Blocklist Impact and Remediation
Email Blacklists (DNSBL/RBL) - Complete Guide
There are thousands of blocklists managed by various organizations, each with different specifications for how a domain or IP ends up on their list. Sometimes known as a DNSBL (Domain Name System Blacklist) or RBL (Realtime Blackhole List), these services are spam blocking lists used by ISPs and mailbox providers to filter unwanted email.
Some lists have a more significant impact on email delivery than others. Below we have compiled a comprehensive list of the most commonly encountered blocklists, organized by their impact level.
High Impact Blocklists
Organizations listed as high-impact have the greatest effect on email delivery and can cause significant bounce rates.
Major IP Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
Spamhaus ZEN | zen.spamhaus.org | Combined IP blacklist (SBL, XBL, PBL) for spam, botnets, infected IPs | Check Now |
Barracuda | b.barracudacentral.org | IP reputation blacklist by Barracuda Networks | Check Now |
SpamCop | bl.spamcop.net | Blacklist of IPs sending to spam traps or reported as spammers | Check Now |
Abusix Mail Intelligence (IP) | ip.mail.abusix.zone | Trap-based IP blacklist for spam, exploits, botnets | Check Now |
UCEPROTECT L1 | dnsbl-1.uceprotect.net | Abusive IPs detected by UCEPROTECT | Check Now |
0SPAM | 0spam.fusionzero.com | Free DNSBL for IPs sending spam to spam traps | Check Now |
0SPAM RBL | rbl.0spam.org | 0SPAM's real-time DNSBL for IPs detected sending spam | Check Now |
SWINOG | dnsbl.swinog.ch | Swiss Network Operators Group DNSBL for spam and abuse | Check Now |
TRIUMF | dnsbl.triumf.ca | TRIUMF DNSBL for spam and open relay detection | Check Now |
NoSolicitado | bl.nosolicitado.org | Spanish-language DNSBL for spam and abuse sources | Check Now |
Abusix Exploit | exploit.mail.abusix.zone | Abusix DNSBL for IPs involved in exploits, malware, and abuse | Check Now |
Major Domain/URI Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
Spamhaus DBL | dbl.spamhaus.org | DNSBL for domains seen in spam, phishing, and malware | Check Now |
SURBL multi | multi.surbl.org | Aggregated DNSBL for domains/URLs found in spam messages | Check Now |
URIBL | multi.uribl.com | Blacklist for domains appearing in unsolicited or bulk email | Check Now |
ivmURI | dnsbl.ivmURI.com | Invaluement's DNSBL for domains and URIs found in spam and phishing emails | Check Now |
Abusix Mail Intelligence Blacklist | dblack.mail.abusix.zone | Trap-based blacklist of domains in spam, phishing, and malware | Check Now |
IBM DNS Blacklist | dnsbl.cobion.com | IBM X-Force Threat Intelligence DNSBL for malicious and suspicious domains | Check Now |
Lashback | ubl.unsubscore.com | Unsubscribe/opt-out abuse list for domains violating CAN-SPAM rules | Check Now |
SEM URI | uribl.semeon.com | SEM Labs' DNSBL for URIs found in spam and phishing emails | Check Now |
SEM URIRED | urired.semeon.com | SEM Labs' DNSBL for high-risk URIs and domains | Check Now |
SEM FRESH | fresh.semeon.com | SEM Labs' DNSBL for newly observed domains and URIs | Check Now |
Anonmails DNSBL (Domain) | rhsbl.anonmails.de | Community-maintained domain blacklist for abuse and phishing | Check Now |
Nordspam DBL | dbl.nordspam.com | Nordic-focused domain blacklist for spam and abuse | Check Now |
SORBS RHSBL BADCONF | badconf.rhsbl.sorbs.net | SORBS DNSBL for domains with bad configuration or setup issues | Check Now |
Medium Impact Blocklists
Organizations listed as medium-impact have the potential to impact email delivery but are less widely used than high-impact lists.
Specialty IP Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
Backscatterer | ips.backscatterer.org | Detects mail servers that send non-delivery bounces to forged email addresses | Check Now |
CYMRU Bogons | v4.fullbogons.cymru.com | Lists bogon (unallocated/reserved) IP ranges never used for legitimate email | Check Now |
DroneBL | dnsbl.dronebl.org | IPs detected as bots, drones, or open proxies often used for abuse | Check Now |
DAN TOR | tor.dnsbl.sectoor.de | Lists known TOR exit node IPs | Check Now |
DAN TOREXIT | toreexit.dan.me.uk | DNSBL for active TOR exit IPs | Check Now |
SEM BACKSCATTER | backscatter.semeon.com | SEM Labs' backscatter detection list | Check Now |
SEM BLACK | black.semeon.com | SEM Labs' IP blacklist for spam sources | Check Now |
FABELSOURCES | blackholes.fabel.dk | Lists IPs detected as sources of spam, malware, or abuse | Check Now |
IMP SPAM | dnsbl.imp.ch | IMP SPAM tracks IPs associated with spam and abusive activity | Check Now |
IMP WORM | wormbl.imp.ch | IPs involved in worm and virus propagation | Check Now |
Policy and Relay Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
SORBS DUL | dul.dnsbl.sorbs.net | SORBS Dynamic User List for dynamic/residential IPs | Check Now |
SORBS HTTP | http.dnsbl.sorbs.net | SORBS HTTP blacklist for web-based spam sources | Check Now |
SORBS SMTP | smtp.dnsbl.sorbs.net | SORBS SMTP blacklist for mail server abuse | Check Now |
SORBS SOCKS | socks.dnsbl.sorbs.net | SORBS SOCKS proxy blacklist | Check Now |
SORBS MISC | misc.dnsbl.sorbs.net | SORBS miscellaneous abuse blacklist | Check Now |
SORBS ZOMBIE | zombie.dnsbl.sorbs.net | SORBS zombie computer blacklist | Check Now |
SORBS SPAM | spam.dnsbl.sorbs.net | SORBS spam blacklist | Check Now |
SpamRats DUL | dul.spamrats.com | SpamRats Dynamic User List | Check Now |
SpamRats DYNIP | dynip.rothen.com | SpamRats Dynamic IP blacklist | Check Now |
SpamRats NOPTR | noptr.spamrats.com | SpamRats No PTR record blacklist | Check Now |
SpamRats SPAM | spam.spamrats.com | SpamRats spam blacklist | Check Now |
SpamRats DYNA | dyna.spamrats.com | SpamRats dynamic IP blacklist | Check Now |
Regional and Community Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
Korea Services | korea.services.net | Korean-focused spam blacklist | Check Now |
Manitu | ix.dnsbl.manitu.net | German ISP blacklist for spam and abuse | Check Now |
Singular | singular.ttk.pte.hu | Hungarian university spam blacklist | Check Now |
Anonmails | spam.dnsbl.anonmails.de | German community spam blacklist | Check Now |
SpamSpike | z.mailspike.net | MailSpike spam blacklist | Check Now |
Low Impact Blocklists
Organizations listed as low-impact are unlikely to significantly impact email delivery but may be used by some smaller providers.
Malware and Exploit Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
Abusix Malware | malware.mail.abusix.zone | Abusix malware detection blacklist | Check Now |
Abusix Phishing | phishing.mail.abusix.zone | Abusix phishing detection blacklist | Check Now |
Abusix Exploit | exploit.mail.abusix.zone | Abusix exploit detection blacklist | Check Now |
Virus RBL JP | virus.rbl.jp | Japanese virus blacklist | Check Now |
IMP WORM | worrmbl.imp.ch | IMP worm and virus blacklist | Check Now |
Miscellaneous Operator Blacklists
Blacklist | Lookup Zone | Description | Direct Check |
---|---|---|---|
WoodyNet | woodybl.dnsbl.woodynet.net | WoodyNet spam blacklist | Check Now |
Cymru Bogons | bogons.cymru.com | Cymru bogon IP blacklist | Check Now |
CBL | cbl.abuseat.org | Composite Blocking List | Check Now |
Combined Abuse.ch | combined.abuse.ch | Combined abuse.ch blacklists | Check Now |
WPBL | db.wpbl.info | WPBL spam blacklist | Check Now |
UCEPROTECT L2 | dnsbl-2.uceprotect.net | UCEPROTECT Level 2 blacklist | Check Now |
UCEPROTECT L3 | dnsbl-3.uceprotect.net | UCEPROTECT Level 3 blacklist | Check Now |
DroneBL | drone.abuse.ch | DroneBL botnet blacklist | Check Now |
SORBS | dnsbl.sorbs.net | SORBS general blacklist | Check Now |
SPFBL | dnsbl.spfbl.net | SPFBL spam blacklist | Check Now |
DUINV | duinv.aupads.org | DUINV spam blacklist | Check Now |
ORVEDB | orvedb.aupads.org | ORVEDB spam blacklist | Check Now |
PBL | pbl.spamhaus.org | Policy Block List | Check Now |
Proxy BL | proxy.bl.gweep.ca | Proxy blacklist | Check Now |
PSBL | psbl.surriel.com | PSBL spam blacklist | Check Now |
Relays BL | relays.bl.gweep.ca | Relays blacklist | Check Now |
Relays Nether | relays.nether.net | Relays Nether blacklist | Check Now |
SBL | sbl.spamhaus.org | Spamhaus Block List | Check Now |
XBL | xbl.spamhaus.org | Exploits Block List | Check Now |
Understanding Blacklist Impact
High Impact Blocklists
These are the most critical lists that can cause significant delivery problems: - Spamhaus is the most well-respected and widely used blocklist in the world. A listing at Spamhaus will have a negative effect on your ability to deliver emails and can cause bounce rates of over 50%. Evidence suggests that most of the top North American ISPs use Spamhaus to inform blocking decisions. - Barracuda is widely used by enterprise email security appliances and can significantly impact B2B email delivery. - SpamCop can have a significant impact on B2B email campaigns, though it is not as widely used by major North American ISPs.
Medium Impact Blocklists
These lists can impact delivery but are less widely used: - SORBS uses several methods to identify potential spammers. Most of their lists use spam traps to identify problematic senders. SORBS will also list a sender based on user complaints or if administrators have received spam from the sender. - UCEPROTECT maintains multiple levels of blacklists, with Level 1 being the most commonly used. - Abusix provides commercial blacklist services that are used by many European ISPs and enterprises.
Low Impact Blocklists
These lists are unlikely to significantly impact delivery but may be used by smaller providers: - Many of these are regional or specialized lists that focus on specific types of abuse or geographic areas. - Some are community-maintained lists that may not have the same level of accuracy as major commercial lists.
How to Check Your Status
You can check if your IP address or domain is listed on any of these blacklists using our Spam Database Lookup Tool. This tool will check your IP or domain against all the major blacklists listed above and provide detailed information about any listings found.
Getting Delisted
If you find yourself listed on a blacklist, the process for removal varies by list:
- Identify the listing reason - Most blacklists provide information about why an IP or domain was listed
- Fix the underlying issue - Address the root cause (spam, open relay, malware, etc.)
- Contact the blacklist operator - Follow their specific delisting procedures
- Wait for removal - Delisting can take anywhere from a few hours to several days
For more information about getting off email blacklists, see our guide: How to Get Off of Email Blacklists