Declude email security - Call 866 332 5833
Toll Free 1.866.332.5833

  Declude

Name/link A TXT Free OK Lookup Domain Returns Description
ABL yes no yes no spammers.v6net.org 127.0.0.2 The domain bought by a "squatter", and the list appears to be "listing the world." Arbitrary Blackhole List. No TXT records, missing test entry 127.0.0.2. Warning: It is willing to block large ISPs. Lists IPs at http://abl.v6net.org/spammerslist.php3 Warning: Is not testable.
BLOCKME yes no yes no block.me.uk [unlisted] Died about June, 2003. A list of mail servers and IP ranges which are spam sources. Generally lists UK-based companies. Was 'Coming soon' (as of 11 Mar 2003). Died, returning 127.0.0.2 for all queries. Warning: Is not testable.
BLARSBL block.blars.org [various] Died about 16 December 2006 Confirmed that it is working on 24 Oct 2001. Has 15 different return values, indicating the reason for the listing (IE could be split up into as many as 12 tests). Includes interesting tests such as no abuse@ address, and originating a DoS attack.. Does not have TXT records. Warning: May contain a number of IPs that no longer are associated with spammers, and are now allocated to legitimate customers that can not be removed. May also blacklist entire ISPs.
BLITZEDALL opm.blitzed.org [various] Died May 2006. http://wiki.blitzed.org/OPM_status Combines the BLITZEDHTTP, BLITZEDSOCKS, BLITZEDWINGATE, BLITZEDCISCO, and BLITZEDPOST tests. Confirmed that it is working on 09 Apr 2002.
BLITZEDCISCO opm.blitzed.org 127.0.0.0 bitmask 8 Died May 2006. http://wiki.blitzed.org/OPM_status Lists Cisco proxies. Assumed to be working on 20 Feb 2003 (since bitmask tests can't be tested).
BLITZEDHTTP opm.blitzed.org 127.0.0.0 bitmask 4 Died May 2006. http://wiki.blitzed.org/OPM_status Lists open HTTP (CONNECT) proxies. Confirmed that it is working on 03 Feb 2002.
BLITZEDPOST opm.blitzed.org 127.0.0.0 bitmask 8 Died May 2006. http://wiki.blitzed.org/OPM_status Lists open HTTP (POST) proxies. Assumed to be working on 20 Feb 2003 (since bitmask tests can't be tested).
BLITZEDSOCKS opm.blitzed.org 127.0.0.0 bitmask 2 Died May 2006. http://wiki.blitzed.org/OPM_status open SOCKS proxies. Confirmed that it is working on 03 Feb 2002.
BLITZEDWINGATE opm.blitzed.org 127.0.0.0 bitmask 1 Died May 2006. http://wiki.blitzed.org/OPM_status Lists open wingate proxies. Confirmed that it is working on 03 Feb 2002.
BNBL yes no yes yes bl.blueshore.net [unlisted] Died in January, 2004 (no 127.0.0.2 test entry; web site shows SQL errors). Lists servers that have sent spam to BNBL and affiliate networks. Confirmed that it is working on 06 Nov 2003.
BORDERWORLDSBL bl.borderworlds.dk [unlisted] A private spam database. Warning: Is not testable.
CHICKENBONER yes no yes no fl.chickenboner.biz [unlisted] Unknown, apparently no website. Warning: Is not testable.
COMPU-PMO yes no yes no pm0-no-more.compu.net 127.0.0.4 Died ~November, 2003. Undocumented. Apparently lists "pm0.com" sources. Confirmed 10 Jan 2002. Warning: Is not testable.
COMPU yes yes yes yes blackhole.compu.net 127.0.0.4 Died ~November, 2003. Undocumented (but confirmed). 'Primarily for hosts which were not blocked by other blackhole sites and spammed compu.net' according to one source.
DELINK yes yes yes yes dnsbl.delink.net 127.0.0.2 Died 15 Sep 2003. Was a personal blacklist. Confirmed 29 Jul 2002.
DEVNULL yes yes yes yes dev.null.dk 127.0.0.2 [Died September, 2003] Lists open relays (originally only from Denmark, but now from all over).
DEWS yes no yes no dews.qmail.org 127.0.0.2 [Died in June, 2002] [Originally confirmed 03 Feb 2002, but without a test entry, can not easily be re-confirmed] Supposedly lists mail servers that have sent E-mail to accounts that only receive spam (no legitimate mail). No docs on the return values, no test 127.0.0.2 entry, no zone transfers allowed, so it's completely untestable. Added 10 Jan 2002. Warning: Is not testable.
DORKRELAYS yes no yes yes relays.dorkslayers.com 127.0.0.2 An undocumented Dorkslayers database, apparently of open relays. Verified 09 Apr 2002. No TXT records.
DORKS yes yes yes yes orbs.dorkslayers.com 127.0.0.2 Dorkslayers recently added their ORBS-like database. This one lists open relays outside of the United States (apparently so they won't get sued). It seems as though they only list 'bad' open relays, rather than all known ones. They do not recommend using their service, interestingly. About 8,000 mail servers were listed as of November, 2000.
DORKZTL yes yes yes yes ztl.dorkslayers.com 127.0.0.2 A seemingly undocumented Dorkslayers database.
DSBL list.dsbl.org 127.0.0.2 Distributed Sender Boycott List. This is a 'trusted' portion of DSBL, that accepts submissions of open relays and any other unsecure servers that spammers can use to send spam. Confirmed on 28 Mar 2002.
DSBLALL unconfirmed.dsbl.org 127.0.0.2 Distributed Sender Boycott List. This is the 'untrusted' version (IE anyone can submit to it) of the DSBL database, which accepts submissions of open relays and any other unsecure servers that spammers can use to send spam. Note that it will likely contain some popular free mail services and the like, if their users maliciously submit entries. Confirmed on 05 Apr 2002.
DSBLMULTI multihop.dsbl.org 127.0.0.2 Distributed Sender Boycott List. This is a 'trusted' portion of DSBL, that lists multi-hop relays from trusted sources. Confirmed on 09 Apr 2002.
EASYNET-DNSBL yes yes yes yes blackholes.easynet.nl 127.0.0.2 Died 1 Dec 2003. Listed direct spam sources, indirect spam sources (using open relays or other conduits to send spam), open proxy hits, Spamhaus SBL hits, opt-out mailers, and relay-probing sources. Click link for full description. Confirmed that the zone and entries exist on Nov 26 2001. Was WIREHUB-DNSBL.
EASYNET-DOMAINS yes yes yes yes spamdomains.blackholes.easynet.nl 127.0.0.2 Died 1 Dec 2003. Listed domain names that are derived from spam evidence, including spamvertised sites, domains belonging to spamming organizations, etc. Confirmed 02 Aug 2003.
EASYNET-DYNA yes yes yes yes dynablock.easynet.nl 127.0.0.2 Died 1 Dec 2003. Listed dynamic IP ranges (per /24, to attain maximum granularity and a minimum of false postives by probing several IP numbers in each /24 and examining PTR records). Confirmed 14 Dec 2001. Was WIREHUB-DYNA.
EASYNET-PROXIES yes yes yes yes proxies.blackholes.easynet.nl 127.0.0.2 Died 1 Dec 2003. Listed both regular open proxies and trojaned servers with open proxy functionality. Was WIREHUB-PROXIES.
EXSILIA-PROXIES yes yes yes yes proxies.exsilia.net 127.0.0.4 Died August, 2003. A small list of open proxies (ones that connected to irc.rizenet.org and appear to be open proxies). Confirmed on 07 Oct 2002.
EXSILIA-SPAM yes yes yes yes spam.exsilia.net [various] Died August, 2003. Listed spam sites that were seen by the exsilia.net systems. Would block IP ranges and upstream providers. 127.0.0.2: Spamming; 127.0.0.3: Sends viruses; 127.0.0.5: Abuse or postmaster bounces. Confirmed on 07 Oct 2002.
FIVETENDUL yes no yes yes blackholes.five-ten-sg.com 127.0.0.3 Died November, 2003. Listed spam sites before they got into DUL; included some DSL IPs.
FLOWGO flowgoaway.com 127.0.0.2 Unknown and undocumented, but operational (confirmed 24 Oct 2001). 'Lists FloNetwork systems' according to one source. Flonetwork was apparently bought out by DoubleClick.
FNIDDER yes no yes no [unlisted] [unlisted] A private spam database. Ceased functioning about August, 2003. Warning: Is not testable.
GIPPER yes no yes no proxy.bl.gweep.ca [unlisted] Died February, 2004, due to too much traffic. Listed computers which are running an insecure HTTP proxy that allows arbitrary port connections. No TXT records, no 127.0.0.2 test entry. Warning: Is not testable.
INTRUDERS yes no yes yes intruders.docs.uu.se [unknown] Died 04 Feb 2004 (was apparently for internal use only). Not well documented. Apparently lists IP ranges that have sent spam. Warning: Blocks larger than /16 are used (so that an IP may be listed even if no spam was received from any IP in the same /16 range), making it dangerous to block on this test. Confirmed 23 Dec 2003.
JIPPG-ABUSE yes no yes no mail-abuse.blacklist.jippg.org 127.0.0.4 Unknown ('mail-abuse listings'). Unconfirmable (no 127.0.0.2 test entry, no zone transfers allowed). Warning: Is not testable.
JIPPG-DUL yes no yes no dialup.blacklist.jippg.org 127.0.0.3 Apparently lists dialup lines outside of Japan. Unconfirmable (no 127.0.0.2 test entry, no zone transfers allowed). May list every IP? May use jp.dialups.blacklist.jippg.org? WARNING: Remember, dialup line databases should NOT be used on outgoing E-mail. Warning: Is not testable.
JIPPG-DULJP yes no yes no dialup.blacklist.jippg.org 127.0.0.4 Apparently lists dialup lines inside of Japan. Unconfirmable (no 127.0.0.2 test entry, no zone transfers allowed). May list every IP? May use non-jp.dialups.blacklist.jippg.org? WARNING: Remember, dialup line databases should NOT be used on outgoing E-mail. Warning: Is not testable.
KROPKA-IP all.rbl.kropka.net 127.0.0.1 Lists static IPs, whole networks. Warning: Is not testable.
KROPKA-DIALUPS all.rbl.kropka.net 127.0.0.2 Lists dialups and dynamic IPs. Warning: Is not testable.
KROPKA-RELAYS all.rbl.kropka.net 127.0.0.4 Lists open relays. Warning: Is not testable.
KROPKA-PROXIES all.rbl.kropka.net 127.0.0.8 Lists open proxies. Warning: Is not testable.
KROPKA-FORMS all.rbl.kropka.net 127.0.0.16 Lists unsecured forms and subscriptions. Warning: Is not testable.
KROPKA-LAMEAV all.rbl.kropka.net 127.0.0.32 Lists systems that send virus notifications to forged sender. Warning: Is not testable.
LBL lbl.lagengymnastik.dk [unlisted] Has many different criteria for listing, such as companies that favor spam, spamware vendors.
MAD yes no yes no mailabusedatabase.com [unlisted] Apparently charged $25 to remove IPs. Warning: Is not testable.
MADSCIENCE yes no yes no assholes.madscience.nl 127.0.0.2 Lists mailservers that send to spamtraps, open proxies. Will add entries based on rumours. Confirmed dead 17 May 2003. Warning: Is not testable.
MADWHITE yes no yes no generic.rwl.mailabusedatabase.com [unlisted] Apparently was a whitelist of customers who paid $25 to be removed from the MAD blacklist. Warning: Is not testable.
MONKEYADDRESS yes no yes yes sender-address.sjesl.monkeys.com 127.0.0.1 Discontinued due to an ISP that cancelled accounts based on this database. Lists spammer's E-mail addresses ('MAIL FROM'). Convert '@' to '.' (IE 'user.example.com.sender-address.sjesl.monkeys.com'). Requires zone transfers for 100,000+ queries per day.
MONKEYDOMAIN yes no yes yes sender-domain.sjesl.monkeys.com 127.0.0.1 Discontinued due to an ISP that cancelled accounts based on this database. Lists spammer's domains from their E-mail addresses ('MAIL FROM'). Requires zone transfers for 100,000+ queries per day.
MONKEYFORMMAIL yes yes yes yes formmail.relays.monkeys.com [Unknown] Lists servers running formmail, which can be used to send spam. Zone transfers required for large organizations (100,000+ queries/day).
MONKEYHELO yes no yes yes helo-domain.sjesl.monkeys.com 127.0.0.1 Discontinued due to an ISP that cancelled accounts based on this database. Lists host names from the HELO text that spammer send. Requires zone transfers for 100,000+ queries per day.
MONKEYPROXIES yes yes yes yes proxies.relays.monkeys.com [Unknown] Lists open proxies. Zone transfers required for large organizations (100,000+ queries/day).
MONKEYREVDNS yes no yes yes client-domain.sjesl.monkeys.com 127.0.0.1 Discontinued due to an ISP that cancelled accounts based on this database. Lists spammer's domains from reverse DNS lookups. Requires zone transfers for 100,000+ queries per day.
NOFLOW yes yes yes yes inflow.noflow.org 127.0.0.2 Used to block mail from Inflow. Confirmed dead 17 May 2003.
OPENRBL no no yes yes rbl.openrbl.org [Various] 'Testing, don't use'. Seems to return same response for every IP. May become a spam database in the future.
ORBL yes no yes no or.orbl.org 127.0.0.2 ORBL was a spinoff based on ORBS, that was formed after ORBS was shut down. Listed any open relays that it knew about, even large ISPs. Listed both inputs and outputs. Assumed to be gone 30 Oct 2001 (no response for several weeks). Warning: Is not testable.
ORBS yes no yes no [various] [various] ORBS used to be one of the best known spam databases. However, it has been closed (most likely permanently). Warning: Is not testable.
ORID dnsbl.antispam.or.id 127.0.0.2 Designed to list mailservers sending spam, at the time they are sending it (not before or after).
ORBZIN (gone) yes no yes yes inputs.orbz.org 127.0.0.2 Was a very popular spam database, until the town of Battle Creek, Michigan (USA) tried to send the admin to jail, causing the ORBZ tests to stop (on 20 Mar 2002). Listed known open relay inputs. Was previously called ZONEIN.
ORBZINPUTS (gone) yes no yes no orbz.gst-group.co.uk 127.0.0.3 Died in December, 2001. This is the one that returns 'This zone is defunct stop using it' WITHOUT saying which zone it is! ORBZ (ORB UK) was a spinoff based on ORBS, that was formed after ORBS was shut down. This database listed open relay inputs. No TXT records. Warning: Is not testable.
ORBZMAN yes no yes no manual.orbz.gst-group.co.uk [unknown] Confirmed gone 10/24/01 (no NS records for the zone). ORBZ MANUAL was a spinoff based on the ORBS 'manual entries' list, that was formed after ORBS was shut down. Warning: Is not testable.
ORBZOUT (gone) yes no yes yes outputs.orbz.org 127.0.0.2 Was a very popular spam database, until the town of Battle Creek, Michigan (USA) tried to send the admin to jail, causing the ORBZ tests to stop (on 20 Mar 2002). Listed known open relay outputs. Was previously called ZONEOUT.
ORBZOUTPUTS (gone) yes no yes no orbz.gst-group.co.uk 127.0.0.2 Died in December, 2001. This is the one that returns 'This zone is defunct stop using it' WITHOUT saying which zone it is! ORBZ (ORB UK) is a spinoff based on ORBS, that was formed after ORBS was shut down. This database lists open relay outputs. No TXT records. Warning: Is not testable.
ORBZPOST (gone) yes no yes no orbz.gst-group.co.uk 127.0.0.9 Died in December, 2001. This is the one that returns 'This zone is defunct stop using it' WITHOUT saying which zone it is! ORBZPOST (part of ORB UK) lists mail servers that refuse or bounce mail to postmaster@. No TXT records. Warning: Is not testable.
ORDB relays.ordb.org * Died 18 December 2006. Open Relay Database. Lists open relays. Has corresponding TXT records. Had about 81,000 entries as of 7/23/01, hit 200,000 on 22 Jan 2002. Will notify servers when they get listed, and will automatically re-test periodically.
OSDIPS yes yes yes yes relays.osirusoft.com 127.0.0.3 Osirusoft's Dynamic IP Space list (such as dialups). This is similar to the DUL test, except that some entries are added manually. We recommend treating it similarly to the MAPS DUL test.
OSFORM yes yes yes yes relays.osirusoft.com 127.0.0.8 Osirusoft's list of insecure formmail.cgi script sites (planned).
OSLIST yes yes yes yes relays.osirusoft.com 127.0.0.7 Osirusoft's list of listservers that opt users in without confirmation.
OSPROXY yes yes yes yes relays.osirusoft.com 127.0.0.9 Osirusoft's list of open proxy servers.
OSRELAY yes yes yes yes relays.osirusoft.com 127.0.0.2 Osirusoft's list of verified open relays. This should be very similar to the ORBSMAIN test. We do not recommend using this, unless you simply warn the recipient.
OSSMART yes yes yes yes relays.osirusoft.com 127.0.0.5 Osirusoft's Smart Host list (planned). A list of smart hosts (hosts that are secure, but relay for other mail servers that are not secure).
OSSOFT yes yes yes yes relays.osirusoft.com 127.0.0.6 Osirusoft's list of Spamware Software Developers. It is believed that these are IP ranges of companies that are known to produce spam software. Similar to or the same as SPAMHAUS/SBL test.
OSSRC yes yes yes yes relays.osirusoft.com 127.0.0.4 Osirusoft's Confirmed Spam Source list. This appears to mostly be from the SPEWS list. Warning: Intentionally lists legitimate mailservers that either have IPs close to spammers, or that had problems in the past that have been completely fixed. Should not be used to block mail, although could be used in a weighting system.
OUTBLAZE yes no yes no [unlisted] [unlisted] Outblaze's blacklist. It is a private blacklist. Warning: Is not testable.
PDL dialups.visi.com [unlisted] Pan-Am Internet Services' Dynamic List. Lists home dialup, broadband, and similar networks. No TXT records, missing 127.0.0.2 test entry. Not officially distributed by DNS. Warning: Is not testable.
PIGS yes no yes yes bandwidth-pigs.monkeys.com 127.0.0.1 Lists domains that are 'bandwidth pigs' and spammers, that keep trying to send E-mail to users after finding out that the user does not accept mail. May return other codes than 127.0.0.1. Does not include test 'example.com' address, and no TXT records, but verified to be working on 14 Dec 2001.
RELAYWATCHER yes yes yes yes relaywatcher.n13mbl.com 127.0.0.2 Temporary disabled February, 2004. Expected to come back. RelayWatcher was designed to create a network of relay testers that report their results to a central server.
ROPE yes no yes yes rbl.rope.net 127.0.0.2 Died December, 2003, by blacklisting everyone, and strangly claiming that they died before they even started. Was undocumented except in a mailing list. Apparently would list IPs sending spam to the person running rope.net. Confirmed 09 Apr 2002. Confirmed dead 23 Dec 2003. No TXT records.
SANDESPERM yes no yes no blackholes.sandes.dk [unlisted] Ceased functioning about August, 2003. Listed mailservers that were involved in E-mail abuse. This was the permanent list. Warning: Is not testable.
SANDESTEMP yes no yes no relays.sandes.dk [unlisted] Ceased functioning about August, 2003. Listed mailservers that were involved in E-mail abuse. This was the temporary list, which means that the IPs could later be removed. Warning: Is not testable.
SBBL sbbl.they.com [unlisted] Lists IPs of mailservers that send to spambait addresses at they.com. IPs are automatically removed.
SHRI yes yes yes yes spam.shri.net 127.0.0.2 Died late June, 2003 (in a bad way -- reporting all mail as spam!), due to 'abuse from various commercial entities'. Listed IPs of mailservers that sent spam to spamtraps, or that users complained about. Confirmed 16 Jun 2003.
SPAMBAG blacklist.spambag.org 127.0.0.2 Dead 27 May 2003 Lists networks that send out spam, perform dictionary attacks, both the direct sources and the networks used by them (and networks used to sell software used by them). Warning: Will list large ISPs that tolerate spamming (IE Sprint). May return codes other than 127.0.0.2. Test listing confirmed 14 Dec 2001.
SPAMTHWART bl.spamthwart.com 127.0.0.2 This is a realtime blacklist based on human interaction.
SPAMTR yes no yes no rbl.spam.org.tr 127.0.0.2 Doesn't appear to be operational. Documentation in Turkish. Warning: Is not testable.
SPEWS1 l1.spews.dnsbl.sorbs.net [unlisted] Dead August 2006. SPEWS is a list of areas on the Internet which several system administrators deny E-mail from. Warning: Intentionally lists legitimate mailservers that either have IPs close to spammers, or that had problems in the past that have been completely fixed. Should not be used to block mail, although could be used in a weighting system.
SPEWS2 l2.spews.dnsbl.sorbs.net [unlisted] Dead August 2006. SPEWS is a list of areas on the Internet which several system administrators deny E-mail from. Warning: Intentionally lists legitimate mailservers that either have IPs close to spammers, or that had problems in the past that have been completely fixed. Should not be used to block mail, although could be used in a weighting system.
STARLOOP yes yes yes yes bl.starloop.com 127.0.0.2 A company proprietary list, as well as spammer related. Will honor all requests to be removed after testing them. Confirmed 15 Jan 2004.
SUMMIT yes no yes no blackholes.2mbit.com [various] Listed mail servers that have sent out spam (would not scan for open relays). Updated by hand. Had TXT records. Confirmed 127.0.0.2 test entry on 14 Dec 2001. Went down approximately 21 May 2002. Came back as AHBL. Warning: Is not testable.
TRUSTIC yes no yes no [unlisted] [unlisted] Died in August, 2003. Listed mailservers that members submit. Warning: Is not testable.
UCEB blackholes.uceb.org [unknown] A hardcore spam list; lists mailservers that have sent spam. Returns multiple A records. Confirmed July 2008.
UIB (untestable) yes no yes yes rbl.uib.no [unknown] Does not appear to have any entries. Untestable (no 127.0.0.2 test address, returns a Server Failure DNS response).
UIBOK (untestable) yes no yes yes rbl-ok.uib.no [unknown] Does not appear to have any entries. Untestable (no 127.0.0.2 test address, returns a Server Failure DNS response).
URBL yes no yes no blocked.secnap.net 127.0.0.2 Apparently died in October, 2003. Listed every IP address (for the totally clueless: that means that every E-mail from anybody on the Internet will be blocked). Should not be used, of course. This one was included because it has a good point: you REALLY should know what and why a test blocks before using it. Confirmed 09 Apr 2002. Warning: Is not testable.
VBL yes yes yes yes vbl.messagelabs.com [unknown] Lists IPs that have sent trojan-dropping viruses in the past 48 hours. Confirmed on 12 Sep 2003. Confirmed dead 01 Oct 2003.
XBL no no yes yes xbl.selwerd.cx * Died 06 Nov 2003. Extreme spam Blocking List, possibly designed to have every known IP listed. Warning: They include Sprint and uunet IPs, and will not remove non-spammers from the list. Can return 127.0.0.2 as well as the documented 127.0.0.4. Re-confirmed 21 Mar 2002.
YAMTA-SPAM yes no yes yes spamsources.yamta.org 127.0.0.2 Lists IPs of spammers that have sent spam to the servers of the people that run this test. Confirmed on 30 Jun 2003.
YAMTA-PROBES yes no yes yes spamsources.yamta.org 127.0.0.3 Lists IPs of spammers that probed the servers of the people that run this test, to see if they are running an open relay. Confirmed on 30 Jun 2003.
YAMTA-ABUSE yes no yes yes spamsources.yamta.org 127.0.0.4 Lists IPs of abusers of SMTP, such as those initiating dictionary attacks.
ZTA (gone) yes no yes no zta.birdsong.org [unknown] Zero Tolerance Advisory. Confirmed GONE 10/24/01 (no NS records for zta.birdsong.org zone). Previously, could not confirm that it was up on 7/23/01. Warning: Is not testable.


  CONTACT | CAREERS | DIRECTIONS | PRIVACY STATEMENTS
Copyright 2009 DECLUDE Inc. All Rights Reserved
Declude a division of DNSstuff Enterprise.



To be removed from our mailing list please click here