2 check and link (de)listing policy
3 NOGO: delisting for money
4 check and link usage policy
5 check and link return codes
6 find newsfeed or mailinglist
12 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
13 http://www.blalert.com/dnsbls
14 http://www.dnsbl.info/dnsbl-list.php
15 http://dnsbl.inps.de/index.cgi?lang=en&site=00002
16 http://www.sdsc.edu/~jeff/spam/cbc.html
17 http://moensted.dk/spam/
18 https://whatismyipaddress.com/blacklist-check
19 https://multirbl.valli.org/
20 https://glockapps.com/blacklist/
21 https://docs.hetrixtools.com/monitored-blacklists/
22 https://www.blacklistmaster.com/
23 https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
24 https://github.com/zbetcheckin/DNSBLs
25 https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
26 https://www.impressionwise.com/kb/threats/rbl-advisories.html
28 http://dnsbl.aspnet.hu/
33 maybe? they have antispam but it’s all portugese? or spanish? no idea
41 https://www.blalert.com/dnsbl/shortlist.mailhosts.org
44 https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
45 referenced ML post is 404
46 blackholes.five-ten-sg.com
47 Offline as of 1/1/2013
48 https://whatismyipaddress.com/five-ten-sg
50 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
51 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
54 https://community.spiceworks.com/topic/329762-blacklist-removal
55 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
56 website contains spam/crap
57 http://cart00ney.surriel.com/
64 https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
66 website contains info about living in australia? called "AusBlog"
67 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
68 http://moensted.dk/spam/
70 https://moensted.dk/spam/
71 http://rbl.mw-internet.net/
73 2023: it is an asian(?) gambling(?) website
74 http://www.blackholes.us/
76 https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
77 http://www.deadbeef.com/
79 spamsources.dnsbl.info
81 http://www.dnsbl.info/spamsources-dnsbl-defunct.php
83 domain dead, no other info
86 https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
88 website parked, no other info
89 https://www.transip.nl/
91 https://www.blalert.com/dnsbl/proxy.block.transip.nl
92 https://www.blalert.com/dnsbl/residential.block.transip.nl
93 pss.spambusters.org.ar
97 https://snark.net/ gives access denied
98 whois.rfc-ignorant.org
100 rfc-ignorant.org registered but no A/AAAA record
102 http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
103 https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
104 will-spam-for-food.eu.org
107 https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
109 dead, seemingly written on http://proxybl.org/blog but that’s also dead
110 https://linuxreviews.org/Mail_Spam_Blacklists
111 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
113 timeout, also on the parent null.dk
116 seems dead, no info to be found
117 domain does not respond
118 http://msrbl.blogspot.ch/
119 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
121 http://www.olsentech.net/
122 strange content on web
125 http://www.orbitrbl.com/
129 registered but no A/AAAA record
131 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
135 http://anti-spam.org.cn/?locale=en_US
139 talkactive.net redirects twice to some hosting company
140 last listings in 2017
141 https://multirbl.valli.org/detail/rbl.talkactive.net.html
142 https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
144 no policies published
146 was a private list of an irc network
147 network was renamed idlechat.net in 2014
148 became a discord chat in 2022(?)
149 http://blakjak.net/RBL
150 external access disabled
151 2023: seems dead, website is a weird error
152 https://www.blalert.com/dnsbl/rbl.blakjak.net
153 This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
154 http://cyberlogic.net/
156 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
157 On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
158 https://www.dnsbl.com/2018/05/
159 As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
160 http://www.rbl.jp/allrbl-e.html
161 website asks for login or just errors
162 http://www.spamhauswhitelist.com/en/
163 looks like a parked domain with ads
164 http://stopspam.org/rblcheck/index.php
166 http://www.stopspam.org/rbl-info/
168 http://countries.nerd.dk/
169 unable to connect, also for nerd.dk
170 http://dul.ru/dul.en.html
172 http://dns.measurement-factory.com/surveys/openresolvers.html
174 »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
175 http://www.sectoor.de/tor.php
177 http://anticaptcha.net/
179 http://blacklist.lashback.com/
180 query zone: ubl.unsubscore.com
181 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
182 rsync URLs seem dead, so does the download url
183 http://blacklist.woody.ch/
184 no entries in the displayed "top 100"
185 may have been absorbed into the swinog blacklists, see antispam.imp.ch
186 http://cbl.abuseat.org/
187 https://www.abuseat.org/
188 changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
189 http://dnsbl.burnt-tech.com/
191 http://rbl.dns-servicios.com/rbl.php
192 website can not be found
193 http://spamcannibal.org/
194 dead, as of at least 2018
195 http://st.technovision.dk/
196 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
197 [December 8, 2021] This RBL has stopped responding to DNS queries.
198 http://spamstinks.com/
199 cert is for generic hostname
200 website shows some login form
202 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
203 January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
204 http://www.blocklist.de/en/index.html
205 lots of timeouts as of 2023
206 forum link is dead, among others
207 seems unmaintained but alive
208 latest news is from 2016
209 latest blog entry from 2022
210 Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
211 http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
213 http://www.leadmon.net/spamguard/
215 http://www.srntools.com/blacklist/
216 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
217 https://bl.konstant.no/
218 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
219 [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
220 https://www.megarbl.net/
222 https://www.blalert.com/dnsbl/rbl.megarbl.net
223 »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
224 https://www.kisarbl.or.kr/
225 can’t find information about it
226 website redirects to https://spam.kisa.or.kr/ which gives a 404
227 https://www.abuse.ch/
228 old, defunct link: https://www.abuse.ch/?tag=httpbl
229 does not seem to have a DNSBL (anymore)
230 might be incorporated into spamhaus?
231 does host other databases about threats
232 https://puck.nether.net/or/
235 https://antispam.imp.ch/
238 no good listing policy
239 information received from inquiry to provider
240 website will be updated
242 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
244 127.0.0.10 => TRAP (Email sent to a spamtrap)
245 127.0.0.11 => REPO (Email reported as Spam by customer)
246 spamrbl.imp.ch (3 days holding time)
247 IPs are listed when trying to send mail to the spamtrap mailserver
248 MD5 hash: attachment sent to the swinog blacklist
251 http://blacklist.woody.ch/rblcheck.php3
255 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
256 in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
257 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
258 This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
259 http://dnsbl.inps.de/
261 https://www.dnsbl.com/search/label/dnsbl.inps.de
262 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
263 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
264 [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
265 https://glockapps.com/blacklist/dnsbl-inps-de/
266 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
267 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
268 This blacklist is offline as of May 1, 2020.
269 https://web.archive.org/web/20220428013500/http://www.inps.de/
275 dob.sibl.support-intelligence.net
280 http://www.usenix.org.uk/content/rbl.html
285 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
287 https://antispam.fasthosts.co.uk/
290 http://barracudacentral.org/rbl
291 requires account with extensive information (more than spamhaus e.g.):
297 your state/province name.
298 your zip/postal code.
299 the name of the alternate contact.
300 the phone number of the alternate contact.
301 the email address of the alternate contact.
302 seems well documented
305 http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
306 http://www.backscatterer.org/
307 questionable policy - pay for (quicker) delisting
308 https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
309 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
310 https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
311 in March 17, 2023 does not mention need to pay
312 https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
313 recommend against using it
314 https://whatismyipaddress.com/backscatterer
315 mentions strict delisting process and "express delisting" but nothing further
316 https://bobcares.com/blog/backscatterer-blacklist/
317 goes through the process with screenshots showing express delisting for 109$
318 https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
320 https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
321 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
322 https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
326 https://cncz.science.ru.nl/en/howto/email-spam/
327 not really its own DNSBL?
331 seems serious but missing necessary info
334 http://blacklist.jippg.org/
340 https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
341 https://www.nixspam.net/
342 previously http://www.dnsbl.manitu.net/
343 query zone: ix.dnsbl.manitu.net
344 provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
345 difficult to find info regarding listing policy
346 asked for more information to be added
347 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
349 website works but barely any info, not even how to query it
350 https://www.redhawk.org/?p=64
351 https://www.redhawk.org/SpamHawk/index.php
352 https://senderscore.org/
353 requires registration?
354 Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
355 https://senderscore.org/assess/blocklist-lookup/
356 FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
357 no information how to query found
359 https://ers.trendmicro.com/
360 trendmicro paid service
361 https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
362 »If you don’t create an account, you can still query the reputation of an IP address«
363 I don’t find any pricing or usage information
364 http://dnsbl.tornevall.org/
365 https://www.tornevall.net/
366 related to https://www.fraudbl.org/
367 seems a bit unstructured and not very well documented
368 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
370 http://rbl.schulte.org/
372 listing policy seems to be: they received spam from an IP
373 usage policy: Anyone can use this RBL list [sic]
374 return codes: probably boolean, i.e. either listed or not
375 http://relaytest.kundenserver.de/
376 by 1und1 (now ionos?), used internally
377 https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
378 no usage policy found
379 no listing policy found
380 no return code explanation found
381 http://www.blockedservers.com/
386 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
387 https://choon.net/dnsbl.php
388 no usage policy or instructions
390 only automatic delisting after 30 days
394 http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
395 https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
396 https://www.blalert.com/dnsbl/88.blacklist.zap
397 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
398 https://www.dnsbl.com/search/label/frontbridge
400 »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
402 tdk.net seems dead on http(s)
404 https://www.blalert.com/dnsbl/rbl.tdk.net
405 old link: http://postmaster.tdc.dk/publish.php?id=31787
406 tdc.dk redirects to yousee.dk
407 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
410 https://www.blalert.com/dnsbl/rbl.zenon.net
411 http://www.noc.zenon.net/rbl/
414 was public until 2015
415 now private, invite-only
416 http://rfc-clueless.org/
418 that do not adhere to common best practices or requirements
419 does NOT list spammers!
420 listing criteria are explained well
421 http://rfc-clueless.org/pages/listing_policy
422 return codes are explained
423 http://rfc-clueless.org/
424 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
426 first noticed in 2014 and deactivated
427 retried in 2023 and still the case
428 http://spameatingmonkey.com/
430 that sent backscatter
431 that sent to spamtrap
433 this includes dial-up!
434 https://spameatingmonkey.com/faq/policy-based-listing
438 usage policy seems clear
439 https://spameatingmonkey.com/faq/query-limits
440 listing policy seems clear
441 https://spameatingmonkey.com/services
442 return codes documented
443 https://spameatingmonkey.com/services
444 http://blogspambl.com/
445 redirects to spameatingmonkey.com
448 that appear in spam bodies
451 that URIs in spam bodies resolve to
452 return codes are documented
453 https://uribl.com/about.shtml#implementation
455 127.0.0.1 is used to signal abusive query behaviour
456 http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
460 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
461 listing policy is documented
462 return codes are documented
463 seems very trustworthy
464 http://www.sorbs.net/
468 usage policy is clear that it’s free
469 listing policy is documented
470 return codes are documented
472 http://www.spamhaus.org/
475 seems very professional
478 usage policy is clear
479 https://www.spamhaus.org/organization/dnsblusage/
480 listing policies are clearly documented
481 return codes are clearly documented
482 http://www.surbl.org/
485 usage policy is clear
486 https://surbl.org/usage-policy
487 listing policy is documented
488 return codes are documented
490 127.0.0.1 means blocked
494 listing policy seems clear
495 https://zapbl.net/policy
496 usage policy seems clearly free for everyone
497 https://zapbl.net/using
498 return codes are documented
500 https://rbl.foobar.hu/
503 listing policy seems clear
504 usage policy seems clearly free for everyone
505 return codes are documented
506 possibly unmaintained or dead
507 footer says: ©2013-14
508 http://apews.org/?page=filter
510 https://www.dnsbl.com/search/label/apews
511 https://whatismyipaddress.com/apews
513 no news on http://apews-user.blogspot.com/ since 2014
514 not further looked into because of the above
515 https://www.dnswl.org/
516 seems to be run with best intentions but has had issues from what I have heard from some users
517 IRC channel has some activity
518 usage policy relatively clear
519 free within certain limits
522 return codes are documented
524 https://www.dnsblchile.org/index.en.html
525 chilenian spam so not interesting for me
527 00_LISTS_BLOGSPAMMERS
528 https://www.madavi.de/madavibl/
529 »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
531 does not exist anymore
532 empty.us returns »Nothing here, obviously.«
535 http://korea.services.net/
537 00_LISTS_OPENRESOLVERS
539 https://www.dan.me.uk/dnsbl
540 http://rbl.efnetrbl.org/
541 aka http://tor.efnet.org/
543 lists open proxies, infected machines, tornodes, etc.
545 clear information on usage policy
546 Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
547 DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
549 listing policies are a little less clear
550 bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
551 nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
552 url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
553 return codes not very clear
557 The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
558 Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
559 Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
561 usage policy is clear: free for whatever
562 listing policy is not quite so clear
563 can be mostly inferred from the classes but not entirely clear IMHO
566 not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
568 query zone: psbl.surriel.com
569 no usage policy, but seems implied that usage is free
571 no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
573 not documented, probably only boolean
574 http://rbldata.interserver.net/
575 listing policy more or less clear
576 usage policy not given but since usage is explained it’s probably free for all
577 return codes seem to be binary, i.e. either listed or not
581 usage policy not explicit but seems to be free
582 listing policy also not explicit but can be inferred from return code explanation
583 return codes are explained
585 clear usage policy (ToS)
586 listing policies documented
587 return codes of aggregated list documented
590 usage policy documented
591 listing policy not really clear
592 return codes documented
594 listing procedure is documented
595 usage policy implied: free to use
596 return codes documented
597 http://www.aupads.org/
598 aka www.antispam-ufrj.pads.ufrj.br
600 listing policy more or less clear
602 usage policy seems clear: freely exported by anybody who wants to use them«
603 http://www.gbudb.com/truncate/
605 usage policy seems implied: free use
606 return codes documented
607 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
608 http://www.justspam.org/
609 listing policy documented
610 warning: relies on listings in other DNSBLs! also for delisting!
613 http://www.kempt.net/dnsbl/
614 listing policy documented
615 usage policy documented
616 return codes undocumented
617 http://www.spamcop.net/
618 listing policy documented
619 The SCBL is aggressive and often errs on the side of blocking mail
620 usage policy is: free
622 return codes documented
623 http://www.spamsources.fabel.dk/
624 usage policy is: free
625 listing policy seems clear
627 http://www.uceprotect.net/en/index.php
628 takes money for faster delisting
629 listing policy is documented
630 usage policy is documented: free
632 https://www.heise.de/hintergrund/Spam-Golem-291396.html
635 https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
636 https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
637 https://uceprotect.wtf/
638 https://www.aaroncake.net/misc/showthought.asp?thought=57
639 https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
640 https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
641 https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
642 http://kontech.net/uceprotect-blacklist-scheme-2020/
643 http://www.whitelisted.org/
646 related to uceprotect, see there
647 https://www.team-cymru.org/Services/Bogons/dns.html
650 does not list spammers but bogons
652 usage policy not quite clear ATM
653 return codes documented: binary
654 http://mailspike.net/usage.html
656 http://www.isipp.com/email-accreditation/iadb-query-instruction/
658 not quite a usage policy, but seems ok
659 strange split of ipv4 and ipv6