Skip to main content
HostRepute Logo
Source inventory

Blacklist data sources for reputation operations

HostRepute keeps a readable inventory of the source catalog behind scheduled checks: IP RBLs , URI blocklists, DNS security filters , Microsoft SNDS, phishing intelligence, and specialized reputation feeds.

Start your 14-day free trial Browse source inventory
Active sources
60+

deduplicated source hosts

Coverage families
4

source categories in use

Provider systems
35+

represented reputation brands

Removal guidance
34

sources with provider instructions

Live catalog map

60+ sources

Active

IPv4

0spam.fusionzero.com / all.s5h.net / backscatter.spameatingmonkey.net

31

IPv6

all.s5h.net / bl.ipv6.spameatingmonkey.net / bl.nordspam.com

8

URI

152.53.125.125 / 152.53.125.126 / 152.53.125.127

20

DNS Security

1.1.1.2 / 1.1.1.3 / 152.53.125.125

22

Coverage by category

The catalog answers more than one reputation question

Sender reputation failures rarely come from one place. HostRepute groups sources by what they evaluate so teams can understand why a listing matters.

31

IPv4

DNSBL and RBL zones that evaluate IPv4 sender addresses for spam, compromised hosts, open relays, and abuse signals.

0spam.fusionzero.com all.s5h.net backscatter.spameatingmonkey.net bl.mailspike.net bl.nordspam.com
8

IPv6

IPv6-aware reputation zones for teams sending from modern dual-stack infrastructure.

all.s5h.net bl.ipv6.spameatingmonkey.net bl.nordspam.com dnsbl.dronebl.org dnsbl.spfbl.net
20

URI

URI and domain blocklists that catch malicious or spam-linked domains inside message bodies.

152.53.125.125 152.53.125.126 152.53.125.127 156.154.70.1 156.154.70.2
22

DNS Security

DNS security filters and protective resolvers that can block access to risky domains before users connect.

1.1.1.2 1.1.1.3 152.53.125.125 152.53.125.126 152.53.125.127

Featured source systems

Important reputation systems, represented honestly

These cards appear only when the provider is represented in the active HostRepute catalog. Counts are derived from the current database, not hard-coded marketing copy.

Source counts can change as feeds are added, deprecated, merged, or temporarily disabled for reliability.
Removal guidance is shown only when the source publishes a clear lookup, removal, or review process. Scan-specific pages use the same catalog when a listing appears.

UCEPROTECT-Network

IPv4

3
3 with removal guidance

Tiered listings that can affect individual IPs, neighboring network ranges, and larger provider blocks.

  • dnsbl-1.uceprotect.net

    dnsbl-1.uceprotect.net

  • dnsbl-2.uceprotect.net

    dnsbl-2.uceprotect.net

  • dnsbl-3.uceprotect.net

    dnsbl-3.uceprotect.net

Official source site

Mailspike

IPv4

1
1 with removal guidance

Mailspike reputation zones that help surface sudden changes in sender behavior.

  • bl.mailspike.net

    bl.mailspike.net

Official source site

SURBL

URI

1

URI reputation data for domains and URLs that appear inside unwanted or malicious messages.

  • multi.surbl.org

    multi.surbl.org

Official source site

Cloudflare Public DNS (Malware)

DNS Security

2

Public DNS malware blocking coverage for domains that may be blocked at resolver level.

  • Cloudflare Malware

    1.1.1.2

  • Cloudflare Malware & Adult

    1.1.1.3

Official source site

Quad9

DNS Security

1

Protective DNS blocking signals from Quad9 for malicious domain visibility.

  • Quad9

    9.9.9.9

Official source site

Full source inventory

Active sources grouped exactly as HostRepute uses them

Expand a category to review source hosts, provider labels, and the data source family each host belongs to.

31 active sources

IPv4

DNSBL and RBL zones that evaluate IPv4 sender addresses for spam, compromised hosts, open relays, and abuse signals.

0spam.fusionzero.com

0spam.fusionzero.com

Guidance available Active
Provider 0spam.fusionzero.com
Family IPv4

all.s5h.net

all.s5h.net

Guidance available Active
Provider S5H.net
Family IPv6, IPv4

backscatter.spameatingmonkey.net

backscatter.spameatingmonkey.net

Guidance available Active
Provider Spam Eating Monkey
Family IPv4

bl.mailspike.net

bl.mailspike.net

Guidance available Active
Provider Mailspike
Family IPv4

bl.nordspam.com

bl.nordspam.com

Guidance available Active
Provider NordSpam
Family IPv6, IPv4

bl.spameatingmonkey.net

bl.spameatingmonkey.net

Guidance available Active
Provider Spam Eating Monkey
Family IPv4

bl.tiopan.com

bl.tiopan.com

Guidance available Active
Provider Tiopan
Family IPv4

blacklist.woody.ch

blacklist.woody.ch

Guidance available Active
Provider Woody's SMTP Blacklist
Family IPv4

bogons.cymru.com

bogons.cymru.com

Guidance available Active
Provider Team Cymru Bogon List
Family IPv4

cbl.abuseat.org

cbl.abuseat.org

Guidance available Active
Provider CBL (Composite Blocking List)
Family IPv4

dnsbl-1.uceprotect.net

dnsbl-1.uceprotect.net

Guidance available Active
Provider UCEPROTECT-Network
Family IPv4

dnsbl-2.uceprotect.net

dnsbl-2.uceprotect.net

Guidance available Active
Provider UCEPROTECT-Network
Family IPv4

dnsbl-3.uceprotect.net

dnsbl-3.uceprotect.net

Guidance available Active
Provider UCEPROTECT-Network
Family IPv4

dnsbl.dronebl.org

dnsbl.dronebl.org

Active
Provider DroneBL
Family IPv4, IPv6

dnsbl.spfbl.net

dnsbl.spfbl.net

Guidance available Active
Provider SPFBL.net
Family IPv4, IPv6

dnsrbl.swinog.ch

dnsrbl.swinog.ch

Guidance available Active
Provider Swinog
Family IPv4

dyna.spamrats.com

dyna.spamrats.com

Guidance available Active
Provider SpamRATS
Family IPv4

ips.backscatterer.org

ips.backscatterer.org

Guidance available Active
Provider Backscatterer.org
Family IPv4

korea.services.net

korea.services.net

Guidance available Active
Provider KOREA Services NET
Family IPv4

netbl.spameatingmonkey.net

netbl.spameatingmonkey.net

Guidance available Active
Provider Spam Eating Monkey
Family IPv4

noptr.spamrats.com

noptr.spamrats.com

Guidance available Active
Provider SpamRATS
Family IPv4

rbl.realtimeblacklist.com

rbl.realtimeblacklist.com

Guidance available Active
Provider RealtimeBlacklist.com
Family IPv4

rbl.schulte.org

rbl.schulte.org

Guidance available Active
Provider Schulte.org
Family IPv4

relays.nether.net

relays.nether.net

Guidance available Active
Provider Relays.nether.net
Family IPv4

spam.spamrats.com

spam.spamrats.com

Guidance available Active
Provider SpamRATS
Family IPv4

spamrbl.imp.ch

spamrbl.imp.ch

Active
Provider IMP.ch
Family IPv4

spamrbl.swinog.ch

spamrbl.swinog.ch

Guidance available Active
Provider Swinog
Family IPv4

spamsources.fabel.dk

spamsources.fabel.dk

Active
Provider SpamSources (Fabel.dk)
Family IPv4

tor.dan.me.uk

tor.dan.me.uk

Active
Provider Tor Exit Nodes (Dan.me.uk)
Family IPv6, IPv4

truncate.gbudb.net

truncate.gbudb.net

Active
Provider GBUdb.net
Family IPv4

wormrbl.imp.ch

wormrbl.imp.ch

Active
Provider IMP.ch
Family IPv4

8 active sources

IPv6

IPv6-aware reputation zones for teams sending from modern dual-stack infrastructure.

all.s5h.net

all.s5h.net

Guidance available Active
Provider S5H.net
Family IPv6, IPv4

bl.ipv6.spameatingmonkey.net

bl.ipv6.spameatingmonkey.net

Guidance available Active
Provider Spam Eating Monkey
Family IPv6

bl.nordspam.com

bl.nordspam.com

Guidance available Active
Provider NordSpam
Family IPv6, IPv4

dnsbl.dronebl.org

dnsbl.dronebl.org

Active
Provider DroneBL
Family IPv4, IPv6

dnsbl.spfbl.net

dnsbl.spfbl.net

Guidance available Active
Provider SPFBL.net
Family IPv4, IPv6

ipv6.blacklist.woody.ch

ipv6.blacklist.woody.ch

Guidance available Active
Provider Woody's SMTP Blacklist
Family IPv6

tor.dan.me.uk

tor.dan.me.uk

Active
Provider Tor Exit Nodes (Dan.me.uk)
Family IPv6, IPv4

v6.fullbogons.cymru.com

v6.fullbogons.cymru.com

Guidance available Active
Provider Team Cymru Bogon List
Family IPv6

20 active sources

URI

URI and domain blocklists that catch malicious or spam-linked domains inside message bodies.

dns4eu.dns4eu.eu

152.53.125.125

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

dns4eu-ad.dns4eu.eu

152.53.125.126

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

dns4eu-child.dns4eu.eu

152.53.125.127

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

business.vercara.com

156.154.70.1

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

threat.vercara.com

156.154.70.2

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

family.vercara.com

156.154.70.3

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

adult-filter-dns.cleanbrowsing.org

185.228.168.10

Active
Provider CleanBrowsing
Family DNS Security, URI

family-filter-dns.cleanbrowsing.org

185.228.168.168

Active
Provider CleanBrowsing
Family DNS Security, URI

malware.controld.com

76.76.2.1

Active
Provider Control D
Family DNS Security, URI

ada.controld.com

76.76.2.2

Active
Provider Control D
Family DNS Security, URI

family.controld.com

76.76.2.3

Active
Provider Control D
Family DNS Security, URI

social.controld.com

76.76.2.4

Active
Provider Control D
Family DNS Security, URI

black.uribl.com

black.uribl.com

Active
Provider URIBL
Family URI

dbl.nordspam.com

dbl.nordspam.com

Guidance available Active
Provider NordSpam
Family URI

dbl.tiopan.com

dbl.tiopan.com

Guidance available Active
Provider Tiopan
Family URI

multi.surbl.org

multi.surbl.org

Active
Provider SURBL
Family URI

uri.blacklist.woody.ch

uri.blacklist.woody.ch

Guidance available Active
Provider Woody's SMTP Blacklist
Family URI

uribl.spameatingmonkey.net

uribl.spameatingmonkey.net

Guidance available Active
Provider Spam Eating Monkey
Family URI

uribl.spfbl.net

uribl.spfbl.net

Guidance available Active
Provider SPFBL.net
Family URI

uribl.swinog.ch

uribl.swinog.ch

Guidance available Active
Provider Swinog
Family URI

22 active sources

DNS Security

DNS security filters and protective resolvers that can block access to risky domains before users connect.

Cloudflare Malware

1.1.1.2

Active
Provider Cloudflare Public DNS (Malware)
Family DNS Security

Cloudflare Malware & Adult

1.1.1.3

Active
Provider Cloudflare Public DNS (Malware)
Family DNS Security

dns4eu.dns4eu.eu

152.53.125.125

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

dns4eu-ad.dns4eu.eu

152.53.125.126

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

dns4eu-child.dns4eu.eu

152.53.125.127

Active
Provider DNS4EU (Whalebone)
Family DNS Security, URI

business.vercara.com

156.154.70.1

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

threat.vercara.com

156.154.70.2

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

family.vercara.com

156.154.70.3

Active
Provider Vercara (UltraDNS)
Family DNS Security, URI

adult-filter-dns.cleanbrowsing.org

185.228.168.10

Active
Provider CleanBrowsing
Family DNS Security, URI

family-filter-dns.cleanbrowsing.org

185.228.168.168

Active
Provider CleanBrowsing
Family DNS Security, URI

OpenDNS FamilyShield

208.67.222.123

Active
Provider OpenDNS FamilyShield
Family DNS Security

malware.controld.com

76.76.2.1

Active
Provider Control D
Family DNS Security, URI

ada.controld.com

76.76.2.2

Active
Provider Control D
Family DNS Security, URI

family.controld.com

76.76.2.3

Active
Provider Control D
Family DNS Security, URI

social.controld.com

76.76.2.4

Active
Provider Control D
Family DNS Security, URI

family.yandex.ru

77.88.8.7

Active
Provider Yandex DNS
Family DNS Security

safe.yandex.ru

77.88.8.88

Active
Provider Yandex DNS
Family DNS Security

Comodo Secure DNS

8.26.56.26

Active
Provider Comodo Secure DNS
Family DNS Security

Quad9

9.9.9.9

Active
Provider Quad9
Family DNS Security

dns.adguard-dns.com

94.140.14.14

Active
Provider AdGuard DNS
Family DNS Security

family.adguard-dns.com

94.140.14.15

Active
Provider AdGuard DNS
Family DNS Security

CleanBrowsing Security

security-filter-dns.cleanbrowsing.org

Active
Provider CleanBrowsing
Family DNS Security

Source inventory questions

Practical details for teams comparing coverage

Which data sources does HostRepute monitor?

HostRepute checks the active source catalog configured in the application. That catalog currently includes 60+ sources across IP blacklists, URI/domain blocklists, DNS security filters, and specialized reputation feeds.

Are these sources checked continuously?

Monitored hosts are checked on the schedule available to the team plan. Results are stored as monitoring history so teams can review source-level changes over time.

Why are sources grouped by category?

Different sources answer different reputation questions. IP RBLs focus on sender infrastructure, URI lists focus on domains inside messages, DNS security filters model resolver-level blocking, and premium feeds add provider-specific context.

Can my team choose a smaller monitoring profile?

Yes. HostRepute supports monitoring profiles so teams can decide which active sources should be used for a monitored host or workflow.

Does HostRepute include blacklist removal guidance?

When a source has provider-published removal instructions, HostRepute stores that guidance in the catalog and surfaces it beside listed scan results.

Monitor the sources behind your sender reputation

Create a team, add an IP address or domain, and let HostRepute check the active source catalog on your plan schedule.

Start your 14-day free trial
Review blacklist monitoring Compare plans