dnslists.otl

   1 TODO
   2         check and link (de)listing policy
   3                 NOGO: delisting for money
   4         check and link usage policy
   5         check and link return codes
   6         find newsfeed or mailinglist
   7         give feedback?
   8         implement in exim
   9         implement in SA
  10         implement in rspamd
  11 00_META
  12         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  13         http://www.blalert.com/dnsbls
  14         http://www.dnsbl.info/dnsbl-list.php
  15         http://dnsbl.inps.de/index.cgi?lang=en&site=00002
  16         http://www.sdsc.edu/~jeff/spam/cbc.html
  17         http://moensted.dk/spam/
  18         https://whatismyipaddress.com/blacklist-check
  19         https://multirbl.valli.org/
  20         https://glockapps.com/blacklist/
  21         https://docs.hetrixtools.com/monitored-blacklists/
  22         https://www.blacklistmaster.com/
  23         https://knowledge.validity.com/hc/en-us/sections/204468388-Blocklists
  24         https://github.com/zbetcheckin/DNSBLs
  25         https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists
  26 00_ELANG
  27         http://dnsbl.aspnet.hu/
  28                 hungarian?
  29         http://spam-rbl.fr/
  30                 french
  31         https://mav.com.br/
  32                 maybe? they have antispam but it’s all portugese? or spanish? no idea
  33 00_DEAD
  34         http://openrbl.org/
  35                 as seems dead
  36                         404s
  37                         wiki is down
  38         http://mailhosts.org/
  39                 dead
  40                         https://www.blalert.com/dnsbl/shortlist.mailhosts.org
  41         blitzed.org
  42                 dead since 2006
  43                         https://www.dnsbl.com/2007/02/status-of-opmblitzedorg-dead.html
  44                                 referenced ML post is 404
  45         blackholes.five-ten-sg.com
  46                 Offline as of 1/1/2013
  47                         https://whatismyipaddress.com/five-ten-sg
  48         dynip.rothen.com
  49                 On 9/29/2020 the ROTHEN blacklist appears to have started to list the entire internet
  50                         https://www.dnsbl.info/dnsbl-details.php?dnsbl=dynip.rothen.com
  51         fl.chickenboner.biz
  52                 dead since 2011
  53                         https://community.spiceworks.com/topic/329762-blacklist-removal
  54                         https://bugs.launchpad.net/ubuntu/+source/amispammer/+bug/835614
  55                 website contains spam/crap
  56         http://cart00ney.surriel.com/
  57                 cart00ney.org is dead
  58         http://dsbl.org/
  59                 points to surriel.com
  60         http://csma.biz/
  61                 domain is for sale
  62                 dead since 2013
  63                         https://www.dnsbl.com/2013/02/status-of-blcsmabiz-dead.html
  64         http://dnsbl.net.au/
  65                 website contains info about living in australia? called "AusBlog"
  66                 http://www.dnsbl.com/2009/04/status-of-dnsblnetau-dead.html
  67         http://moensted.dk/spam/
  68                 dead since 2010
  69                 https://moensted.dk/spam/
  70         http://rbl.mw-internet.net/
  71                 domain was parked
  72                 2023: it is an asian(?) gambling(?) website
  73         http://www.blackholes.us/
  74                 dead since 2009
  75                         https://www.dnsbl.com/2009/10/status-of-blackholesus-dead.html
  76         http://www.deadbeef.com/
  77                 dead, no info
  78         spamsources.dnsbl.info
  79                 dead since 2011 or so
  80                         http://www.dnsbl.info/spamsources-dnsbl-defunct.php
  81         http://www.gweep.ca/
  82                 domain dead, no other info
  83         http://www.njabl.org/
  84                 dead since 2013
  85                         https://en.wikipedia.org/wiki/Not_Just_Another_Bogus_List
  86         http://wytnij.to/
  87                 website parked, no other info
  88         https://www.transip.nl/
  89                 dead since 2013
  90                         https://www.blalert.com/dnsbl/proxy.block.transip.nl
  91                         https://www.blalert.com/dnsbl/residential.block.transip.nl
  92         pss.spambusters.org.ar
  93                 NXDOMAIN
  94         rbl.snark.net
  95                 NXDOMAIN
  96                 https://snark.net/ gives access denied
  97         whois.rfc-ignorant.org
  98                 NXDOMAIN
  99                 rfc-ignorant.org registered but no A/AAAA record
 100                 dead since 2012
 101                         http://www.h-online.com/security/news/item/RFC-Ignorant-org-blacklist-closes-down-1724814.html
 102                         https://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html
 103         will-spam-for-food.eu.org
 104                 unmaintained
 105                 dead
 106                         https://rfc1149.net/blog/2012/01/22/who-did-resurrect-will-spam-for-food/
 107         http://proxybl.org/
 108                 dead, seemingly written on http://proxybl.org/blog but that’s also dead
 109                 https://linuxreviews.org/Mail_Spam_Blacklists
 110                 https://community.sophos.com/utm-firewall/f/web-server-security/50273/dnsbl-proxybl-org-offline
 111         dev.null.dk
 112                 timeout, also on the parent null.dk
 113                 effectively dead
 114         dnsbl.mags.net
 115                 seems dead, no info to be found
 116                 domain does not respond
 117         http://msrbl.blogspot.ch/
 118                 http://msrbl.blogspot.com/ says "no updates" since 2010 but supposed to be reactivated
 119                 effectively dead
 120         http://www.olsentech.net/
 121                 strange content on web
 122                 effectively dead
 123         rbl.orbitrbl.com
 124                 http://www.orbitrbl.com/
 125                 timeout
 126         rbl.polarcomm.net
 127                 NXDOMAIN
 128                 registered but no A/AAAA record
 129         cidr.bl.mcafee.com
 130                 https://kc.mcafee.com/corporate/index?page=content&id=KB53783
 131                         404
 132                 no info to be found
 133                 dead?
 134         http://anti-spam.org.cn/?locale=en_US
 135                 unreachable DNS
 136         rbl.talkactive.net
 137                 seems dead
 138                 talkactive.net redirects twice to some hosting company
 139                 last listings in 2017
 140                         https://multirbl.valli.org/detail/rbl.talkactive.net.html
 141                         https://www.blacklistmaster.com/blacklists?view=details&blacklist=rbl.talkactive.net
 142         dnsbl.ipocalypse.net
 143                 no policies published
 144                 dead
 145                         was a private list of an irc network
 146                         network was renamed idlechat.net in 2014
 147                         became a discord chat in 2022(?)
 148         http://blakjak.net/RBL
 149                 external access disabled
 150                 2023: seems dead, website is a weird error
 151                 https://www.blalert.com/dnsbl/rbl.blakjak.net
 152                         This is a private list that we do not monitor as the maintainer has explicity announced that the list is for his personal use
 153         http://cyberlogic.net/
 154                 french (canada)
 155                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.cyberlogic.net
 156                         On or about 5/21/2018 the cyberlogic DNSBL ceased functioning properly.
 157                 https://www.dnsbl.com/2018/05/
 158                         As reported on the mailop mailing list on Friday May 25, 2018, the blocking list at dnsbl.cyberlogic.net now contains a "wildcard" DNS entry, effectively listing the entire internet
 159         http://www.rbl.jp/allrbl-e.html
 160                 website asks for login or just errors
 161         http://www.spamhauswhitelist.com/en/
 162                 looks like a parked domain with ads
 163         http://stopspam.org/rblcheck/index.php
 164                 aka dul.pacifier.net
 165                 http://www.stopspam.org/rbl-info/
 166                         stopped in 2013
 167         http://countries.nerd.dk/
 168                 unable to connect, also for nerd.dk
 169         http://dul.ru/dul.en.html
 170                 DEAD for sale
 171         http://dns.measurement-factory.com/surveys/openresolvers.html
 172                 dead
 173                         »The following text describes past open DNS resolver surveys and an associated DNS lookup service that has been long shut down«
 174         http://www.sectoor.de/tor.php
 175                 timeouts
 176         http://anticaptcha.net/
 177                 for sale
 178         http://blacklist.lashback.com/
 179                 query zone: ubl.unsubscore.com
 180                 provider’s website https://lashback.com/ seems alive and active (news entries from 2023) but does not link to the blacklist
 181                 rsync URLs seem dead, so does the download url
 182         http://blacklist.woody.ch/
 183                 no entries in the displayed "top 100"
 184                 may have been absorbed into the swinog blacklists, see antispam.imp.ch
 185         http://cbl.abuseat.org/
 186                 https://www.abuseat.org/
 187                         changes to the CBL that occured in January 2021. In short, the CBL infrastructure was replaced by the Spamhaus XBL structure
 188         http://dnsbl.burnt-tech.com/
 189                 domain is for sale
 190 00_NEEDS_RECHECK
 191         https://antispam.imp.ch/
 192                 no usage policy
 193                 no return code info
 194                 no good listing policy
 195                 information received from inquiry to provider
 196                         website will be updated
 197                         return codes
 198                                 dnsrbl.swinog.ch and uribl.swinog.ch (holding time increases with hits)
 199                                         127.0.1.8 = default
 200                                         127.0.0.10 => TRAP (Email sent to a spamtrap)
 201                                         127.0.0.11 => REPO (Email reported as Spam by customer)
 202                                 spamrbl.imp.ch (3 days holding time)
 203                                         IPs are listed when trying to send mail to the spamtrap mailserver
 204                                         MD5 hash: attachment sent to the swinog blacklist
 205                                 wormrbl.imp.ch
 206                                         DEAD
 207         http://blacklist.woody.ch/rblcheck.php3
 208                 dead?
 209                 waiting for feedback
 210         http://dnsbl.iip.lu/
 211                 https://docs.hetrixtools.com/lookup-dnsbl-iip-lu-false-positive-removed/
 212                         in 2016: lookup.dnsbl.iip.lu blacklist started issuing false positive responses and upon further investigation looks to be abandoned/dead.
 213                 https://www.blalert.com/dnsbl/lookup.dnsbl.iip.lu
 214                         This blacklist is marked as "shut down" and non-operational as of 2017-12-31.
 215         http://dnsbl.inps.de/
 216                 timeout
 217                 https://www.dnsbl.com/search/label/dnsbl.inps.de
 218                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
 219                 https://docs.hetrixtools.com/dnsbl-inps-de-removed-from-our-system/
 220                         [May 29,2018] IPv4 RBL dnsbl.inps.de has been removed from our system, as they have decided to discontinue the RBL project for the time being.
 221                 https://glockapps.com/blacklist/dnsbl-inps-de/
 222                         Today, May 25, 2020, he has announced that it is shutting down, due to concerns around GDPR and personal challenges brought on by the coronavirus pandemic.
 223                 https://www.dnsbl.info/dnsbl-details.php?dnsbl=dnsbl.inps.de
 224                         This blacklist is offline as of May 1, 2020.
 225                 https://web.archive.org/web/20220428013500/http://www.inps.de/
 226 00_NEEDS_RESEARCH
 227         bl.tiopan.com
 228         blocked.hilli.dk
 229         dialups.visi.com
 230         dnsbl.antispam.or.id
 231         dob.sibl.support-intelligence.net
 232         intruders.docs.uu.se
 233         map.spam-rbl.com
 234         rbl.triumf.ca
 235         all.s5h.net
 236                 http://www.usenix.org.uk/content/rbl.html
 237         torexit.dan.me.uk
 238         http://pedantic.org/
 239                 as of 20140701
 240         rbl.fasthosts.co.uk
 241                 https://help.fasthosts.co.uk/app/answers/detail/a_id/140/kw/rbl
 242                 seems dead?
 243                 https://antispam.fasthosts.co.uk/
 244 00_ALIVE
 245         00_RECONSIDER
 246                 http://barracudacentral.org/rbl
 247                         requires account with extensive information (more than spamhaus e.g.):
 248                                 your name.
 249                                 your company name.
 250                                 your phone number.
 251                                 your address.
 252                                 your city name.
 253                                 your state/province name.
 254                                 your zip/postal code.
 255                                 the name of the alternate contact.
 256                                 the phone number of the alternate contact.
 257                                 the email address of the alternate contact.
 258                         seems well documented
 259         00_E_EVIL
 260                 sbl.nszones.com
 261                         http://www.spamhaus.org/organization/statement/008/fake-dnsbl-uncovered-nszones.com
 262         00_E_INFORMATION
 263                 blacklist.sci.kun.nl
 264                         https://cncz.science.ru.nl/en/howto/email-spam/
 265                         not really its own DNSBL?
 266                         no usage information
 267                         no usage policy
 268                 http://anonmails.de/
 269                         seems serious but missing necessary info
 270                                 usage policy
 271                                 listing policy
 272                 http://blacklist.jippg.org/
 273                         no usage policy
 274                         no listing policy
 275                         no return code info
 276                 bip.virusfree.cz
 277                         used by rspamd
 278                         https://www.virusfree.cz/en/help is the only place I can find any official reference to this list at all but no policies or usage information
 279                 https://www.nixspam.net/
 280                         previously http://www.dnsbl.manitu.net/
 281                         query zone: ix.dnsbl.manitu.net
 282                         provided by the reputable german publisher 'heise' which makes the high quality c’t, iX, and telepolis magacines
 283                         difficult to find info regarding listing policy
 284                         asked for more information to be added
 285                                 https://www.heise.de/forum/iX/Kommentare/Gemeinsam-stark/Nutzungsbedingungen-Return-Codes-sonstige-Infos/posting-42669177/show/
 286                 access.redhawk.org
 287                         website works but barely any info, not even how to query it
 288                         https://www.redhawk.org/?p=64
 289                         https://www.redhawk.org/SpamHawk/index.php
 290                 https://senderscore.org/
 291                         requires registration?
 292                         Scam? http://www.complaintsboard.com/complaints/buyer-beware-senderscoreorg-is-a-scam-c276871.html
 293                         https://senderscore.org/assess/blocklist-lookup/
 294                         FAQ: https://knowledge.validity.com/hc/en-us/articles/360006992592-Return-Path-Blocklist-RPBL-FAQ-
 295                         no information how to query found
 296                 mail-abuse.org
 297                         https://ers.trendmicro.com/
 298                         trendmicro paid service
 299                         https://docs.trendmicro.com/en-us/enterprise/email-reputation-services-online-help/getting-started_001/configuring-email-re/creating-an-account.aspx
 300                                 »If you don’t create an account, you can still query the reputation of an IP address«
 301                         I don’t find any pricing or usage information
 302         00_E_PAID
 303         00_E_PRIVATE
 304                 88.blacklist.zap
 305                         http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 306                         https://web.archive.org/web/20150812003556/http://blogs.technet.com/b/fss/archive/2009/05/08/forefront-dnsbl-yeah-or-nay.aspx
 307                         https://www.blalert.com/dnsbl/88.blacklist.zap
 308                                 88.blacklist.zap is an internal blacklist maintained by Microsoft's Forefront
 309                         https://www.dnsbl.com/search/label/frontbridge
 310                 http://drmx.org/
 311                         »Use of any DrMX.ORG DNS Zone is by request and by contract only.«
 312                 rbl.tdk.net
 313                         tdk.net seems dead on http(s)
 314                         private
 315                                 https://www.blalert.com/dnsbl/rbl.tdk.net
 316                         old link: http://postmaster.tdc.dk/publish.php?id=31787
 317                                 tdc.dk redirects to yousee.dk
 318                                 https://web.archive.org/web/20170703084224/http://postmaster.tdc.dk/publish.php?id=31787
 319                 rbl.zenon.net
 320                         private
 321                                 https://www.blalert.com/dnsbl/rbl.zenon.net
 322                         http://www.noc.zenon.net/rbl/
 323                         russian(?)
 324                 https://ahbl.org/
 325                         was public until 2015
 326                         now private, invite-only
 327         http://rfc-clueless.org/
 328                 lists domains
 329                         that do not adhere to common best practices or requirements
 330                 does NOT list spammers!
 331                 listing criteria are explained well
 332                         http://rfc-clueless.org/pages/listing_policy
 333                 return codes are explained
 334                         http://rfc-clueless.org/
 335                 usage policy is not so clear but the FAQ implies that it’s just free to use for everyone
 336                 many timeouts
 337                         first noticed in 2014 and deactivated
 338                         retried in 2023 and still the case
 339         http://spameatingmonkey.com/
 340                 lists IPs
 341                         that sent backscatter
 342                         that sent to spamtrap
 343                         added by policy
 344                                 this includes dial-up!
 345                                 https://spameatingmonkey.com/faq/policy-based-listing
 346                 lists domains/URIs
 347                         by age
 348                         in spam bodies
 349                 usage policy seems clear
 350                         https://spameatingmonkey.com/faq/query-limits
 351                 listing policy seems clear
 352                         https://spameatingmonkey.com/services
 353                 return codes documented
 354                         https://spameatingmonkey.com/services
 355                 http://blogspambl.com/
 356                         redirects to spameatingmonkey.com
 357         http://uribl.com/
 358                 lists domains/URIs
 359                         that appear in spam bodies
 360                         has whitelist
 361                 lists IPs
 362                         that URIs in spam bodies resolve to
 363                 return codes are documented
 364                         https://uribl.com/about.shtml#implementation
 365                         bitmasked
 366                         127.0.0.1 is used to signal abusive query behaviour
 367         http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
 368                 called "hostkarma"
 369                 lists domains/URIs
 370                 lists IPs
 371                 usage policy is relatively clear that it’s free, except maybe for big for-profit oranizations
 372                 listing policy is documented
 373                 return codes are documented
 374                 seems very trustworthy
 375         http://www.sorbs.net/
 376                 good reputation
 377                 lists domains/URIs
 378                 lists IPs
 379                 usage policy is clear that it’s free
 380                 listing policy is documented
 381                 return codes are documented
 382                 seems trustworthy
 383         http://www.spamhaus.org/
 384                 good reputation
 385                 very well done
 386                 seems very professional
 387                 lists domains/URIs
 388                 lists IPs
 389                 usage policy is clear
 390                         https://www.spamhaus.org/organization/dnsblusage/
 391                 listing policies are clearly documented
 392                 return codes are clearly documented
 393         http://www.surbl.org/
 394                 good reputation
 395                 lists domains/URIs
 396                 usage policy is clear
 397                         https://surbl.org/usage-policy
 398                 listing policy is documented
 399                 return codes are documented
 400                         bitmasked
 401                         127.0.0.1 means blocked
 402         http://zapbl.net/
 403                 lists domains/URIs
 404                 lists IPs
 405                 listing policy seems clear
 406                         https://zapbl.net/policy
 407                 usage policy seems clearly free for everyone
 408                         https://zapbl.net/using
 409                 return codes are documented
 410                 seems well done
 411         https://rbl.foobar.hu/
 412                 lists domains/URIs
 413                 lists IPs
 414                 listing policy seems clear
 415                 usage policy seems clearly free for everyone
 416                 return codes are documented
 417                 possibly unmaintained or dead
 418                         footer says: ©2013-14
 419         http://apews.org/?page=filter
 420                 questionable
 421                         https://www.dnsbl.com/search/label/apews
 422                         https://whatismyipaddress.com/apews
 423                 dead?
 424                         no news on http://apews-user.blogspot.com/ since 2014
 425                 not further looked into because of the above
 426         https://www.dnswl.org/
 427                 seems to be run with best intentions but has had issues from what I have heard from some users
 428                 IRC channel has some activity
 429                 usage policy relatively clear
 430                         free within certain limits
 431                 listing policy
 432                         self-service
 433                 return codes are documented
 434         00_E_FOCUS
 435                 https://www.dnsblchile.org/index.en.html
 436                         chilenian spam so not interesting for me
 437                         seems alive
 438         00_LISTS_BLOGSPAMMERS
 439                 https://www.madavi.de/madavibl/
 440                         »This blacklist should only be used to block comment spammer (on blogs and websites). Don’t use it for mail.«
 441                 http://bsb.empty.us/
 442                         does not exist anymore
 443                         empty.us returns »Nothing here, obviously.«
 444         00_LISTS_COUNTRIES
 445                 korea
 446                         http://korea.services.net/
 447         00_LISTS_DIALUPS
 448         00_LISTS_OPENRESOLVERS
 449         00_LISTS_TORNODES
 450                 https://www.dan.me.uk/dnsbl
 451         https://0spam.org/
 452                 clear information on usage policy
 453                         Nothing. The 0Spam Project is absolutely free for email providers, IT professionals and general removal request.
 454                         DNSBL service and removals are 100% for free for all uses; commercial, non profit and personal.
 455                 seems serious
 456                 listing policies are a little less clear
 457                         bl.0spam.org DNSBL | 0spam Spam Trap Primary Database
 458                         nbl.0spam.org Network Black List | Spam Source Networks, high volume of spam trap hits in a Class C block will result in network listings in this DNSBL.
 459                         url.0spam.org URL Black List | This list contains the IP address of domains found to be in the source of spam emails found in our traps.
 460                 return codes not very clear
 461         http://dnsbl.tornevall.org/
 462                 https://www.tornevall.net/
 463                 related to https://www.fraudbl.org/
 464                 seems a bit unstructured and not very well documented
 465                 seems active
 466         https://abuse.ro/
 467                 policy
 468                         spamtraps
 469                         The last IP address before destination in the email headers is listed into rbl.abuse.ro list.
 470                         Sender domains are analyzed and if confirmed to be not spoofed, are listed into dbl.abuse.ro list
 471                         Spamvertized domains (including those indirectly linked through services like bit.ly) are listed into uribl.abuse.ro list
 472         http://dronebl.org/
 473         http://mailspike.net/usage.html
 474         http://psbl.org/
 475                 query zone: psbl.surriel.com
 476         http://rbl.dns-servicios.com/rbl.php
 477         http://rbl.schulte.org/
 478         http://rbldata.interserver.net/
 479                 may be dead: http://www.blalert.com/dnsbl/rbl.interserver.net
 480         http://relaytest.kundenserver.de/
 481         http://rv-soft.info/
 482         http://spamcannibal.org/dnsbl_check.shtml
 483         http://spamrats.com/
 484         http://spamstinks.com/
 485         http://st.technovision.dk/
 486         http://tor.efnet.org/
 487                 http://rbl.efnetrbl.org/ MIRROR
 488         http://v4bl.org/
 489         http://virbl.bit.nl/
 490         http://wpbl.info/
 491         http://www.aupads.org/
 492         http://www.backscatterer.org/
 493                 fragwuerdige policy - bezahlen fuer schnelleres delisting
 494         http://www.blockedservers.com/
 495         http://www.blocklist.de/en/index.html
 496         http://www.emailbasura.org/cgi-bin/emailbasura-ini.pl?lang=eng
 497         http://www.gbudb.com/truncate/
 498         http://www.justspam.org/
 499         http://www.kempt.net/dnsbl/
 500         http://www.leadmon.net/spamguard/
 501         http://www.rbl.jp/allrbl-e.html
 502         http://www.spamcop.net/
 503                 good policy
 504                 good reputation
 505         http://www.spamsources.fabel.dk/
 506                 sensible policy
 507         http://www.srntools.com/blacklist/
 508         http://www.uceprotect.net/en/index.php
 509         http://www.usenix.org.uk/content/rbl.html
 510         http://zapbl.net/
 511         https://bl.konstant.no/
 512         https://choon.net/rbl.php
 513         https://puck.nether.net/or/
 514                 might be good
 515         https://rbl.foobar.hu/
 516         https://www.abuse.ch/
 517                 https://www.abuse.ch/?tag=httpbl
 518         https://www.kisarbl.or.kr/
 519         https://www.megarbl.net/
 520         https://www.team-cymru.org/Services/Bogons/dns.html
 521         http://mailspike.net/usage.html
 522                 reputation-based
 523         http://www.spamhauswhitelist.com/en/
 524                 policies for listing and usage on the website
 525         http://www.whitelisted.org/
 526                 paid subscription
 527                 policy on site
 528         https://puck.nether.net/or/
 529                 policies on website
 530         https://rbl.foobar.hu/
 531                 usage and listing policies on website
 532         http://www.isipp.com/email-accreditation/iadb-query-instruction/
 533                 requires signup
 534         https://choon.net/rbl.php
 535                 not quite a usage policy, but seems ok
 536                 strange split of ipv4 and ipv6
 537                 seems dead?
 538         https://www.dnswl.org/