]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
update blacklist.woody.ch
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 implement
12         https://abuse.ro/
13                 policy
14                         spamtraps
15                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
16                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
17                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
18 00_META
19         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
20         http://www.blalert.com/dnsbls
21         http://www.dnsbl.info/dnsbl-list.php
22         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
23         http://www.sdsc.edu/~jeff/spam/cbc.html
24         http://moensted.dk/spam/
25         https://whatismyipaddress.com/blacklist-check
26         https://multirbl.valli.org/
27         https://glockapps.com/blacklist/
28         https://docs.hetrixtools.com/monitored-blacklists/
29         https://www.blacklistmaster.com/
30         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
31         https://github.com/zbetcheckin/DNSBLs
32         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
33 00_ELANG
34         http://dnsbl.aspnet.hu/
35                 hungarian?
36         http://spam-rbl.fr/
37                 french
38         https://mav.com.br/
39                 maybe? they have antispam but it’s all portugese? or spanish? no idea
40 00_DEAD
41         http://openrbl.org/
42                 as seems dead
43                         404s
44                         wiki is down
45         http://mailhosts.org/
46                 dead
47                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
48         blitzed.org
49                 dead since 2006
50                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
51                                 referenced ML post is 404
52         blackholes.five-ten-sg.com
53                 Offline as of 1/1/2013
54                         https://whatismyipaddress.com/five-ten-sg
55         dynip.rothen.com
56                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
57                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
58         fl.chickenboner.biz
59                 dead since 2011
60                         https://community.spiceworks.com/topic/329762-blacklist-removal
61                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
62                 website contains spam/crap
63         http://cart00ney.surriel.com/
64                 cart00ney.org is dead
65         http://dsbl.org/
66                 points to surriel.com
67         http://csma.biz/
68                 domain is for sale
69                 dead since 2013
70                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
71         http://dnsbl.net.au/
72                 website contains info about living in australia? called "AusBlog"
73                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
74         http://moensted.dk/spam/
75                 dead since 2010
76                 https://moensted.dk/spam/
77         http://rbl.mw-internet.net/
78                 domain was parked
79                 2023: it is an asian(?) gambling(?) website
80         http://www.blackholes.us/
81                 dead since 2009
82                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
83         http://www.deadbeef.com/
84                 dead, no info
85         spamsources.dnsbl.info
86                 dead since 2011 or so
87                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
88         http://www.gweep.ca/
89                 domain dead, no other info
90         http://www.njabl.org/
91                 dead since 2013
92                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
93         http://wytnij.to/
94                 website parked, no other info
95         https://www.transip.nl/
96                 dead since 2013
97                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
98                         https://www.blalert.com/dnsbl/residential.block.transip.nl
99         pss.spambusters.org.ar
100                 NXDOMAIN
101         rbl.snark.net
102                 NXDOMAIN
103                 https://snark.net/ gives access denied
104         whois.rfc-ignorant.org
105                 NXDOMAIN
106                 rfc-ignorant.org registered but no A/AAAA record
107                 dead since 2012
108                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
109                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
110         will-spam-for-food.eu.org
111                 unmaintained
112                 dead
113                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
114         http://proxybl.org/
115                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
116                 https://linuxreviews.org/Mail_Spam_Blacklists
117                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
118         dev.null.dk
119                 timeout, also on the parent null.dk
120                 effectively dead
121         dnsbl.mags.net
122                 seems dead, no info to be found
123                 domain does not respond
124         http://msrbl.blogspot.ch/
125                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
126                 effectively dead
127         http://www.olsentech.net/
128                 strange content on web
129                 effectively dead
130         rbl.orbitrbl.com
131                 http://www.orbitrbl.com/
132                 timeout
133         rbl.polarcomm.net
134                 NXDOMAIN
135                 registered but no A/AAAA record
136         cidr.bl.mcafee.com
137                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
138                         404
139                 no info to be found
140                 dead?
141         http://anti-spam.org.cn/?locale=en_US
142                 unreachable DNS
143         rbl.talkactive.net
144                 seems dead
145                 talkactive.net redirects twice to some hosting company
146                 last listings in 2017
147                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
148                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
149         dnsbl.ipocalypse.net
150                 no policies published
151                 dead
152                         was a private list of an irc network
153                         network was renamed idlechat.net in 2014
154                         became a discord chat in 2022(?)
155         http://blakjak.net/RBL
156                 external access disabled
157                 2023: seems dead, website is a weird error
158                 https://www.blalert.com/dnsbl/rbl.blakjak.net
159                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
160         http://cyberlogic.net/
161                 french (canada)
162                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
163                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
164                 https://www.dnsbl.com/2018/05/
165                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
166         http://www.rbl.jp/allrbl-e.html
167                 website asks for login or just errors
168         http://www.spamhauswhitelist.com/en/
169                 looks like a parked domain with ads
170         http://stopspam.org/rblcheck/index.php
171                 aka dul.pacifier.net
172                 http://www.stopspam.org/rbl-info/
173                         stopped in 2013
174         http://countries.nerd.dk/
175                 unable to connect, also for nerd.dk
176         http://dul.ru/dul.en.html
177                 DEAD for sale
178         http://dns.measurement-factory.com/surveys/openresolvers.html
179                 dead
180                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
181         http://www.sectoor.de/tor.php
182                 timeouts
183         http://anticaptcha.net/
184                 for sale
185         http://blacklist.lashback.com/
186                 query zone: ubl.unsubscore.com
187                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
188                 rsync URLs seem dead, so does the download url
189         http://blacklist.woody.ch/
190                 no entries in the displayed "top 100"
191                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
192 00_NEEDS_RECHECK
193         https://antispam.imp.ch/
194                 no usage policy
195                 no return code info
196                 no good listing policy
197                 information received from inquiry to provider
198                         website will be updated
199                         return codes
200                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
201                                         127.0.1.8 = default
202                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
203                                         127.0.0.11 => REPO (Email reported as Spam by customer)
204                                 spamrbl.imp.ch (3 days holding time)
205                                         IPs are listed when trying to send mail to the spamtrap mailserver
206                                         MD5 hash: attachment sent to the swinog blacklist
207                                 wormrbl.imp.ch
208                                         DEAD
209         http://blacklist.woody.ch/rblcheck.php3
210                 dead?
211                 waiting for feedback
212 00_NEEDS_RESEARCH
213         bl.tiopan.com
214         blocked.hilli.dk
215         dialups.visi.com
216         dnsbl.antispam.or.id
217         dob.sibl.support-intelligence.net
218         intruders.docs.uu.se
219         map.spam-rbl.com
220         rbl.triumf.ca
221         all.s5h.net
222                 http://www.usenix.org.uk/content/rbl.html
223         torexit.dan.me.uk
224         http://pedantic.org/
225                 as of 20140701
226         rbl.fasthosts.co.uk
227                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
228                 seems dead?
229                 https://antispam.fasthosts.co.uk/
230 00_ALIVE
231         00_RECONSIDER
232                 http://barracudacentral.org/rbl
233                         requires account with extensive information (more than spamhaus e.g.):
234                                 your name.
235                                 your company name.
236                                 your phone number.
237                                 your address.
238                                 your city name.
239                                 your state/province name.
240                                 your zip/postal code.
241                                 the name of the alternate contact.
242                                 the phone number of the alternate contact.
243                                 the email address of the alternate contact.
244                         seems well documented
245         00_E_EVIL
246                 sbl.nszones.com
247                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
248         00_E_INFORMATION
249                 blacklist.sci.kun.nl
250                         https://cncz.science.ru.nl/en/howto/email-spam/
251                         not really its own DNSBL?
252                         no usage information
253                         no usage policy
254                 http://anonmails.de/
255                         seems serious but missing necessary info
256                                 usage policy
257                                 listing policy
258                 http://blacklist.jippg.org/
259                         no usage policy
260                         no listing policy
261                         no return code info
262                 bip.virusfree.cz
263                         used by rspamd
264                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
265                 https://www.nixspam.net/
266                         previously http://www.dnsbl.manitu.net/
267                         query zone: ix.dnsbl.manitu.net
268                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
269                         difficult to find info regarding listing policy
270                         asked for more information to be added
271                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
272                 access.redhawk.org
273                         website works but barely any info, not even how to query it
274                         https://www.redhawk.org/?p=64
275                         https://www.redhawk.org/SpamHawk/index.php
276                 https://senderscore.org/
277                         requires registration?
278                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
279                         https://senderscore.org/assess/blocklist-lookup/
280                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
281                         no information how to query found
282                 mail-abuse.org
283                         https://ers.trendmicro.com/
284                         trendmicro paid service
285                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
286                                 »If you don’t create an account, you can still query the reputation of an IP address«
287                         I don’t find any pricing or usage information
288         00_E_PAID
289         00_E_PRIVATE
290                 88.blacklist.zap
291                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
292                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
293                         https://www.blalert.com/dnsbl/88.blacklist.zap
294                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
295                         https://www.dnsbl.com/search/label/frontbridge
296                 http://drmx.org/
297                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
298                 rbl.tdk.net
299                         tdk.net seems dead on http(s)
300                         private
301                                 https://www.blalert.com/dnsbl/rbl.tdk.net
302                         old link: http://postmaster.tdc.dk/publish.php?id=31787
303                                 tdc.dk redirects to yousee.dk
304                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
305                 rbl.zenon.net
306                         private
307                                 https://www.blalert.com/dnsbl/rbl.zenon.net
308                         http://www.noc.zenon.net/rbl/
309                         russian(?)
310                 https://ahbl.org/
311                         was public until 2015
312                         now private, invite-only
313         http://rfc-clueless.org/
314                 lists domains
315                         that do not adhere to common best practices or requirements
316                 does NOT list spammers!
317                 listing criteria are explained well
318                         http://rfc-clueless.org/pages/listing_policy
319                 return codes are explained
320                         http://rfc-clueless.org/
321                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
322                 many timeouts
323                         first noticed in 2014 and deactivated
324                         retried in 2023 and still the case
325         http://spameatingmonkey.com/
326                 lists IPs
327                         that sent backscatter
328                         that sent to spamtrap
329                         added by policy
330                                 this includes dial-up!
331                                 https://spameatingmonkey.com/faq/policy-based-listing
332                 lists domains/URIs
333                         by age
334                         in spam bodies
335                 usage policy seems clear
336                         https://spameatingmonkey.com/faq/query-limits
337                 listing policy seems clear
338                         https://spameatingmonkey.com/services
339                 return codes documented
340                         https://spameatingmonkey.com/services
341                 http://blogspambl.com/
342                         redirects to spameatingmonkey.com
343         http://uribl.com/
344                 lists domains/URIs
345                         that appear in spam bodies
346                         has whitelist
347                 lists IPs
348                         that URIs in spam bodies resolve to
349                 return codes are documented
350                         https://uribl.com/about.shtml#implementation
351                         bitmasked
352                         127.0.0.1 is used to signal abusive query behaviour
353         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
354                 called "hostkarma"
355                 lists domains/URIs
356                 lists IPs
357                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
358                 listing policy is documented
359                 return codes are documented
360                 seems very trustworthy
361         http://www.sorbs.net/
362                 good reputation
363                 lists domains/URIs
364                 lists IPs
365                 usage policy is clear that it’s free
366                 listing policy is documented
367                 return codes are documented
368                 seems trustworthy
369         http://www.spamhaus.org/
370                 good reputation
371                 very well done
372                 seems very professional
373                 lists domains/URIs
374                 lists IPs
375                 usage policy is clear
376                         https://www.spamhaus.org/organization/dnsblusage/
377                 listing policies are clearly documented
378                 return codes are clearly documented
379         http://www.surbl.org/
380                 good reputation
381                 lists domains/URIs
382                 usage policy is clear
383                         https://surbl.org/usage-policy
384                 listing policy is documented
385                 return codes are documented
386                         bitmasked
387                         127.0.0.1 means blocked
388         http://zapbl.net/
389                 lists domains/URIs
390                 lists IPs
391                 listing policy seems clear
392                         https://zapbl.net/policy
393                 usage policy seems clearly free for everyone
394                         https://zapbl.net/using
395                 return codes are documented
396                 seems well done
397         https://rbl.foobar.hu/
398                 lists domains/URIs
399                 lists IPs
400                 listing policy seems clear
401                 usage policy seems clearly free for everyone
402                 return codes are documented
403                 possibly unmaintained or dead
404                         footer says: ©2013-14
405         http://apews.org/?page=filter
406                 questionable
407                         https://www.dnsbl.com/search/label/apews
408                         https://whatismyipaddress.com/apews
409                 dead?
410                         no news on http://apews-user.blogspot.com/ since 2014
411                 not further looked into because of the above
412         https://www.dnswl.org/
413                 seems to be run with best intentions but has had issues from what I have heard from some users
414                 IRC channel has some activity
415                 usage policy relatively clear
416                         free within certain limits
417                 listing policy
418                         self-service
419                 return codes are documented
420         00_E_FOCUS
421                 https://www.dnsblchile.org/index.en.html
422                         chilenian spam so not interesting for me
423                         seems alive
424         00_LISTS_BLOGSPAMMERS
425                 https://www.madavi.de/madavibl/
426                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
427                 http://bsb.empty.us/
428                         does not exist anymore
429                         empty.us returns »Nothing here, obviously.«
430         00_LISTS_COUNTRIES
431                 korea
432                         http://korea.services.net/
433         00_LISTS_DIALUPS
434         00_LISTS_OPENRESOLVERS
435         00_LISTS_TORNODES
436                 https://www.dan.me.uk/dnsbl
437         https://0spam.org/
438                 clear information on usage policy
439                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
440                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
441                 seems serious
442                 listing policies are a little less clear
443                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
444                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
445                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
446                 return codes not very clear
447         http://cbl.abuseat.org/
448         http://dnsbl.burnt-tech.com/
449         http://dnsbl.iip.lu/
450         http://dnsbl.inps.de/
451         http://dnsbl.tornevall.org/
452         http://dronebl.org/
453         http://mailspike.net/usage.html
454         http://psbl.org/
455                 query zone: psbl.surriel.com
456         http://rbl.dns-servicios.com/rbl.php
457         http://rbl.schulte.org/
458         http://rbldata.interserver.net/
459                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
460         http://relaytest.kundenserver.de/
461         http://rv-soft.info/
462         http://spamcannibal.org/dnsbl_check.shtml
463         http://spamrats.com/
464         http://spamstinks.com/
465         http://st.technovision.dk/
466         http://tor.efnet.org/
467                 http://rbl.efnetrbl.org/ MIRROR
468         http://v4bl.org/
469         http://virbl.bit.nl/
470         http://wpbl.info/
471         http://www.aupads.org/
472         http://www.backscatterer.org/
473                 fragwuerdige policy - bezahlen fuer schnelleres delisting
474         http://www.blockedservers.com/
475         http://www.blocklist.de/en/index.html
476         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
477         http://www.gbudb.com/truncate/
478         http://www.justspam.org/
479         http://www.kempt.net/dnsbl/
480         http://www.leadmon.net/spamguard/
481         http://www.rbl.jp/allrbl-e.html
482         http://www.spamcop.net/
483                 good policy
484                 good reputation
485         http://www.spamsources.fabel.dk/
486                 sensible policy
487         http://www.srntools.com/blacklist/
488         http://www.uceprotect.net/en/index.php
489         http://www.usenix.org.uk/content/rbl.html
490         http://zapbl.net/
491         https://bl.konstant.no/
492         https://choon.net/rbl.php
493         https://puck.nether.net/or/
494                 might be good
495         https://rbl.foobar.hu/
496         https://www.abuse.ch/
497                 https://www.abuse.ch/?tag=httpbl
498         https://www.kisarbl.or.kr/
499         https://www.megarbl.net/
500         https://www.team-cymru.org/Services/Bogons/dns.html
501         http://mailspike.net/usage.html
502                 reputation-based
503         http://www.spamhauswhitelist.com/en/
504                 policies for listing and usage on the website
505         http://www.whitelisted.org/
506                 paid subscription
507                 policy on site
508         https://puck.nether.net/or/
509                 policies on website
510         https://rbl.foobar.hu/
511                 usage and listing policies on website
512         http://www.isipp.com/email-accreditation/iadb-query-instruction/
513                 requires signup
514         https://choon.net/rbl.php
515                 not quite a usage policy, but seems ok
516                 strange split of ipv4 and ipv6
517                 seems dead?
518         https://www.dnswl.org/