Vendor of German origin, now based in California, publishing Abusix Mail Intelligence, a set of IP, domain and hash block lists fed by a large spam trap network. Also offers AbuseHQ, an abuse report management tool for operators, and a free reporting service.
Ecosystem directory
Organizations, events and solutions of the email ecosystem. Every entry is verified and dated.
Blacklists and DNSBLs
Blocklists (DNSBLs) and reputation lists queried by anti-spam filters.
Free IP block list published by Barracuda Networks from data gathered by its email security gateways and spam traps. Used by many servers beyond Barracuda customers. Online removal procedure and an opt-in list for trusted IPs.
Non-profit DNS trust list (whitelist), launched in 2006, recording legitimate mail servers with a trust level. Used by SpamAssassin and other filters to reduce false positives. Operators can request listing of their servers.
Commercial IP (ivmSIP) and domain (ivmURI) block lists created in 2007 by Rob McEwen for anti-spam filters and hosting providers. Known for targeting snowshoe spam spread across many IPs, and for also publishing a list of abused redirector domains.
Portuguese IP reputation service published by AnubisNetworks (Bitsight group), providing a DNS-queryable block list and trust list as well as a per-IP reputation score. Used by anti-spam filters and included in some SpamAssassin rules.
Passive Spam Block List, a free, automated DNSBL fed by spam traps: an IP is listed after sending to a trap and automatically delisted after a few days without further sends. Immediate self-service removal is possible.
Spam reporting service and block list (SCBL) created in 1998 by Julian Haight, owned by Cisco since 2007 through IronPort. The list is fed by user reports and spam traps, with fast automatic delisting once the traffic stops. Reports are also forwarded to hosting providers.
Block lists of the Spamhaus Project, the most widely used worldwide. ZEN combines the SBL (spam sources), XBL (compromised machines) and PBL (residential ranges that should not send directly). The DBL lists domains and the HBL lists hashes. Free under usage conditions, otherwise via the Data Query Service.
Canadian block lists published by LinuxMagic, targeting IPs without proper reverse DNS or with generic hostnames (RATS-NoPtr, RATS-Dyna), spam sources (RATS-Spam) and brute-force authentication attacks (RATS-Auth). Free access with an online removal procedure.
List of domains and hostnames appearing in the body of spam, phishing or malware messages, launched in 2004. Unlike IP DNSBLs it is queried on the URLs found in messages, notably by SpamAssassin. Limited free access and subscription for high volumes.
Swiss block lists in three levels: individual IPs (level 1), allocation ranges (level 2) and whole autonomous systems (level 3). Levels 2 and 3 are controversial because they list entire networks. Automatic delisting after seven days without spam, or immediate paid removal.
Block list of domains found in spam message URLs, maintained since 2004 and included in SpamAssassin's default rules. Several zones by confidence level (black, grey, red, multi). Free for low query volumes, paid data feed above that.
Missing or inaccurate entry? Suggest a correction.