]> git.netwichtig.de Git - user/henk/docs/dnsbl_notes.git/blob - dnslists.otl
b349118b85fead5907a78ff14b08327f2ba09e8d
[user/henk/docs/dnsbl_notes.git] / dnslists.otl
1 TODO
2         check and link (de)listing policy
3                 NOGO: delisting for money
4         check and link usage policy
5         check and link return codes
6         find newsfeed or mailinglist
7         give feedback?
8         implement in exim
9         implement in SA
10         implement in rspamd
11 00_META
12         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13         http://www.blalert.com/dnsbls
14         http://www.dnsbl.info/dnsbl-list.php
15         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16         http://www.sdsc.edu/~jeff/spam/cbc.html
17         http://moensted.dk/spam/
18         https://whatismyipaddress.com/blacklist-check
19         https://multirbl.valli.org/
20         https://glockapps.com/blacklist/
21         https://docs.hetrixtools.com/monitored-blacklists/
22         https://www.blacklistmaster.com/
23         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24         https://github.com/zbetcheckin/DNSBLs
25         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26         https://www.impressionwise.com/kb/threats/rbl-advisories.html
27 00_ELANG
28         http://dnsbl.aspnet.hu/
29                 hungarian?
30         http://spam-rbl.fr/
31                 french
32         https://mav.com.br/
33                 maybe? they have antispam but it’s all portugese? or spanish? no idea
34 00_DEAD
35         http://openrbl.org/
36                 as seems dead
37                         404s
38                         wiki is down
39         http://mailhosts.org/
40                 dead
41                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
42         blitzed.org
43                 dead since 2006
44                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45                                 referenced ML post is 404
46         blackholes.five-ten-sg.com
47                 Offline as of 1/1/2013
48                         https://whatismyipaddress.com/five-ten-sg
49         dynip.rothen.com
50                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
52         fl.chickenboner.biz
53                 dead since 2011
54                         https://community.spiceworks.com/topic/329762-blacklist-removal
55                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56                 website contains spam/crap
57         http://cart00ney.surriel.com/
58                 cart00ney.org is dead
59         http://dsbl.org/
60                 points to surriel.com
61         http://csma.biz/
62                 domain is for sale
63                 dead since 2013
64                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
65         http://dnsbl.net.au/
66                 website contains info about living in australia? called "AusBlog"
67                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68         http://moensted.dk/spam/
69                 dead since 2010
70                 https://moensted.dk/spam/
71         http://rbl.mw-internet.net/
72                 domain was parked
73                 2023: it is an asian(?) gambling(?) website
74         http://www.blackholes.us/
75                 dead since 2009
76                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77         http://www.deadbeef.com/
78                 dead, no info
79         spamsources.dnsbl.info
80                 dead since 2011 or so
81                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
82         http://www.gweep.ca/
83                 domain dead, no other info
84         http://www.njabl.org/
85                 dead since 2013
86                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
87         http://wytnij.to/
88                 website parked, no other info
89         https://www.transip.nl/
90                 dead since 2013
91                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
92                         https://www.blalert.com/dnsbl/residential.block.transip.nl
93         pss.spambusters.org.ar
94                 NXDOMAIN
95         rbl.snark.net
96                 NXDOMAIN
97                 https://snark.net/ gives access denied
98         whois.rfc-ignorant.org
99                 NXDOMAIN
100                 rfc-ignorant.org registered but no A/AAAA record
101                 dead since 2012
102                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104         will-spam-for-food.eu.org
105                 unmaintained
106                 dead
107                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
108         http://proxybl.org/
109                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110                 https://linuxreviews.org/Mail_Spam_Blacklists
111                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
112         dev.null.dk
113                 timeout, also on the parent null.dk
114                 effectively dead
115         dnsbl.mags.net
116                 seems dead, no info to be found
117                 domain does not respond
118         http://msrbl.blogspot.ch/
119                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
120                 effectively dead
121         http://www.olsentech.net/
122                 strange content on web
123                 effectively dead
124         rbl.orbitrbl.com
125                 http://www.orbitrbl.com/
126                 timeout
127         rbl.polarcomm.net
128                 NXDOMAIN
129                 registered but no A/AAAA record
130         cidr.bl.mcafee.com
131                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
132                         404
133                 no info to be found
134                 dead?
135         http://anti-spam.org.cn/?locale=en_US
136                 unreachable DNS
137         rbl.talkactive.net
138                 seems dead
139                 talkactive.net redirects twice to some hosting company
140                 last listings in 2017
141                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
142                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
143         dnsbl.ipocalypse.net
144                 no policies published
145                 dead
146                         was a private list of an irc network
147                         network was renamed idlechat.net in 2014
148                         became a discord chat in 2022(?)
149         http://blakjak.net/RBL
150                 external access disabled
151                 2023: seems dead, website is a weird error
152                 https://www.blalert.com/dnsbl/rbl.blakjak.net
153                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154         http://cyberlogic.net/
155                 french (canada)
156                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158                 https://www.dnsbl.com/2018/05/
159                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160         http://www.rbl.jp/allrbl-e.html
161                 website asks for login or just errors
162         http://www.spamhauswhitelist.com/en/
163                 looks like a parked domain with ads
164         http://stopspam.org/rblcheck/index.php
165                 aka dul.pacifier.net
166                 http://www.stopspam.org/rbl-info/
167                         stopped in 2013
168         http://countries.nerd.dk/
169                 unable to connect, also for nerd.dk
170         http://dul.ru/dul.en.html
171                 DEAD for sale
172         http://dns.measurement-factory.com/surveys/openresolvers.html
173                 dead
174                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175         http://www.sectoor.de/tor.php
176                 timeouts
177         http://anticaptcha.net/
178                 for sale
179         http://blacklist.lashback.com/
180                 query zone: ubl.unsubscore.com
181                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182                 rsync URLs seem dead, so does the download url
183         http://blacklist.woody.ch/
184                 no entries in the displayed "top 100"
185                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186         http://cbl.abuseat.org/
187                 https://www.abuseat.org/
188                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189         http://dnsbl.burnt-tech.com/
190                 domain is for sale
191         http://rbl.dns-servicios.com/rbl.php
192                 website can not be found
193         http://spamcannibal.org/
194                 dead, as of at least 2018
195         http://st.technovision.dk/
196                 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197                         [December 8, 2021] This RBL has stopped responding to DNS queries.
198         http://spamstinks.com/
199                 cert is for generic hostname
200                 website shows some login form
201         http://virbl.bit.nl/
202                 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203                         January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204         http://www.blocklist.de/en/index.html
205                 lots of timeouts as of 2023
206                 forum link is dead, among others
207                 seems unmaintained but alive
208                 latest news is from 2016
209                 latest blog entry from 2022
210                         Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
212                 placeholder/parked?
213         http://www.leadmon.net/spamguard/
214                 website times out
215         http://www.srntools.com/blacklist/
216                 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
217         https://bl.konstant.no/
218                 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
219                         [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
220         https://www.megarbl.net/
221                 connection times out
222                 https://www.blalert.com/dnsbl/rbl.megarbl.net
223                         »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
224         https://www.kisarbl.or.kr/
225                 can’t find information about it
226                 website redirects to https://spam.kisa.or.kr/ which gives a 404
227         https://www.abuse.ch/
228                 old, defunct link: https://www.abuse.ch/?tag=httpbl
229                 does not seem to have a DNSBL (anymore)
230                         might be incorporated into spamhaus?
231                 does host other databases about threats
232         https://puck.nether.net/or/
233                 website is dead
234 00_NEEDS_RECHECK
235         https://antispam.imp.ch/
236                 no usage policy
237                 no return code info
238                 no good listing policy
239                 information received from inquiry to provider
240                         website will be updated
241                         return codes
242                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
243                                         127.0.1.8 = default
244                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
245                                         127.0.0.11 => REPO (Email reported as Spam by customer)
246                                 spamrbl.imp.ch (3 days holding time)
247                                         IPs are listed when trying to send mail to the spamtrap mailserver
248                                         MD5 hash: attachment sent to the swinog blacklist
249                                 wormrbl.imp.ch
250                                         DEAD
251         http://blacklist.woody.ch/rblcheck.php3
252                 dead?
253                 waiting for feedback
254         http://dnsbl.iip.lu/
255                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
256                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
257                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
258                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
259         http://dnsbl.inps.de/
260                 timeout
261                 https://www.dnsbl.com/search/label/dnsbl.inps.de
262                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
263                 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
264                         [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
265                 https://glockapps.com/blacklist/dnsbl-inps-de/
266                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
267                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
268                         This blacklist is offline as of May 1, 2020.
269                 https://web.archive.org/web/20220428013500/http://www.inps.de/
270 00_NEEDS_RESEARCH
271         bl.tiopan.com
272         blocked.hilli.dk
273         dialups.visi.com
274         dnsbl.antispam.or.id
275         dob.sibl.support-intelligence.net
276         intruders.docs.uu.se
277         map.spam-rbl.com
278         rbl.triumf.ca
279         all.s5h.net
280                 http://www.usenix.org.uk/content/rbl.html
281         torexit.dan.me.uk
282         http://pedantic.org/
283                 as of 20140701
284         rbl.fasthosts.co.uk
285                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
286                 seems dead?
287                 https://antispam.fasthosts.co.uk/
288 00_ALIVE
289         00_RECONSIDER
290                 http://barracudacentral.org/rbl
291                         requires account with extensive information (more than spamhaus e.g.):
292                                 your name.
293                                 your company name.
294                                 your phone number.
295                                 your address.
296                                 your city name.
297                                 your state/province name.
298                                 your zip/postal code.
299                                 the name of the alternate contact.
300                                 the phone number of the alternate contact.
301                                 the email address of the alternate contact.
302                         seems well documented
303         00_E_EVIL
304                 sbl.nszones.com
305                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
306                 http://www.backscatterer.org/
307                         questionable policy - pay for (quicker) delisting
308                         https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
309                                 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
310                         https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
311                                 in March 17, 2023 does not mention need to pay
312                         https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
313                                 recommend against using it
314                         https://whatismyipaddress.com/backscatterer
315                                 mentions strict delisting process and "express delisting" but nothing further
316                         https://bobcares.com/blog/backscatterer-blacklist/
317                                 goes through the process with screenshots showing express delisting for 109$
318                         https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
319                                 more opinions
320                         https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
321                                 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
322                         https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
323                                 another opinion
324         00_E_INFORMATION
325                 blacklist.sci.kun.nl
326                         https://cncz.science.ru.nl/en/howto/email-spam/
327                         not really its own DNSBL?
328                         no usage information
329                         no usage policy
330                 http://anonmails.de/
331                         seems serious but missing necessary info
332                                 usage policy
333                                 listing policy
334                 http://blacklist.jippg.org/
335                         no usage policy
336                         no listing policy
337                         no return code info
338                 bip.virusfree.cz
339                         used by rspamd
340                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
341                 https://www.nixspam.net/
342                         previously http://www.dnsbl.manitu.net/
343                         query zone: ix.dnsbl.manitu.net
344                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
345                         difficult to find info regarding listing policy
346                         asked for more information to be added
347                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
348                 access.redhawk.org
349                         website works but barely any info, not even how to query it
350                         https://www.redhawk.org/?p=64
351                         https://www.redhawk.org/SpamHawk/index.php
352                 https://senderscore.org/
353                         requires registration?
354                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
355                         https://senderscore.org/assess/blocklist-lookup/
356                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
357                         no information how to query found
358                 mail-abuse.org
359                         https://ers.trendmicro.com/
360                         trendmicro paid service
361                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
362                                 »If you don’t create an account, you can still query the reputation of an IP address«
363                         I don’t find any pricing or usage information
364                 http://dnsbl.tornevall.org/
365                         https://www.tornevall.net/
366                         related to https://www.fraudbl.org/
367                         seems a bit unstructured and not very well documented
368                                 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
369                         seems active
370                 http://rbl.schulte.org/
371                         seems active
372                         listing policy seems to be: they received spam from an IP
373                         usage policy: Anyone can use this RBL list [sic]
374                         return codes: probably boolean, i.e. either listed or not
375                 http://relaytest.kundenserver.de/
376                         by 1und1 (now ionos?), used internally
377                         https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
378                         no usage policy found
379                         no listing policy found
380                         no return code explanation found
381                 http://www.blockedservers.com/
382                         no usage policy
383                         no listing policy
384                         no documentation
385                         "funny":
386                                 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
387                 https://choon.net/dnsbl.php
388                         no usage policy or instructions
389                         no listing policy
390                         only automatic delisting after 30 days
391         00_E_PAID
392         00_E_PRIVATE
393                 88.blacklist.zap
394                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
395                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
396                         https://www.blalert.com/dnsbl/88.blacklist.zap
397                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
398                         https://www.dnsbl.com/search/label/frontbridge
399                 http://drmx.org/
400                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
401                 rbl.tdk.net
402                         tdk.net seems dead on http(s)
403                         private
404                                 https://www.blalert.com/dnsbl/rbl.tdk.net
405                         old link: http://postmaster.tdc.dk/publish.php?id=31787
406                                 tdc.dk redirects to yousee.dk
407                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
408                 rbl.zenon.net
409                         private
410                                 https://www.blalert.com/dnsbl/rbl.zenon.net
411                         http://www.noc.zenon.net/rbl/
412                         russian(?)
413                 https://ahbl.org/
414                         was public until 2015
415                         now private, invite-only
416         http://rfc-clueless.org/
417                 lists domains
418                         that do not adhere to common best practices or requirements
419                 does NOT list spammers!
420                 listing criteria are explained well
421                         http://rfc-clueless.org/pages/listing_policy
422                 return codes are explained
423                         http://rfc-clueless.org/
424                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
425                 many timeouts
426                         first noticed in 2014 and deactivated
427                         retried in 2023 and still the case
428         http://spameatingmonkey.com/
429                 lists IPs
430                         that sent backscatter
431                         that sent to spamtrap
432                         added by policy
433                                 this includes dial-up!
434                                 https://spameatingmonkey.com/faq/policy-based-listing
435                 lists domains/URIs
436                         by age
437                         in spam bodies
438                 usage policy seems clear
439                         https://spameatingmonkey.com/faq/query-limits
440                 listing policy seems clear
441                         https://spameatingmonkey.com/services
442                 return codes documented
443                         https://spameatingmonkey.com/services
444                 http://blogspambl.com/
445                         redirects to spameatingmonkey.com
446         http://uribl.com/
447                 lists domains/URIs
448                         that appear in spam bodies
449                         has whitelist
450                 lists IPs
451                         that URIs in spam bodies resolve to
452                 return codes are documented
453                         https://uribl.com/about.shtml#implementation
454                         bitmasked
455                         127.0.0.1 is used to signal abusive query behaviour
456         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
457                 called "hostkarma"
458                 lists domains/URIs
459                 lists IPs
460                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
461                 listing policy is documented
462                 return codes are documented
463                 seems very trustworthy
464         http://www.sorbs.net/
465                 good reputation
466                 lists domains/URIs
467                 lists IPs
468                 usage policy is clear that it’s free
469                 listing policy is documented
470                 return codes are documented
471                 seems trustworthy
472         http://www.spamhaus.org/
473                 good reputation
474                 very well done
475                 seems very professional
476                 lists domains/URIs
477                 lists IPs
478                 usage policy is clear
479                         https://www.spamhaus.org/organization/dnsblusage/
480                 listing policies are clearly documented
481                 return codes are clearly documented
482         http://www.surbl.org/
483                 good reputation
484                 lists domains/URIs
485                 usage policy is clear
486                         https://surbl.org/usage-policy
487                 listing policy is documented
488                 return codes are documented
489                         bitmasked
490                         127.0.0.1 means blocked
491         http://zapbl.net/
492                 lists domains/URIs
493                 lists IPs
494                 listing policy seems clear
495                         https://zapbl.net/policy
496                 usage policy seems clearly free for everyone
497                         https://zapbl.net/using
498                 return codes are documented
499                 seems well done
500         https://rbl.foobar.hu/
501                 lists domains/URIs
502                 lists IPs
503                 listing policy seems clear
504                 usage policy seems clearly free for everyone
505                 return codes are documented
506                 possibly unmaintained or dead
507                         footer says: ©2013-14
508         http://apews.org/?page=filter
509                 questionable
510                         https://www.dnsbl.com/search/label/apews
511                         https://whatismyipaddress.com/apews
512                 dead?
513                         no news on http://apews-user.blogspot.com/ since 2014
514                 not further looked into because of the above
515         https://www.dnswl.org/
516                 seems to be run with best intentions but has had issues from what I have heard from some users
517                 IRC channel has some activity
518                 usage policy relatively clear
519                         free within certain limits
520                 listing policy
521                         self-service
522                 return codes are documented
523         00_E_FOCUS
524                 https://www.dnsblchile.org/index.en.html
525                         chilenian spam so not interesting for me
526                         seems alive
527         00_LISTS_BLOGSPAMMERS
528                 https://www.madavi.de/madavibl/
529                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
530                 http://bsb.empty.us/
531                         does not exist anymore
532                         empty.us returns »Nothing here, obviously.«
533         00_LISTS_COUNTRIES
534                 korea
535                         http://korea.services.net/
536         00_LISTS_DIALUPS
537         00_LISTS_OPENRESOLVERS
538         00_LISTS_TORNODES
539                 https://www.dan.me.uk/dnsbl
540                 http://rbl.efnetrbl.org/
541                         aka http://tor.efnet.org/
542                         lists IPs
543                         lists open proxies, infected machines, tornodes, etc.
544         https://0spam.org/
545                 clear information on usage policy
546                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
547                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
548                 seems serious
549                 listing policies are a little less clear
550                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
551                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
552                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
553                 return codes not very clear
554         https://abuse.ro/
555                 policy
556                         spamtraps
557                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
558                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
559                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
560         http://dronebl.org/
561                 usage policy is clear: free for whatever
562                 listing policy is not quite so clear
563                         can be mostly inferred from the classes but not entirely clear IMHO
564                 has an IRC channel
565                 return codes
566                         not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
567         http://psbl.org/
568                 query zone: psbl.surriel.com
569                 no usage policy, but seems implied that usage is free
570                 listing policy
571                         no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
572                 return codes
573                         not documented, probably only boolean
574         http://rbldata.interserver.net/
575                 listing policy more or less clear
576                 usage policy not given but since usage is explained it’s probably free for all
577                 return codes seem to be binary, i.e. either listed or not
578                 lists IPs
579                 lists domains/URIs
580         http://rv-soft.info/
581                 usage policy not explicit but seems to be free
582                 listing policy also not explicit but can be inferred from return code explanation
583                 return codes are explained
584         http://spamrats.com/
585                 clear usage policy (ToS)
586                 listing policies documented
587                 return codes of aggregated list documented
588                 lists IPs
589         http://v4bl.org/
590                 usage policy documented
591                 listing policy not really clear
592                 return codes documented
593         http://wpbl.info/
594                 listing procedure is documented
595                 usage policy implied: free to use
596                 return codes documented
597         http://www.aupads.org/
598                 aka www.antispam-ufrj.pads.ufrj.br
599                 aka www.orve.org 
600                 listing policy more or less clear
601                 lists IPs and FQDNs
602                 usage policy seems clear: freely exported by anybody who wants to use them«
603         http://www.gbudb.com/truncate/
604                 listing policy
605                 usage policy seems implied: free use
606                 return codes documented
607                 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
608         http://www.justspam.org/
609                 listing policy documented
610                         warning: relies on listings in other DNSBLs! also for delisting!
611                 usage policy clear
612                 return codes: binary
613         http://www.kempt.net/dnsbl/
614                 listing policy documented
615                 usage policy documented
616                 return codes undocumented
617         http://www.spamcop.net/
618                 listing policy documented
619                         The SCBL is aggressive and often errs on the side of blocking mail
620                 usage policy is: free
621                 good reputation
622                 return codes documented
623         http://www.spamsources.fabel.dk/
624                 usage policy is: free
625                 listing policy seems clear
626                 lists IPs
627         http://www.uceprotect.net/en/index.php
628                 takes money for faster delisting
629                 listing policy is documented
630                 usage policy is documented: free
631                 a lot of drama
632                         https://www.heise.de/hintergrund/Spam-Golem-291396.html
633                                 german
634                                 also see comments
635                         https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
636                         https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
637                         https://uceprotect.wtf/
638                         https://www.aaroncake.net/misc/showthought.asp?thought=57
639                         https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
640                         https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
641                         https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
642                         http://kontech.net/uceprotect-blacklist-scheme-2020/
643         http://www.whitelisted.org/
644                 paid subscription
645                 policy on site
646                 related to uceprotect, see there
647         https://www.team-cymru.org/Services/Bogons/dns.html
648                 good reputation
649                 lists IPs
650                 does not list spammers but bogons
651                 clear listing policy
652                 usage policy not quite clear ATM
653                 return codes documented: binary
654         http://mailspike.net/usage.html
655                 reputation-based
656         http://www.isipp.com/email-accreditation/iadb-query-instruction/
657                 requires signup
658                 not quite a usage policy, but seems ok
659                 strange split of ipv4 and ipv6
660                 seems dead?