2 check and link (de)listing policy
3 NOGO: delisting for money
4 check and link usage policy
5 check and link return codes
6 find newsfeed or mailinglist
12 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13 http://www.blalert.com/dnsbls
14 http://www.dnsbl.info/dnsbl-list.php
15 http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16 http://www.sdsc.edu/~jeff/spam/cbc.html
17 http://moensted.dk/spam/
18 https://whatismyipaddress.com/blacklist-check
19 https://multirbl.valli.org/
20 https://glockapps.com/blacklist/
21 https://docs.hetrixtools.com/monitored-blacklists/
22 https://www.blacklistmaster.com/
23 https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24 https://github.com/zbetcheckin/DNSBLs
25 https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26 https://www.impressionwise.com/kb/threats/rbl-advisories.html
28 http://dnsbl.aspnet.hu/
33 maybe? they have antispam but it’s all portugese? or spanish? no idea
41 https://www.blalert.com/dnsbl/shortlist.mailhosts.org
44 https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45 referenced ML post is 404
46 blackholes.five-ten-sg.com
47 Offline as of 1/1/2013
48 https://whatismyipaddress.com/five-ten-sg
50 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
54 https://community.spiceworks.com/topic/329762-blacklist-removal
55 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56 website contains spam/crap
57 http://cart00ney.surriel.com/
64 https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
66 website contains info about living in australia? called "AusBlog"
67 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68 http://moensted.dk/spam/
70 https://moensted.dk/spam/
71 http://rbl.mw-internet.net/
73 2023: it is an asian(?) gambling(?) website
74 http://www.blackholes.us/
76 https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77 http://www.deadbeef.com/
79 spamsources.dnsbl.info
81 http://www.dnsbl.info/spamsources-dnsbl-defunct.php
83 domain dead, no other info
86 https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
88 website parked, no other info
89 https://www.transip.nl/
91 https://www.blalert.com/dnsbl/proxy.block.transip.nl
92 https://www.blalert.com/dnsbl/residential.block.transip.nl
93 pss.spambusters.org.ar
97 https://snark.net/ gives access denied
98 whois.rfc-ignorant.org
100 rfc-ignorant.org registered but no A/AAAA record
102 http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103 https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104 will-spam-for-food.eu.org
107 https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
109 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110 https://linuxreviews.org/Mail_Spam_Blacklists
111 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
113 timeout, also on the parent null.dk
116 seems dead, no info to be found
117 domain does not respond
118 http://msrbl.blogspot.ch/
119 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
121 http://www.olsentech.net/
122 strange content on web
125 http://www.orbitrbl.com/
129 registered but no A/AAAA record
131 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
135 http://anti-spam.org.cn/?locale=en_US
139 talkactive.net redirects twice to some hosting company
140 last listings in 2017
141 https://multirbl.valli.org/detail/rbl.talkactive.net.html
142 https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
144 no policies published
146 was a private list of an irc network
147 network was renamed idlechat.net in 2014
148 became a discord chat in 2022(?)
149 http://blakjak.net/RBL
150 external access disabled
151 2023: seems dead, website is a weird error
152 https://www.blalert.com/dnsbl/rbl.blakjak.net
153 This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154 http://cyberlogic.net/
156 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157 On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158 https://www.dnsbl.com/2018/05/
159 As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160 http://www.rbl.jp/allrbl-e.html
161 website asks for login or just errors
162 http://www.spamhauswhitelist.com/en/
163 looks like a parked domain with ads
164 http://stopspam.org/rblcheck/index.php
166 http://www.stopspam.org/rbl-info/
168 http://countries.nerd.dk/
169 unable to connect, also for nerd.dk
170 http://dul.ru/dul.en.html
172 http://dns.measurement-factory.com/surveys/openresolvers.html
174 »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175 http://www.sectoor.de/tor.php
177 http://anticaptcha.net/
179 http://blacklist.lashback.com/
180 query zone: ubl.unsubscore.com
181 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182 rsync URLs seem dead, so does the download url
183 http://blacklist.woody.ch/
184 no entries in the displayed "top 100"
185 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186 http://cbl.abuseat.org/
187 https://www.abuseat.org/
188 changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189 http://dnsbl.burnt-tech.com/
191 http://rbl.dns-servicios.com/rbl.php
192 website can not be found
193 http://spamcannibal.org/
194 dead, as of at least 2018
195 http://st.technovision.dk/
196 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197 [December 8, 2021] This RBL has stopped responding to DNS queries.
198 http://spamstinks.com/
199 cert is for generic hostname
200 website shows some login form
202 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203 January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204 http://www.blocklist.de/en/index.html
205 lots of timeouts as of 2023
206 forum link is dead, among others
207 seems unmaintained but alive
208 latest news is from 2016
209 latest blog entry from 2022
210 Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211 http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
213 http://www.leadmon.net/spamguard/
216 https://antispam.imp.ch/
219 no good listing policy
220 information received from inquiry to provider
221 website will be updated
223 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
225 127.0.0.10 => TRAP (Email sent to a spamtrap)
226 127.0.0.11 => REPO (Email reported as Spam by customer)
227 spamrbl.imp.ch (3 days holding time)
228 IPs are listed when trying to send mail to the spamtrap mailserver
229 MD5 hash: attachment sent to the swinog blacklist
232 http://blacklist.woody.ch/rblcheck.php3
236 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
237 in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
238 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
239 This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
240 http://dnsbl.inps.de/
242 https://www.dnsbl.com/search/label/dnsbl.inps.de
243 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
244 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
245 [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
246 https://glockapps.com/blacklist/dnsbl-inps-de/
247 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
248 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
249 This blacklist is offline as of May 1, 2020.
250 https://web.archive.org/web/20220428013500/http://www.inps.de/
256 dob.sibl.support-intelligence.net
261 http://www.usenix.org.uk/content/rbl.html
266 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
268 https://antispam.fasthosts.co.uk/
271 http://barracudacentral.org/rbl
272 requires account with extensive information (more than spamhaus e.g.):
278 your state/province name.
279 your zip/postal code.
280 the name of the alternate contact.
281 the phone number of the alternate contact.
282 the email address of the alternate contact.
283 seems well documented
286 http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
287 http://www.backscatterer.org/
288 questionable policy - pay for (quicker) delisting
289 https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
290 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
291 https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
292 in March 17, 2023 does not mention need to pay
293 https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
294 recommend against using it
295 https://whatismyipaddress.com/backscatterer
296 mentions strict delisting process and "express delisting" but nothing further
297 https://bobcares.com/blog/backscatterer-blacklist/
298 goes through the process with screenshots showing express delisting for 109$
299 https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
301 https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
302 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
303 https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
307 https://cncz.science.ru.nl/en/howto/email-spam/
308 not really its own DNSBL?
312 seems serious but missing necessary info
315 http://blacklist.jippg.org/
321 https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
322 https://www.nixspam.net/
323 previously http://www.dnsbl.manitu.net/
324 query zone: ix.dnsbl.manitu.net
325 provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
326 difficult to find info regarding listing policy
327 asked for more information to be added
328 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
330 website works but barely any info, not even how to query it
331 https://www.redhawk.org/?p=64
332 https://www.redhawk.org/SpamHawk/index.php
333 https://senderscore.org/
334 requires registration?
335 Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
336 https://senderscore.org/assess/blocklist-lookup/
337 FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
338 no information how to query found
340 https://ers.trendmicro.com/
341 trendmicro paid service
342 https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
343 »If you don’t create an account, you can still query the reputation of an IP address«
344 I don’t find any pricing or usage information
345 http://dnsbl.tornevall.org/
346 https://www.tornevall.net/
347 related to https://www.fraudbl.org/
348 seems a bit unstructured and not very well documented
349 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
351 http://rbl.schulte.org/
353 listing policy seems to be: they received spam from an IP
354 usage policy: Anyone can use this RBL list [sic]
355 return codes: probably boolean, i.e. either listed or not
356 http://relaytest.kundenserver.de/
357 by 1und1 (now ionos?), used internally
358 https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
359 no usage policy found
360 no listing policy found
361 no return code explanation found
362 http://www.blockedservers.com/
367 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
371 http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
372 https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
373 https://www.blalert.com/dnsbl/88.blacklist.zap
374 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
375 https://www.dnsbl.com/search/label/frontbridge
377 »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
379 tdk.net seems dead on http(s)
381 https://www.blalert.com/dnsbl/rbl.tdk.net
382 old link: http://postmaster.tdc.dk/publish.php?id=31787
383 tdc.dk redirects to yousee.dk
384 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
387 https://www.blalert.com/dnsbl/rbl.zenon.net
388 http://www.noc.zenon.net/rbl/
391 was public until 2015
392 now private, invite-only
393 http://rfc-clueless.org/
395 that do not adhere to common best practices or requirements
396 does NOT list spammers!
397 listing criteria are explained well
398 http://rfc-clueless.org/pages/listing_policy
399 return codes are explained
400 http://rfc-clueless.org/
401 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
403 first noticed in 2014 and deactivated
404 retried in 2023 and still the case
405 http://spameatingmonkey.com/
407 that sent backscatter
408 that sent to spamtrap
410 this includes dial-up!
411 https://spameatingmonkey.com/faq/policy-based-listing
415 usage policy seems clear
416 https://spameatingmonkey.com/faq/query-limits
417 listing policy seems clear
418 https://spameatingmonkey.com/services
419 return codes documented
420 https://spameatingmonkey.com/services
421 http://blogspambl.com/
422 redirects to spameatingmonkey.com
425 that appear in spam bodies
428 that URIs in spam bodies resolve to
429 return codes are documented
430 https://uribl.com/about.shtml#implementation
432 127.0.0.1 is used to signal abusive query behaviour
433 http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
437 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
438 listing policy is documented
439 return codes are documented
440 seems very trustworthy
441 http://www.sorbs.net/
445 usage policy is clear that it’s free
446 listing policy is documented
447 return codes are documented
449 http://www.spamhaus.org/
452 seems very professional
455 usage policy is clear
456 https://www.spamhaus.org/organization/dnsblusage/
457 listing policies are clearly documented
458 return codes are clearly documented
459 http://www.surbl.org/
462 usage policy is clear
463 https://surbl.org/usage-policy
464 listing policy is documented
465 return codes are documented
467 127.0.0.1 means blocked
471 listing policy seems clear
472 https://zapbl.net/policy
473 usage policy seems clearly free for everyone
474 https://zapbl.net/using
475 return codes are documented
477 https://rbl.foobar.hu/
480 listing policy seems clear
481 usage policy seems clearly free for everyone
482 return codes are documented
483 possibly unmaintained or dead
484 footer says: ©2013-14
485 http://apews.org/?page=filter
487 https://www.dnsbl.com/search/label/apews
488 https://whatismyipaddress.com/apews
490 no news on http://apews-user.blogspot.com/ since 2014
491 not further looked into because of the above
492 https://www.dnswl.org/
493 seems to be run with best intentions but has had issues from what I have heard from some users
494 IRC channel has some activity
495 usage policy relatively clear
496 free within certain limits
499 return codes are documented
501 https://www.dnsblchile.org/index.en.html
502 chilenian spam so not interesting for me
504 00_LISTS_BLOGSPAMMERS
505 https://www.madavi.de/madavibl/
506 »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
508 does not exist anymore
509 empty.us returns »Nothing here, obviously.«
512 http://korea.services.net/
514 00_LISTS_OPENRESOLVERS
516 https://www.dan.me.uk/dnsbl
517 http://rbl.efnetrbl.org/
518 aka http://tor.efnet.org/
520 lists open proxies, infected machines, tornodes, etc.
522 clear information on usage policy
523 Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
524 DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
526 listing policies are a little less clear
527 bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
528 nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
529 url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
530 return codes not very clear
534 The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
535 Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
536 Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
538 usage policy is clear: free for whatever
539 listing policy is not quite so clear
540 can be mostly inferred from the classes but not entirely clear IMHO
543 not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
545 query zone: psbl.surriel.com
546 no usage policy, but seems implied that usage is free
548 no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
550 not documented, probably only boolean
551 http://rbldata.interserver.net/
552 listing policy more or less clear
553 usage policy not given but since usage is explained it’s probably free for all
554 return codes seem to be binary, i.e. either listed or not
558 usage policy not explicit but seems to be free
559 listing policy also not explicit but can be inferred from return code explanation
560 return codes are explained
562 clear usage policy (ToS)
563 listing policies documented
564 return codes of aggregated list documented
567 usage policy documented
568 listing policy not really clear
569 return codes documented
571 listing procedure is documented
572 usage policy implied: free to use
573 return codes documented
574 http://www.aupads.org/
575 aka www.antispam-ufrj.pads.ufrj.br
577 listing policy more or less clear
579 usage policy seems clear: freely exported by anybody who wants to use them«
580 http://www.gbudb.com/truncate/
582 usage policy seems implied: free use
583 return codes documented
584 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
585 http://www.justspam.org/
586 listing policy documented
587 warning: relies on listings in other DNSBLs! also for delisting!
590 http://www.kempt.net/dnsbl/
591 listing policy documented
592 usage policy documented
593 return codes undocumented
594 http://www.spamcop.net/
597 http://www.spamsources.fabel.dk/
598 usage policy is: free
599 listing policy seems clear
601 http://www.srntools.com/blacklist/
602 http://www.uceprotect.net/en/index.php
603 https://bl.konstant.no/
604 https://choon.net/rbl.php
605 https://www.abuse.ch/
606 https://www.abuse.ch/?tag=httpbl
607 https://www.kisarbl.or.kr/
608 https://www.megarbl.net/
609 https://www.team-cymru.org/Services/Bogons/dns.html
610 http://mailspike.net/usage.html
612 http://www.whitelisted.org/
615 https://puck.nether.net/or/
617 http://www.isipp.com/email-accreditation/iadb-query-instruction/
619 not quite a usage policy, but seems ok
620 strange split of ipv4 and ipv6