2 check and link (de)listing policy
3 NOGO: delisting for money
4 how long does automatic delisting take?
5 7d is already quite long
6 anything >7d seems excessive and should probably not be used
7 check and link usage policy
8 check and link return codes
9 find newsfeed or mailinglist
15 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
16 http://www.blalert.com/dnsbls
17 http://www.dnsbl.info/dnsbl-list.php
18 http://dnsbl.inps.de/index.cgi?lang=en&site=00002
19 http://www.sdsc.edu/~jeff/spam/cbc.html
20 http://moensted.dk/spam/
21 https://whatismyipaddress.com/blacklist-check
22 https://multirbl.valli.org/
23 https://glockapps.com/blacklist/
24 https://docs.hetrixtools.com/monitored-blacklists/
25 https://www.blacklistmaster.com/
26 https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
27 https://github.com/zbetcheckin/DNSBLs
28 https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
29 https://www.impressionwise.com/kb/threats/rbl-advisories.html
31 http://dnsbl.aspnet.hu/
36 maybe? they have antispam but it’s all portugese? or spanish? no idea
44 https://www.blalert.com/dnsbl/shortlist.mailhosts.org
47 https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
48 referenced ML post is 404
49 blackholes.five-ten-sg.com
50 Offline as of 1/1/2013
51 https://whatismyipaddress.com/five-ten-sg
53 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
54 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
57 https://community.spiceworks.com/topic/329762-blacklist-removal
58 https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
59 website contains spam/crap
60 http://cart00ney.surriel.com/
67 https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
69 website contains info about living in australia? called "AusBlog"
70 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
71 http://moensted.dk/spam/
73 https://moensted.dk/spam/
74 http://rbl.mw-internet.net/
76 2023: it is an asian(?) gambling(?) website
77 http://www.blackholes.us/
79 https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
80 http://www.deadbeef.com/
82 spamsources.dnsbl.info
84 http://www.dnsbl.info/spamsources-dnsbl-defunct.php
86 domain dead, no other info
89 https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
91 website parked, no other info
92 https://www.transip.nl/
94 https://www.blalert.com/dnsbl/proxy.block.transip.nl
95 https://www.blalert.com/dnsbl/residential.block.transip.nl
96 pss.spambusters.org.ar
100 https://snark.net/ gives access denied
101 whois.rfc-ignorant.org
103 rfc-ignorant.org registered but no A/AAAA record
105 http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
106 https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
107 will-spam-for-food.eu.org
110 https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
112 dead, seemingly written on http://proxybl.org/blog but that’s also dead
113 https://linuxreviews.org/Mail_Spam_Blacklists
114 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
116 timeout, also on the parent null.dk
119 seems dead, no info to be found
120 domain does not respond
121 http://msrbl.blogspot.ch/
122 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
124 http://www.olsentech.net/
125 strange content on web
128 http://www.orbitrbl.com/
132 registered but no A/AAAA record
134 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
138 http://anti-spam.org.cn/?locale=en_US
142 talkactive.net redirects twice to some hosting company
143 last listings in 2017
144 https://multirbl.valli.org/detail/rbl.talkactive.net.html
145 https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
147 no policies published
149 was a private list of an irc network
150 network was renamed idlechat.net in 2014
151 became a discord chat in 2022(?)
152 http://blakjak.net/RBL
153 external access disabled
154 2023: seems dead, website is a weird error
155 https://www.blalert.com/dnsbl/rbl.blakjak.net
156 This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
157 http://cyberlogic.net/
159 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
160 On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
161 https://www.dnsbl.com/2018/05/
162 As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
163 http://www.rbl.jp/allrbl-e.html
164 website asks for login or just errors
165 http://www.spamhauswhitelist.com/en/
166 looks like a parked domain with ads
167 http://stopspam.org/rblcheck/index.php
169 http://www.stopspam.org/rbl-info/
171 http://countries.nerd.dk/
172 unable to connect, also for nerd.dk
173 http://dul.ru/dul.en.html
175 http://dns.measurement-factory.com/surveys/openresolvers.html
177 »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
178 http://www.sectoor.de/tor.php
180 http://anticaptcha.net/
182 http://blacklist.lashback.com/
183 query zone: ubl.unsubscore.com
184 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
185 rsync URLs seem dead, so does the download url
186 http://blacklist.woody.ch/
187 no entries in the displayed "top 100"
188 may have been absorbed into the swinog blacklists, see antispam.imp.ch
189 http://cbl.abuseat.org/
190 https://www.abuseat.org/
191 changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
192 http://dnsbl.burnt-tech.com/
194 http://rbl.dns-servicios.com/rbl.php
195 website can not be found
196 http://spamcannibal.org/
197 dead, as of at least 2018
198 http://st.technovision.dk/
199 https://docs.hetrixtools.com/st-technovision-dk-inactive-removed/
200 [December 8, 2021] This RBL has stopped responding to DNS queries.
201 http://spamstinks.com/
202 cert is for generic hostname
203 website shows some login form
205 https://www.rollernet.us/2017/01/shutdown-of-virbl-dnsbl-bit-nl/
206 January 23, 2017: »The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future.«
207 http://www.blocklist.de/en/index.html
208 lots of timeouts as of 2023
209 forum link is dead, among others
210 seems unmaintained but alive
211 latest news is from 2016
212 latest blog entry from 2022
213 Abusix, a network security company for mail security and abuse report handling, takes over blocklist.de to integrate it within its Abusix platform to further improve its data quality.
214 http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
216 http://www.leadmon.net/spamguard/
218 http://www.srntools.com/blacklist/
219 redirects to comodo.com subdomain where I can’t find any information about a DNSBL
220 https://bl.konstant.no/
221 https://docs.hetrixtools.com/bl-konstant-no-unresponsive-removed/
222 [July 29, 2022] This RBL has become unresponsive, and we’ve removed it from our system until it returns to functioning normally again.
223 https://www.megarbl.net/
225 https://www.blalert.com/dnsbl/rbl.megarbl.net
226 »This blacklist is marked as inactive and is not being checked at the moment. We will be tracking it to see if it goes to normal again.«
227 https://www.kisarbl.or.kr/
228 can’t find information about it
229 website redirects to https://spam.kisa.or.kr/ which gives a 404
230 https://www.abuse.ch/
231 old, defunct link: https://www.abuse.ch/?tag=httpbl
232 does not seem to have a DNSBL (anymore)
233 might be incorporated into spamhaus?
234 does host other databases about threats
235 https://puck.nether.net/or/
238 https://antispam.imp.ch/
241 no good listing policy
242 information received from inquiry to provider
243 website will be updated
245 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
247 127.0.0.10 => TRAP (Email sent to a spamtrap)
248 127.0.0.11 => REPO (Email reported as Spam by customer)
249 spamrbl.imp.ch (3 days holding time)
250 IPs are listed when trying to send mail to the spamtrap mailserver
251 MD5 hash: attachment sent to the swinog blacklist
254 http://blacklist.woody.ch/rblcheck.php3
258 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
259 in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
260 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
261 This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
262 http://dnsbl.inps.de/
264 https://www.dnsbl.com/search/label/dnsbl.inps.de
265 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
266 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
267 [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
268 https://glockapps.com/blacklist/dnsbl-inps-de/
269 Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
270 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
271 This blacklist is offline as of May 1, 2020.
272 https://web.archive.org/web/20220428013500/http://www.inps.de/
278 dob.sibl.support-intelligence.net
283 http://www.usenix.org.uk/content/rbl.html
288 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
290 https://antispam.fasthosts.co.uk/
293 http://barracudacentral.org/rbl
294 requires account with extensive information (more than spamhaus e.g.):
300 your state/province name.
301 your zip/postal code.
302 the name of the alternate contact.
303 the phone number of the alternate contact.
304 the email address of the alternate contact.
305 seems well documented
308 http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
309 http://www.backscatterer.org/
310 questionable policy - pay for (quicker) delisting
311 https://support.hornetsecurity.com/hc/en-us/articles/360011880797-Why-are-Hornetsecurity-IP-addresses-listed-at-Backscatterer-
312 as of December 29, 2021: »The removal at the blacklist backscatterer.org can only be done for a fee«
313 https://www.warmy.io/blog/backscatterer-blacklist-how-to-remove-your-ip-from-it
314 in March 17, 2023 does not mention need to pay
315 https://support.forcepoint.com/s/article/Forcepoint-IP-s-blocklisted-by-UCEProtect-and-Backscatterer-org
316 recommend against using it
317 https://whatismyipaddress.com/backscatterer
318 mentions strict delisting process and "express delisting" but nothing further
319 https://bobcares.com/blog/backscatterer-blacklist/
320 goes through the process with screenshots showing express delisting for 109$
321 https://community.cisco.com/t5/email-security/issues-with-www-backscatterer-org-any-one/td-p/1298377
323 https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/
324 Jan 17th, 2020: »UCEProtect also charges a delisting fee. TitanHQ discourages email administrators from using the UCEProtect blacklist and we do not recommend paying for list removal«
325 https://web.archive.org/web/20150320180344/http://www.jvfconsulting.com/blog/130/Backscatterer_Network_Spam_List_Is_Another_UCEPROTECT_Extortion_Scam.html
329 https://cncz.science.ru.nl/en/howto/email-spam/
330 not really its own DNSBL?
334 seems serious but missing necessary info
337 http://blacklist.jippg.org/
343 https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
344 https://www.nixspam.net/
345 previously http://www.dnsbl.manitu.net/
346 query zone: ix.dnsbl.manitu.net
347 provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
348 difficult to find info regarding listing policy
349 asked for more information to be added
350 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
352 website works but barely any info, not even how to query it
353 https://www.redhawk.org/?p=64
354 https://www.redhawk.org/SpamHawk/index.php
355 https://senderscore.org/
356 requires registration?
357 Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
358 https://senderscore.org/assess/blocklist-lookup/
359 FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
360 no information how to query found
362 https://ers.trendmicro.com/
363 trendmicro paid service
364 https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
365 »If you don’t create an account, you can still query the reputation of an IP address«
366 I don’t find any pricing or usage information
367 http://dnsbl.tornevall.org/
368 https://www.tornevall.net/
369 related to https://www.fraudbl.org/
370 seems a bit unstructured and not very well documented
371 I can’t be arsed to deal with confluence slowing my browser to a halt repeatedly and it’s really hard to navigate but there seems to be some information on https://docs.tornevall.net/display/TORNEVALL/Endpoint%3A+dnsbl+-+DNSBL+v5+with+API+v3
373 http://rbl.schulte.org/
375 listing policy seems to be: they received spam from an IP
376 usage policy: Anyone can use this RBL list [sic]
377 return codes: probably boolean, i.e. either listed or not
378 http://relaytest.kundenserver.de/
379 by 1und1 (now ionos?), used internally
380 https://www.blalert.com/dnsbl/relays.bl.kundenserver.de
381 no usage policy found
382 no listing policy found
383 no return code explanation found
384 http://www.blockedservers.com/
389 No rights given; all rights are in the dumpster; Copyleft 2012 - 3013 - page generated in 0.009843111038208 secs
390 https://choon.net/dnsbl.php
391 no usage policy or instructions
393 only automatic delisting after 30 days
397 http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
398 https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
399 https://www.blalert.com/dnsbl/88.blacklist.zap
400 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
401 https://www.dnsbl.com/search/label/frontbridge
403 »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
405 tdk.net seems dead on http(s)
407 https://www.blalert.com/dnsbl/rbl.tdk.net
408 old link: http://postmaster.tdc.dk/publish.php?id=31787
409 tdc.dk redirects to yousee.dk
410 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
413 https://www.blalert.com/dnsbl/rbl.zenon.net
414 http://www.noc.zenon.net/rbl/
417 was public until 2015
418 now private, invite-only
419 http://rfc-clueless.org/
421 that do not adhere to common best practices or requirements
422 does NOT list spammers!
423 listing criteria are explained well
424 http://rfc-clueless.org/pages/listing_policy
425 return codes are explained
426 http://rfc-clueless.org/
427 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
429 first noticed in 2014 and deactivated
430 retried in 2023 and still the case
431 http://spameatingmonkey.com/
433 that sent backscatter
434 that sent to spamtrap
436 this includes dial-up!
437 https://spameatingmonkey.com/faq/policy-based-listing
441 usage policy seems clear
442 https://spameatingmonkey.com/faq/query-limits
443 listing policy seems clear
444 https://spameatingmonkey.com/services
445 return codes documented
446 https://spameatingmonkey.com/services
447 http://blogspambl.com/
448 redirects to spameatingmonkey.com
451 that appear in spam bodies
454 that URIs in spam bodies resolve to
455 return codes are documented
456 https://uribl.com/about.shtml#implementation
458 127.0.0.1 is used to signal abusive query behaviour
459 http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
463 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
464 listing policy is documented
465 return codes are documented
466 seems very trustworthy
467 http://www.sorbs.net/
471 usage policy is clear that it’s free
472 listing policy is documented
473 return codes are documented
475 http://www.spamhaus.org/
478 seems very professional
481 usage policy is clear
482 https://www.spamhaus.org/organization/dnsblusage/
483 listing policies are clearly documented
484 return codes are clearly documented
485 history of grandeur and retaliation listings
486 https://www.heise.de/hintergrund/Spam-Golem-291396.html
487 http://www.surbl.org/
490 usage policy is clear
491 https://surbl.org/usage-policy
492 listing policy is documented
493 return codes are documented
495 127.0.0.1 means blocked
499 listing policy seems clear
500 https://zapbl.net/policy
501 usage policy seems clearly free for everyone
502 https://zapbl.net/using
503 return codes are documented
505 https://rbl.foobar.hu/
508 listing policy seems clear
509 usage policy seems clearly free for everyone
510 return codes are documented
511 possibly unmaintained or dead
512 footer says: ©2013-14
513 http://apews.org/?page=filter
515 https://www.dnsbl.com/search/label/apews
516 https://whatismyipaddress.com/apews
518 no news on http://apews-user.blogspot.com/ since 2014
519 not further looked into because of the above
520 https://www.dnswl.org/
521 seems to be run with best intentions but has had issues from what I have heard from some users
522 IRC channel has some activity
523 usage policy relatively clear
524 free within certain limits
527 return codes are documented
529 https://www.dnsblchile.org/index.en.html
530 chilenian spam so not interesting for me
532 00_LISTS_BLOGSPAMMERS
533 https://www.madavi.de/madavibl/
534 »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
536 does not exist anymore
537 empty.us returns »Nothing here, obviously.«
540 http://korea.services.net/
542 00_LISTS_OPENRESOLVERS
544 https://www.dan.me.uk/dnsbl
545 http://rbl.efnetrbl.org/
546 aka http://tor.efnet.org/
548 lists open proxies, infected machines, tornodes, etc.
550 clear information on usage policy
551 Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
552 DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
554 listing policies are a little less clear
555 bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
556 nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
557 url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
558 return codes not very clear
562 The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
563 Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
564 Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
566 usage policy is clear: free for whatever
567 listing policy is not quite so clear
568 can be mostly inferred from the classes but not entirely clear IMHO
571 not explicitly mentioned but it’s 127.0.0.X where X is the class from https://dronebl.org/classes
573 query zone: psbl.surriel.com
574 no usage policy, but seems implied that usage is free
576 no explicit, complete policy given but sending to spamtraps is mentioned to get you listed and seems the exclusive mechanism
578 not documented, probably only boolean
579 http://rbldata.interserver.net/
580 listing policy more or less clear
581 usage policy not given but since usage is explained it’s probably free for all
582 return codes seem to be binary, i.e. either listed or not
586 usage policy not explicit but seems to be free
587 listing policy also not explicit but can be inferred from return code explanation
588 return codes are explained
590 clear usage policy (ToS)
591 listing policies documented
592 return codes of aggregated list documented
595 usage policy documented
596 listing policy not really clear
597 return codes documented
599 listing procedure is documented
600 usage policy implied: free to use
601 return codes documented
602 http://www.aupads.org/
603 aka www.antispam-ufrj.pads.ufrj.br
605 listing policy more or less clear
607 usage policy seems clear: freely exported by anybody who wants to use them«
608 http://www.gbudb.com/truncate/
610 usage policy seems implied: free use
611 return codes documented
612 »Truncate is very conservative. On most systems it can be safely used to reject connections!«
613 http://www.justspam.org/
614 listing policy documented
615 warning: relies on listings in other DNSBLs! also for delisting!
618 http://www.kempt.net/dnsbl/
619 listing policy documented
620 usage policy documented
621 return codes undocumented
622 http://www.spamcop.net/
623 listing policy documented
624 The SCBL is aggressive and often errs on the side of blocking mail
625 usage policy is: free
627 return codes documented
628 http://www.spamsources.fabel.dk/
629 usage policy is: free
630 listing policy seems clear
632 http://www.uceprotect.net/en/index.php
633 takes money for faster delisting
634 listing policy is documented
635 usage policy is documented: free
637 https://www.heise.de/hintergrund/Spam-Golem-291396.html
640 https://news.admin.net-abuse.email.narkive.com/boJTu7JC/claus-v-wolfhausen-harasement
641 https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted
642 https://uceprotect.wtf/
643 https://www.aaroncake.net/misc/showthought.asp?thought=57
644 https://www.dnsbl.com/search/label/claus%20v.%20wolfhausen
645 https://wordtothewise.com/2018/06/another-day-another-dead-blacklist/
646 https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam
647 http://kontech.net/uceprotect-blacklist-scheme-2020/
648 http://www.whitelisted.org/
651 related to uceprotect, see there
652 https://www.team-cymru.org/Services/Bogons/dns.html
655 does not list spammers but bogons
657 usage policy not quite clear ATM
658 return codes documented: binary
659 http://mailspike.net/usage.html
661 response codes according to their reputation, both positive and negative
662 listing policy documented
663 usage policy documented
664 https://www.isipp.com/for-isps/iadb-query/
665 usage policy seems clear: It is free to query all of the IADB, IADB2, and WADB.
666 not quite a whitelist but closer to whitelist than blacklist
667 listing policy seems to be: get certified by them (for a fee) https://www.isipp.com/email-accreditation/faq/#pricing
668 response codes are documented