IP黑名单检查
对一个公网地址进行实时DNSBL查询;如果黑名单公布了原因,会一并显示。
只使用允许免费公开查询的黑名单;只有当网站运营者配置了Spamhaus Data Query Service密钥时才会查询Spamhaus。是否列入由黑名单运营方判断,而不是我们:请打开黑名单链接查看原因和移除流程。
此内容尚无中文(中国)版本。在发布译文之前以英语显示。
A DNS blocklist (DNSBL, also called an RBL) is a list of addresses that a mail operator or security project considers a source of spam or abuse, published through DNS so that mail servers can check it in milliseconds. To ask whether 192.0.2.10 is on a list, the checker reverses the address and appends the list’s zone — 10.2.0.192.bl.spamcop.net — and resolves it. No answer (NXDOMAIN) means not listed. An answer in 127.0.0.0/8 means listed; the TXT record of the same name usually says why.
Which lists are checked. Only lists whose operators allow free public queries are used: SpamCop, PSBL, DroneBL and s5h.net. Spamhaus, the best-known list, does not allow commercial use or queries through public resolvers on its free tier, so it is queried only when the site operator has configured a Spamhaus Data Query Service key. Answers outside 127.0.0.0/8, and the codes some lists use to say “query refused”, are shown as no answer, never as a listing.
What a listing means. Each list has its own criteria and removal process. Dynamic addresses of home and mobile connections are often listed on purpose, because mail should leave through the provider’s mail server, not directly. Behind carrier-grade NAT (CGNAT), common on mobile and some fixed networks, thousands of customers share one public address, so a listing may be caused by someone else.
The Tor exit row comes from our own copy of the Tor Project’s exit list. It is not a spam list, but many blocklists and anti-fraud services treat Tor exits separately.
常见问题
My IP is listed. What should I do?
Open the list's site from the result, read the reason it gives and follow its removal procedure. If you run a mail server, fix the cause first (an open relay, an infected machine, a missing reverse DNS name), or the address will be listed again.
Why is my home or mobile IP listed although I never sent spam?
Some lists include every dynamic or residential address by policy, and under CGNAT many customers share your public address. It only matters if you send mail directly from that connection, which providers usually block anyway.
Do you store the addresses I check?
No. The address is sent to the blocklists' DNS servers to answer your question, the answers are cached in memory for 15 minutes, and nothing is written to disk or logs.
Why does a list show 'no answer'?
It did not answer within three seconds or refused the query (for example because of its rate limits). That says nothing about the address; try again later.