IPv4
31 active sourcesDNSBL and RBL zones that evaluate IPv4 sender addresses for spam, compromised hosts, open relays, and abuse signals.
- 0spam.fusionzero.com
- all.s5h.net
- backscatter.spameatingmonkey.net
- bl.mailspike.net
- bl.nordspam.com
Blacklist data sources for reputation operations
HostRepute keeps a readable inventory of the source catalog behind scheduled checks: IP RBLs, URI blocklists, DNS security filters, Microsoft SNDS, phishing intelligence, and specialized reputation feeds.
- Active sources
- 60+
- deduplicated source hosts
- Coverage families
- 4
- source categories in use
- Provider systems
- 35+
- represented reputation brands
- Removal guidance
- 34
- sources with provider instructions
Coverage by category
The catalog answers more than one reputation question
Sender reputation failures rarely come from one place. HostRepute groups sources by what they evaluate so teams can understand why a listing matters.
IPv6
8 active sourcesIPv6-aware reputation zones for teams sending from modern dual-stack infrastructure.
- all.s5h.net
- bl.ipv6.spameatingmonkey.net
- bl.nordspam.com
- dnsbl.dronebl.org
- dnsbl.spfbl.net
URI
20 active sourcesURI and domain blocklists that catch malicious or spam-linked domains inside message bodies.
- 152.53.125.125
- 152.53.125.126
- 152.53.125.127
- 156.154.70.1
- 156.154.70.2
DNS Security
22 active sourcesDNS security filters and protective resolvers that can block access to risky domains before users connect.
- 1.1.1.2
- 1.1.1.3
- 152.53.125.125
- 152.53.125.126
- 152.53.125.127
Featured source systems
Major reputation systems in the catalogue
Cards appear only for providers in the active catalogue.
Source counts can change as feeds are added, deprecated, merged, or temporarily disabled for reliability.
Removal guidance is shown only when the source publishes a clear lookup, removal, or review process. Scan-specific pages use the same catalog when a listing appears.
UCEPROTECT-Network
3 active sourcesIPv4
3 with removal guidance
Tiered listings that can affect individual IPs, neighboring network ranges, and larger provider blocks.
-
dnsbl-1.uceprotect.net
dnsbl-1.uceprotect.net
-
dnsbl-2.uceprotect.net
dnsbl-2.uceprotect.net
-
dnsbl-3.uceprotect.net
dnsbl-3.uceprotect.net
Mailspike
1 active sourcesIPv4
1 with removal guidance
Mailspike reputation zones that help surface sudden changes in sender behavior.
-
bl.mailspike.net
bl.mailspike.net
SURBL
1 active sourcesURI
URI reputation data for domains and URLs that appear inside unwanted or malicious messages.
-
multi.surbl.org
multi.surbl.org
Cloudflare Public DNS (Malware)
2 active sourcesDNS Security
Public DNS malware blocking coverage for domains that may be blocked at resolver level.
-
Cloudflare Malware
1.1.1.2
-
Cloudflare Malware & Adult
1.1.1.3
Quad9
1 active sourcesDNS Security
Protective DNS blocking signals from Quad9 for malicious domain visibility.
-
Quad9
9.9.9.9
Full source inventory
Active sources grouped exactly as HostRepute uses them
Expand a category to review source hosts, provider labels, and the data source family each host belongs to.
31
active sources
IPv4
DNSBL and RBL zones that evaluate IPv4 sender addresses for spam, compromised hosts, open relays, and abuse signals.
31 active sources
IPv4
DNSBL and RBL zones that evaluate IPv4 sender addresses for spam, compromised hosts, open relays, and abuse signals.
| Source | Host | Provider | Family | Removal guidance |
|---|---|---|---|---|
| 0spam.fusionzero.com | 0spam.fusionzero.com | 0spam.fusionzero.com | IPv4 | Guidance available |
| all.s5h.net | all.s5h.net | S5H.net | IPv6, IPv4 | Guidance available |
| backscatter.spameatingmonkey.net | backscatter.spameatingmonkey.net | Spam Eating Monkey | IPv4 | Guidance available |
| bl.mailspike.net | bl.mailspike.net | Mailspike | IPv4 | Guidance available |
| bl.nordspam.com | bl.nordspam.com | NordSpam | IPv6, IPv4 | Guidance available |
| bl.spameatingmonkey.net | bl.spameatingmonkey.net | Spam Eating Monkey | IPv4 | Guidance available |
| bl.tiopan.com | bl.tiopan.com | Tiopan | IPv4 | Guidance available |
| blacklist.woody.ch | blacklist.woody.ch | Woody's SMTP Blacklist | IPv4 | Guidance available |
| bogons.cymru.com | bogons.cymru.com | Team Cymru Bogon List | IPv4 | Guidance available |
| cbl.abuseat.org | cbl.abuseat.org | CBL (Composite Blocking List) | IPv4 | Guidance available |
| dnsbl-1.uceprotect.net | dnsbl-1.uceprotect.net | UCEPROTECT-Network | IPv4 | Guidance available |
| dnsbl-2.uceprotect.net | dnsbl-2.uceprotect.net | UCEPROTECT-Network | IPv4 | Guidance available |
| dnsbl-3.uceprotect.net | dnsbl-3.uceprotect.net | UCEPROTECT-Network | IPv4 | Guidance available |
| dnsbl.dronebl.org | dnsbl.dronebl.org | DroneBL | IPv4, IPv6 | Not published |
| dnsbl.spfbl.net | dnsbl.spfbl.net | SPFBL.net | IPv4, IPv6 | Guidance available |
| dnsrbl.swinog.ch | dnsrbl.swinog.ch | Swinog | IPv4 | Guidance available |
| dyna.spamrats.com | dyna.spamrats.com | SpamRATS | IPv4 | Guidance available |
| ips.backscatterer.org | ips.backscatterer.org | Backscatterer.org | IPv4 | Guidance available |
| korea.services.net | korea.services.net | KOREA Services NET | IPv4 | Guidance available |
| netbl.spameatingmonkey.net | netbl.spameatingmonkey.net | Spam Eating Monkey | IPv4 | Guidance available |
| noptr.spamrats.com | noptr.spamrats.com | SpamRATS | IPv4 | Guidance available |
| rbl.realtimeblacklist.com | rbl.realtimeblacklist.com | RealtimeBlacklist.com | IPv4 | Guidance available |
| rbl.schulte.org | rbl.schulte.org | Schulte.org | IPv4 | Guidance available |
| relays.nether.net | relays.nether.net | Relays.nether.net | IPv4 | Guidance available |
| spam.spamrats.com | spam.spamrats.com | SpamRATS | IPv4 | Guidance available |
| spamrbl.imp.ch | spamrbl.imp.ch | IMP.ch | IPv4 | Not published |
| spamrbl.swinog.ch | spamrbl.swinog.ch | Swinog | IPv4 | Guidance available |
| spamsources.fabel.dk | spamsources.fabel.dk | SpamSources (Fabel.dk) | IPv4 | Not published |
| tor.dan.me.uk | tor.dan.me.uk | Tor Exit Nodes (Dan.me.uk) | IPv6, IPv4 | Not published |
| truncate.gbudb.net | truncate.gbudb.net | GBUdb.net | IPv4 | Not published |
| wormrbl.imp.ch | wormrbl.imp.ch | IMP.ch | IPv4 | Not published |
8
active sources
IPv6
IPv6-aware reputation zones for teams sending from modern dual-stack infrastructure.
8 active sources
IPv6
IPv6-aware reputation zones for teams sending from modern dual-stack infrastructure.
| Source | Host | Provider | Family | Removal guidance |
|---|---|---|---|---|
| all.s5h.net | all.s5h.net | S5H.net | IPv6, IPv4 | Guidance available |
| bl.ipv6.spameatingmonkey.net | bl.ipv6.spameatingmonkey.net | Spam Eating Monkey | IPv6 | Guidance available |
| bl.nordspam.com | bl.nordspam.com | NordSpam | IPv6, IPv4 | Guidance available |
| dnsbl.dronebl.org | dnsbl.dronebl.org | DroneBL | IPv4, IPv6 | Not published |
| dnsbl.spfbl.net | dnsbl.spfbl.net | SPFBL.net | IPv4, IPv6 | Guidance available |
| ipv6.blacklist.woody.ch | ipv6.blacklist.woody.ch | Woody's SMTP Blacklist | IPv6 | Guidance available |
| tor.dan.me.uk | tor.dan.me.uk | Tor Exit Nodes (Dan.me.uk) | IPv6, IPv4 | Not published |
| v6.fullbogons.cymru.com | v6.fullbogons.cymru.com | Team Cymru Bogon List | IPv6 | Guidance available |
20
active sources
URI
URI and domain blocklists that catch malicious or spam-linked domains inside message bodies.
20 active sources
URI
URI and domain blocklists that catch malicious or spam-linked domains inside message bodies.
| Source | Host | Provider | Family | Removal guidance |
|---|---|---|---|---|
| dns4eu.dns4eu.eu | 152.53.125.125 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| dns4eu-ad.dns4eu.eu | 152.53.125.126 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| dns4eu-child.dns4eu.eu | 152.53.125.127 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| business.vercara.com | 156.154.70.1 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| threat.vercara.com | 156.154.70.2 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| family.vercara.com | 156.154.70.3 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| adult-filter-dns.cleanbrowsing.org | 185.228.168.10 | CleanBrowsing | DNS Security, URI | Not published |
| family-filter-dns.cleanbrowsing.org | 185.228.168.168 | CleanBrowsing | DNS Security, URI | Not published |
| malware.controld.com | 76.76.2.1 | Control D | DNS Security, URI | Not published |
| ada.controld.com | 76.76.2.2 | Control D | DNS Security, URI | Not published |
| family.controld.com | 76.76.2.3 | Control D | DNS Security, URI | Not published |
| social.controld.com | 76.76.2.4 | Control D | DNS Security, URI | Not published |
| black.uribl.com | black.uribl.com | URIBL | URI | Not published |
| dbl.nordspam.com | dbl.nordspam.com | NordSpam | URI | Guidance available |
| dbl.tiopan.com | dbl.tiopan.com | Tiopan | URI | Guidance available |
| multi.surbl.org | multi.surbl.org | SURBL | URI | Not published |
| uri.blacklist.woody.ch | uri.blacklist.woody.ch | Woody's SMTP Blacklist | URI | Guidance available |
| uribl.spameatingmonkey.net | uribl.spameatingmonkey.net | Spam Eating Monkey | URI | Guidance available |
| uribl.spfbl.net | uribl.spfbl.net | SPFBL.net | URI | Guidance available |
| uribl.swinog.ch | uribl.swinog.ch | Swinog | URI | Guidance available |
22
active sources
DNS Security
DNS security filters and protective resolvers that can block access to risky domains before users connect.
22 active sources
DNS Security
DNS security filters and protective resolvers that can block access to risky domains before users connect.
| Source | Host | Provider | Family | Removal guidance |
|---|---|---|---|---|
| Cloudflare Malware | 1.1.1.2 | Cloudflare Public DNS (Malware) | DNS Security | Not published |
| Cloudflare Malware & Adult | 1.1.1.3 | Cloudflare Public DNS (Malware) | DNS Security | Not published |
| dns4eu.dns4eu.eu | 152.53.125.125 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| dns4eu-ad.dns4eu.eu | 152.53.125.126 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| dns4eu-child.dns4eu.eu | 152.53.125.127 | DNS4EU (Whalebone) | DNS Security, URI | Not published |
| business.vercara.com | 156.154.70.1 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| threat.vercara.com | 156.154.70.2 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| family.vercara.com | 156.154.70.3 | Vercara (UltraDNS) | DNS Security, URI | Not published |
| adult-filter-dns.cleanbrowsing.org | 185.228.168.10 | CleanBrowsing | DNS Security, URI | Not published |
| family-filter-dns.cleanbrowsing.org | 185.228.168.168 | CleanBrowsing | DNS Security, URI | Not published |
| OpenDNS FamilyShield | 208.67.222.123 | OpenDNS FamilyShield | DNS Security | Not published |
| malware.controld.com | 76.76.2.1 | Control D | DNS Security, URI | Not published |
| ada.controld.com | 76.76.2.2 | Control D | DNS Security, URI | Not published |
| family.controld.com | 76.76.2.3 | Control D | DNS Security, URI | Not published |
| social.controld.com | 76.76.2.4 | Control D | DNS Security, URI | Not published |
| family.yandex.ru | 77.88.8.7 | Yandex DNS | DNS Security | Not published |
| safe.yandex.ru | 77.88.8.88 | Yandex DNS | DNS Security | Not published |
| Comodo Secure DNS | 8.26.56.26 | Comodo Secure DNS | DNS Security | Not published |
| Quad9 | 9.9.9.9 | Quad9 | DNS Security | Not published |
| dns.adguard-dns.com | 94.140.14.14 | AdGuard DNS | DNS Security | Not published |
| family.adguard-dns.com | 94.140.14.15 | AdGuard DNS | DNS Security | Not published |
| CleanBrowsing Security | security-filter-dns.cleanbrowsing.org | CleanBrowsing | DNS Security | Not published |
Source inventory questions
Practical details for teams comparing coverage
Which data sources does HostRepute monitor?
HostRepute checks the active source catalog configured in the application. That catalog currently includes 60+ sources across IP blacklists, URI/domain blocklists, DNS security filters, and specialized reputation feeds.
Are these sources checked continuously?
Monitored hosts are checked on the schedule available to the team plan. Results are stored as monitoring history so teams can review source-level changes over time.
Why are sources grouped by category?
Different sources answer different reputation questions. IP RBLs focus on sender infrastructure, URI lists focus on domains inside messages, DNS security filters model resolver-level blocking, and premium feeds add provider-specific context.
Can my team choose a smaller monitoring profile?
Yes. HostRepute supports monitoring profiles so teams can decide which active sources should be used for a monitored host or workflow.
Does HostRepute include blacklist removal guidance?
When a source has provider-published removal instructions, HostRepute stores that guidance in the catalog and surfaces it beside listed scan results.
Monitor the sources behind your sender reputation
Create a team, add an IP address or domain, and let HostRepute check the active source catalog on your plan schedule.