We've expanded the global blacklist data source library with over 30 new entries across IPv4, IPv6, domain, and DNS firewall categories.
If your Monitoring Profile has "Stay in-sync with us" enabled, these sources will be picked up automatically on your next check cycle. If you manage your source list manually, you'll need to enable them yourself under RBL Monitoring > Monitoring Profiles > Data Sources. Either way, if there are any sources you don't want, you can disable them individually on the profile and they won't affect other profiles or other accounts.
IPv4 Blocklists
- JustSpam DNSBL: community-driven blocklist targeting confirmed spam sources
- DroneBL: open proxy, botnet, and compromised host detection used widely by IRC and mail operators
- DAN.ME.UK TOR Exit List: active Tor exit nodes; complements the existing DAN.ME.UK TOR list
- Mailspike Z: confirmed spam wave participants, with a single block-level return code
- Mailspike Reputation: IP reputation scoring; flags low-reputation senders
- Junkemailfilter.com (HostKarma): community-maintained IP reputation list
- TornevallNET DNSBL: open proxy and abuse detection
- ThreatInt DNSBL: threat intelligence feed covering spam and malicious infrastructure
- MailCleaner IP RBL: spam sender IP list maintained by the MailCleaner project
- Virusfree BAD / BIP: high spam rate senders and botnet IP addresses from the Virusfree project
- ScientificSpam BL: targets academic spam operations (journals, conferences, publishers)
- abuse.ro RBL: Romanian abuse tracking list covering spam and malicious hosts
- Suomispam BL: Finnish spam IP blocklist
- Brukalai DNSBL: Lithuanian DNSBL covering spam and abuse
- PCCC WILD RBL: honeypot and spam sample-based blocklist
- DrMX BL: spam trap and ISP feedback-based blocklist
- fmb.la BL: community spam tracking list
- Polspam BL / H1 / H2 / H3: Polish blacklist covering spam sources at four aggression levels (standard and three progressively stricter tiers)
URIBL / Domain Blocklists
- URIBL Multi: combined zone covering URIBL's black, grey, and red domain lists
- SpamEatingMonkey URIRED: high-confidence spam domain list (red tier)
- Rspamd URIBL: domain blocklist maintained by the Rspamd project
- MailCleaner SPAM URI BL: URI blocklist maintained by the MailCleaner project
- ScientificSpam RHSBL: domain-level counterpart to the ScientificSpam IP list
- abuse.ro URIBL: domain-level abuse tracking
- Suomispam Domain BL: Finnish spam domain blocklist
- Polspam RHSBL / H / V / Danger: Polish RHSBL at four aggression levels
IPv6 Blocklists
- Polspam IPv6 BL: IPv6 counterpart to the Polspam IPv4 blocklist
DNS Firewall
Three DNS firewall sources have been added that detect when a monitored host is resolving blocked domains via a protective DNS resolver:
- CIRA Canadian Shield Protected: blocks malware and phishing domains
- CIRA Canadian Shield Family: blocks malware, phishing, and adult content
- OpenDNS Security: blocks malware, phishing, and botnet command-and-control domains
These sources are useful for monitoring hosts that act as DNS resolvers or that have DNS firewall policies enforced at the network level.