ELANG
28         http://dnsbl.aspnet.hu/
29                 hungarian?
30         http://spam-rbl.fr/
31                 french
32         https://mav.com.br/
33                 maybe? they have antispam but it’s all portugese? or spanish? no idea
34 00_DEAD
35         http://openrbl.org/
36                 as seems dead
37                         404s
38                         wiki is down
39         http://mailhosts.org/
40                 dead
41                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
42         blitzed.org
43                 dead since 2006
44                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45                                 referenced ML post is 404
46         blackholes.five-ten-sg.com
47                 Offline as of 1/1/2013
48                         https://whatismyipaddress.com/five-ten-sg
49         dynip.rothen.com
50                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
52         fl.chickenboner.biz
53                 dead since 2011
54                         https://community.spiceworks.com/topic/329762-blacklist-removal
55                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56                 website contains spam/crap
57         http://cart00ney.surriel.com/
58                 cart00ney.org is dead
59         http://dsbl.org/
60                 points to surriel.com
61         http://csma.biz/
62                 domain is for sale
63                 dead since 2013
64                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
65         http://dnsbl.net.au/
66                 website contains info about living in australia? called "AusBlog"
67                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68         http://moensted.dk/spam/
69                 dead since 2010
70                 https://moensted.dk/spam/
71         http://rbl.mw-internet.net/
72                 domain was parked
73                 2023: it is an asian(?) gambling(?) website
74         http://www.blackholes.us/
75                 dead since 2009
76                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77         http://www.deadbeef.com/
78                 dead, no info
79         spamsources.dnsbl.info
80                 dead since 2011 or so
81                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
82         http://www.gweep.ca/
83                 domain dead, no other info
84         http://www.njabl.org/
85                 dead since 2013
86                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
87         http://wytnij.to/
88                 website parked, no other info
89         https://www.transip.nl/
90                 dead since 2013
91                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
92                         https://www.blalert.com/dnsbl/residential.block.transip.nl
93         pss.spambusters.org.ar
94                 NXDOMAIN
95         rbl.snark.net
96                 NXDOMAIN
97                 https://snark.net/ gives access denied
98         whois.rfc-ignorant.org
99                 NXDOMAIN
100                 rfc-ignorant.org registered but no A/AAAA record
101                 dead since 2012
102                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104         will-spam-for-food.eu.org
105                 unmaintained
106                 dead
107                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
108         http://proxybl.org/
109                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110                 https://linuxreviews.org/Mail_Spam_Blacklists
111                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
112         dev.null.dk
113                 timeout, also on the parent null.dk
114                 effectively dead
115         dnsbl.mags.net
116                 seems dead, no info to be found
117                 domain does not respond
118         http://msrbl.blogspot.ch/
119                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
120                 effectively dead
121         http://www.olsentech.net/
122                 strange content on web
123                 effectively dead
124         rbl.orbitrbl.com
125                 http://www.orbitrbl.com/
126                 timeout
127         rbl.polarcomm.net
128                 NXDOMAIN
129                 registered but no A/AAAA record
130         cidr.bl.mcafee.com
131                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
132                         404
133                 no info to be found
134                 dead?
135         http://anti-spam.org.cn/?locale=en_US
136                 unreachable DNS
137         rbl.talkactive.net
138                 seems dead
139                 talkactive.net redirects twice to some hosting company
140                 last listings in 2017
141                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
142                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
143         dnsbl.ipocalypse.net
144                 no policies published
145                 dead
146                         was a private list of an irc network
147                         network was renamed idlechat.net in 2014
148                         became a discord chat in 2022(?)
149         http://blakjak.net/RBL
150                 external access disabled
151                 2023: seems dead, website is a weird error
152                 https://www.blalert.com/dnsbl/rbl.blakjak.net
153                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154         http://cyberlogic.net/
155                 french (canada)
156                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158                 https://www.dnsbl.com/2018/05/
159                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160         http://www.rbl.jp/allrbl-e.html
161                 website asks for login or just errors
162         http://www.spamhauswhitelist.com/en/
163                 looks like a parked domain with ads
164         http://stopspam.org/rblcheck/index.php
165                 aka dul.pacifier.net
166                 http://www.stopspam.org/rbl-info/
167                         stopped in 2013
168         http://countries.nerd.dk/
169                 unable to connect, also for nerd.dk
170         http://dul.ru/dul.en.html
171                 DEAD for sale
172         http://dns.measurement-factory.com/surveys/openresolvers.html
173                 dead
174                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175         http://www.sectoor.de/tor.php
176                 timeouts
177         http://anticaptcha.net/
178                 for sale
179         http://blacklist.lashback.com/
180                 query zone: ubl.unsubscore.com
181                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182                 rsync URLs seem dead, so does the download url
183         http://blacklist.woody.ch/
184                 no entries in the displayed "top 100"
185                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186         http://cbl.abuseat.org/
187                 https://www.abuseat.org/
188                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189         http://dnsbl.burnt-tech.com/
190                 domain is for sale
191         http://rbl.dns-servicios.com/rbl.php
192                 website can not be found
193         http://spamcannibal.org/
194                 dead, as of at least 2018
195         http://st.technovision.dk/
196                 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197                         [December 8, 2021] This RBL has stopped responding to DNS queries.
198         http://spamstinks.com/
199                 cert is for generic hostname
200                 website shows some login form
201         http://virbl.bit.nl/
202                 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203                         January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204         http://www.blocklist.de/en/index.html
205                 lots of timeouts as of 2023
206                 forum link is dead, among others
207                 seems unmaintained but alive
208                 latest news is from 2016
209                 latest blog entry from 2022
210                         Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
212                 placeholder/parked?
213         http://www.leadmon.net/spamguard/
214                 website times out
215         http://www.srntools.com/blacklist/
216                 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
217         https://bl.konstant.no/
218                 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
219                         [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
220         https://www.megarbl.net/
221                 connection times out
222                 https://www.blalert.com/dnsbl/rbl.megarbl.net
223                         »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
224         https://www.kisarbl.or.kr/
225                 can’t find information about it
226                 website redirects to https://spam.kisa.or.kr/ which gives a 404
227         https://www.abuse.ch/
228                 old, defunct link: https://www.abuse.ch/?tag=httpbl
229                 does not seem to have a DNSBL (anymore)
230                         might be incorporated into spamhaus?
231                 does host other databases about threats
232 00_NEEDS_RECHECK
233         https://antispam.imp.ch/
234                 no usage policy
235                 no return code info
236                 no good listing policy
237                 information received from inquiry to provider
238                         website will be updated
239                         return codes
240                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
241                                         127.0.1.8 = default
242                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
243                                         127.0.0.11 => REPO (Email reported as Spam by customer)
244                                 spamrbl.imp.ch (3 days holding time)
245                                         IPs are listed when trying to send mail to the spamtrap mailserver
246                                         MD5 hash: attachment sent to the swinog blacklist
247                                 wormrbl.imp.ch
248                                         DEAD
249         http://blacklist.woody.ch/rblcheck.php3
250                 dead?
251                 waiting for feedback
252         http://dnsbl.iip.lu/
253                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
254                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
255                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
256                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
257         http://dnsbl.inps.de/
258                 timeout
259                 https://www.dnsbl.com/search/label/dnsbl.inps.de
260                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
261                 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
262                         [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
263                 https://glockapps.com/blacklist/dnsbl-inps-de/
264                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
265                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
266                         This blacklist is offline as of May 1, 2020.
267                 https://web.archive.org/web/20220428013500/http://www.inps.de/
268 00_NEEDS_RESEARCH
269         bl.tiopan.com
270         blocked.hilli.dk
271         dialups.visi.com
272         dnsbl.antispam.or.id
273         dob.sibl.support-intelligence.net
274         intruders.docs.uu.se
275         map.spam-rbl.com
276         rbl.triumf.ca
277         all.s5h.net
278                 http://www.usenix.org.uk/content/rbl.html
279         torexit.dan.me.uk
280         http://pedantic.org/
281                 as of 20140701
282         rbl.fasthosts.co.uk
283                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
284                 seems dead?
285                 https://antispam.fasthosts.co.uk/
286 00_ALIVE
287         00_RECONSIDER
288                 http://barracudacentral.org/rbl
289                         requires account with extensive information (more than spamhaus e.g.):
290                                 your name.
291                                 your company name.
292                                 your phone number.
293                                 your address.
294                                 your city name.
295                                 your state/province name.
296                                 your zip/postal code.
297                                 the name of the alternate contact.
298                                 the phone number of the alternate contact.
299                                 the email address of the alternate contact.
300                         seems well documented
301         00_E_EVIL
302                 sbl.nszones.com
303                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
304                 http://www.backscatterer.org/
305                         questionable policy - pay for (quicker) delisting
306                         https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
307                                 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
308                         https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
309                                 in March 17, 2023 does not mention need to pay
310                         https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
311                                 recommend against using it
312                         https://whatismyipaddress.com/backscatterer
313                                 mentions strict delisting process and "express delisting" but nothing further
314                         https://bobcares.com/blog/backscatterer-blacklist/
315                                 goes through the process with screenshots showing express delisting for 109$
316                         https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
317                                 more opinions
318                         https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
319                                 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
320                         https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
321                                 another opinion
322         00_E_INFORMATION
323                 blacklist.sci.kun.nl
324                         https://cncz.science.ru.nl/en/howto/email-spam/
325                         not really its own DNSBL?
326                         no usage information
327                         no usage policy
328                 http://anonmails.de/
329                         seems serious but missing necessary info
330                                 usage policy
331                                 listing policy
332                 http://blacklist.jippg.org/
333                         no usage policy
334                         no listing policy
335                         no return code info
336                 bip.virusfree.cz
337                         used by rspamd
338                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
339                 https://www.nixspam.net/
340                         previously http://www.dnsbl.manitu.net/
341                         query zone: ix.dnsbl.manitu.net
342                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
343                         difficult to find info regarding listing policy
344                         asked for more information to be added
345                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
346                 access.redhawk.org
347                         website works but barely any info, not even how to query it
348                         https://www.redhawk.org/?p=64
349                         https://www.redhawk.org/SpamHawk/index.php
350                 https://senderscore.org/
351                         requires registration?
352                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
353                         https://senderscore.org/assess/blocklist-lookup/
354                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
355                         no information how to query found
356                 mail-abuse.org
357                         https://ers.trendmicro.com/
358                         trendmicro paid service
359                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
360                                 »If you don’t create an account, you can still query the reputation of an IP address«
361                         I don’t find any pricing or usage information
362                 http://dnsbl.tornevall.org/
363                         https://www.tornevall.net/
364                         related to https://www.fraudbl.org/
365                         seems a bit unstructured and not very well documented
366                                 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
367                         seems active
368                 http://rbl.schulte.org/
369                         seems active
370                         listing policy seems to be: they received spam from an IP
371                         usage policy: Anyone can use this RBL list [sic]
372                         return codes: probably boolean, i.e. either listed or not
373                 http://relaytest.kundenserver.de/
374                         by 1und1 (now ionos?), used internally
375                         https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
376                         no usage policy found
377                         no listing policy found
378                         no return code explanation found
379                 http://www.blockedservers.com/
380                         no usage policy
381                         no listing policy
382                         no documentation
383                         "funny":
384                                 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
385                 https://choon.net/dnsbl.php
386                         no usage policy or instructions
387                         no listing policy
388                         only automatic delisting after 30 days
389         00_E_PAID
390         00_E_PRIVATE
391                 88.blacklist.zap
392                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
393                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
394                         https://www.blalert.com/dnsbl/88.blacklist.zap
395                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
396                         https://www.dnsbl.com/search/label/frontbridge
397                 http://drmx.org/
398                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
399                 rbl.tdk.net
400                         tdk.net seems dead on http(s)
401                         private
402                                 https://www.blalert.com/dnsbl/rbl.tdk.net
403                         old link: http://postmaster.tdc.dk/publish.php?id=31787
404                                 tdc.dk redirects to yousee.dk
405                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
406                 rbl.zenon.net
407                         private
408                                 https://www.blalert.com/dnsbl/rbl.zenon.net
409                         http://www.noc.zenon.net/rbl/
410                         russian(?)
411                 https://ahbl.org/
412                         was public until 2015
413                         now private, invite-only
414         http://rfc-clueless.org/
415                 lists domains
416                         that do not adhere to common best practices or requirements
417                 does NOT list spammers!
418                 listing criteria are explained well
419                         http://rfc-clueless.org/pages/listing_policy
420                 return codes are explained
421                         http://rfc-clueless.org/
422                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
423                 many timeouts
424                         first noticed in 2014 and deactivated
425                         retried in 2023 and still the case
426         http://spameatingmonkey.com/
427                 lists IPs
428                         that sent backscatter
429                         that sent to spamtrap
430                         added by policy
431                                 this includes dial-up!
432                                 https://spameatingmonkey.com/faq/policy-based-listing
433                 lists domains/URIs
434                         by age
435                         in spam bodies
436                 usage policy seems clear
437                         https://spameatingmonkey.com/faq/query-limits
438                 listing policy seems clear
439                         https://spameatingmonkey.com/services
440                 return codes documented
441                         https://spameatingmonkey.com/services
442                 http://blogspambl.com/
443                         redirects to spameatingmonkey.com
444         http://uribl.com/
445                 lists domains/URIs
446                         that appear in spam bodies
447                         has whitelist
448                 lists IPs
449                         that URIs in spam bodies resolve to
450                 return codes are documented
451                         https://uribl.com/about.shtml#implementation
452                         bitmasked
453                         127.0.0.1 is used to signal abusive query behaviour
454         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
455                 called "hostkarma"
456                 lists domains/URIs
457                 lists IPs
458                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
459                 listing policy is documented
460                 return codes are documented
461                 seems very trustworthy
462         http://www.sorbs.net/
463                 good reputation
464                 lists domains/URIs
465                 lists IPs
466                 usage policy is clear that it’s free
467                 listing policy is documented
468                 return codes are documented
469                 seems trustworthy
470         http://www.spamhaus.org/
471                 good reputation
472                 very well done
473                 seems very professional
474                 lists domains/URIs
475                 lists IPs
476                 usage policy is clear
477                         https://www.spamhaus.org/organization/dnsblusage/
478                 listing policies are clearly documented
479                 return codes are clearly documented
480         http://www.surbl.org/
481                 good reputation
482                 lists domains/URIs
483                 usage policy is clear
484                         https://surbl.org/usage-policy
485                 listing policy is documented
486                 return codes are documented
487                         bitmasked
488                         127.0.0.1 means blocked
489         http://zapbl.net/
490                 lists domains/URIs
491                 lists IPs
492                 listing policy seems clear
493                         https://zapbl.net/policy
494                 usage policy seems clearly free for everyone
495                         https://zapbl.net/using
496                 return codes are documented
497                 seems well done
498         https://rbl.foobar.hu/
499                 lists domains/URIs
500                 lists IPs
501                 listing policy seems clear
502                 usage policy seems clearly free for everyone
503                 return codes are documented
504                 possibly unmaintained or dead
505                         footer says: ©2013-14
506         http://apews.org/?page=filter
507                 questionable
508                         https://www.dnsbl.com/search/label/apews
509                         https://whatismyipaddress.com/apews
510                 dead?
511                         no news on http://apews-user.blogspot.com/ since 2014
512                 not further looked into because of the above
513         https://www.dnswl.org/
514                 seems to be run with best intentions but has had issues from what I have heard from some users
515                 IRC channel has some activity
516                 usage policy relatively clear
517                         free within certain limits
518                 listing policy
519                         self-service
520                 return codes are documented
521         00_E_FOCUS
522                 https://www.dnsblchile.org/index.en.html
523                         chilenian spam so not interesting for me
524                         seems alive
525         00_LISTS_BLOGSPAMMERS
526                 https://www.madavi.de/madavibl/
527                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
528                 http://bsb.empty.us/
529                         does not exist anymore
530                         empty.us returns »Nothing here, obviously.«
531         00_LISTS_COUNTRIES
532                 korea
533                         http://korea.services.net/
534         00_LISTS_DIALUPS
535         00_LISTS_OPENRESOLVERS
536         00_LISTS_TORNODES
537                 https://www.dan.me.uk/dnsbl
538                 http://rbl.efnetrbl.org/
539                         aka http://tor.efnet.org/
540                         lists IPs
541                         lists open proxies, infected machines, tornodes, etc.
542         https://0spam.org/
543                 clear information on usage policy
544                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
545                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
546                 seems serious
547                 listing policies are a little less clear
548                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
549                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
550                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
551                 return codes not very clear
552         https://abuse.ro/
553                 policy
554                         spamtraps
555                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
556                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
557                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
558         http://dronebl.org/
559                 usage policy is clear: free for whatever
560                 listing policy is not quite so clear
561                         can be mostly inferred from the classes but not entirely clear IMHO
562                 has an IRC channel
563                 return codes
564                         not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
565         http://psbl.org/
566                 query zone: psbl.surriel.com
567                 no usage policy, but seems implied that usage is free
568                 listing policy
569                         no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
570                 return codes
571                         not documented, probably only boolean
572         http://rbldata.interserver.net/
573                 listing policy more or less clear
574                 usage policy not given but since usage is explained it’s probably free for all
575                 return codes seem to be binary, i.e. either listed or not
576                 lists IPs
577                 lists domains/URIs
578         http://rv-soft.info/
579                 usage policy not explicit but seems to be free
580                 listing policy also not explicit but can be inferred from return code explanation
581                 return codes are explained
582         http://spamrats.com/
583                 clear usage policy (ToS)
584                 listing policies documented
585                 return codes of aggregated list documented
586                 lists IPs
587         http://v4bl.org/
588                 usage policy documented
589                 listing policy not really clear
590                 return codes documented
591         http://wpbl.info/
592                 listing procedure is documented
593                 usage policy implied: free to use
594                 return codes documented
595         http://www.aupads.org/
596                 aka www.antispam-ufrj.pads.ufrj.br
597                 aka www.orve.org 
598                 listing policy more or less clear
599                 lists IPs and FQDNs
600                 usage policy seems clear: freely exported by anybody who wants to use them«
601         http://www.gbudb.com/truncate/
602                 listing policy
603                 usage policy seems implied: free use
604                 return codes documented
605                 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
606         http://www.justspam.org/
607                 listing policy documented
608                         warning: relies on listings in other DNSBLs! also for delisting!
609                 usage policy clear
610                 return codes: binary
611         http://www.kempt.net/dnsbl/
612                 listing policy documented
613                 usage policy documented
614                 return codes undocumented
615         http://www.spamcop.net/
616                 listing policy documented
617                         The SCBL is aggressive and often errs on the side of blocking mail
618                 usage policy is: free
619                 good reputation
620                 return codes documented
621         http://www.spamsources.fabel.dk/
622                 usage policy is: free
623                 listing policy seems clear
624                 lists IPs
625         http://www.uceprotect.net/en/index.php
626                 takes money for faster delisting
627                 listing policy is documented
628                 usage policy is documented: free
629                 a lot of drama
630                         https://www.heise.de/hintergrund/Spam-Golem-291396.html
631                                 german
632                                 also see comments
633                         https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
634                         https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
635                         https://uceprotect.wtf/
636                         https://www.aaroncake.net/misc/showthought.asp?thought=57
637                         https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
638                         https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
639                         https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
640                         http://kontech.net/uceprotect-blacklist-scheme-2020/
641         http://www.whitelisted.org/
642                 paid subscription
643                 policy on site
644                 related to uceprotect, see there
645         https://www.team-cymru.org/Services/Bogons/dns.html
646                 good reputation
647                 lists IPs
648                 does not list spammers but bogons
649                 clear listing policy
650                 usage policy not quite clear ATM
651                 return codes documented: binary
652         http://mailspike.net/usage.html
653                 reputation-based
654         https://puck.nether.net/or/
655                 policies on website
656         http://www.isipp.com/email-accreditation/iadb-query-instruction/
657                 requires signup
658                 not quite a usage policy, but seems ok
659                 strange split of ipv4 and ipv6
660                 seems dead?