An IP blacklist (DNSBL) is a database of IP addresses flagged for spam, malware, or abuse that mail servers query in real time. When a mail server receives an incoming connection, it checks the sender's IP against major DNSBLs in milliseconds. If the IP is listed, the mail server can reject the email outright (550 error), route it to spam, or throttle delivery. Being listed on Spamhaus ZEN — the most widely used DNSBL — causes hard rejection at Gmail, Outlook, Yahoo, and virtually all enterprise mail servers. This means your emails don't just go to spam; they bounce back to you with an error message before the recipient ever has a chance to see them.

The Spamhaus delisting process depends on which Spamhaus list you're on. For SBL (direct spam source): visit spamhaus.org/lookup, look up your IP, and follow the removal request form — requires proving you've stopped the spam and fixed the underlying cause. For XBL (malware/botnet): the listing usually comes from CBL (abuseat.org) — visit abuseat.org/lookup.cgi, acknowledge the issue, and CBL will notify Spamhaus to remove you (typically within a few hours). For PBL (residential/dynamic IP): this is a policy listing, not a spam listing — you cannot remove a home broadband IP from PBL. Instead, configure your email client to send via your ISP's SMTP server (port 587) rather than directly to mail servers. For CSS (customer service spam): requires direct communication with Spamhaus.

Several situations can lead to a legitimate IP being blacklisted without intentional spam: (1) Compromised server — malware or a botnet running on your server sends spam without your knowledge. Check running processes and SMTP logs. (2) Shared hosting — another customer on the same IP sends spam, affecting everyone. (3) Residential IP — Spamhaus PBL lists residential ranges by design to prevent direct-to-MX sending. (4) Spam traps in your list — you may have sent to an old email address that became a spam trap. (5) Previously blacklisted IP reassigned to you — common with newly allocated cloud server IPs. (6) High bounce rate — sending to many invalid addresses damages reputation and can trigger listings.

Removal timelines vary significantly by blacklist: Spamhaus ZEN/SBL/XBL: typically 1–6 hours after a successful removal request. CBL (ABUSEAT): usually within 1–3 hours after acknowledging the issue. Barracuda BRBL: their site says 12 hours but often faster; requires no new spam reports. SpamCop: automatically expires 24 hours after the last spam report — no manual removal needed, just stop the spam. SORBS: 24–48 hours after submitting their removal form. UCEPROTECT L1: claims instant removal after payment (free removal after 1–2 weeks). Blocklist.de: typically auto-removes after a set period with no new attack reports. The key point: all these timelines assume the root cause has been fixed before requesting removal.

These are three distinct Spamhaus lists with different meanings: SBL (Spamhaus Blocklist) — IPs from which Spamhaus has observed spam being sent. This is a direct spam source listing and the most serious. XBL (Exploits Blocklist) — IPs of hijacked PCs, open proxies, and malware-infected hosts. Your IP may appear here because it's compromised, not because you intentionally sent spam. The underlying data comes from the CBL (Composite Blocking List). PBL (Policy Blocklist) — IPs that should not be sending email directly to mail servers. Includes residential ISP ranges, dynamic IPs, and IP blocks where the ISP has requested listing. This is not a spam listing — it's a policy listing. Being on PBL means your IP is in a range that shouldn't be sending direct-to-MX mail. Use port 587 via your ISP's mail server. The ZEN list combines all three.

Not necessarily — the impact depends on which blacklist and the mail provider you're sending to. Being on Spamhaus ZEN is extremely serious and will cause rejection at most major providers. Being on UCEPROTECT L3 or WPBL may have minimal real-world impact as few providers use those lists. The critical blacklists to be clean on are: Spamhaus ZEN (covers SBL+XBL+PBL), Barracuda BRBL, SpamCop, SORBS, and CBL. If those are all clean, most mainstream email will deliver normally. Secondary blacklists (DroneBL, WPBL, PSBL) generally affect a smaller proportion of recipients and are lower priority for remediation.

Use our Reverse IP Lookup tool to check the PTR record of your mail server IP. Enter your server's IP and look at the Hostname / PTR field. If it shows "No PTR record," you need to set one with your hosting provider (not your domain registrar — PTR records are controlled by the IP block owner). Most hosting providers offer PTR configuration in their control panel or via a support request. The PTR should resolve to your mail hostname (e.g., mail.yourdomain.com), and that hostname should have an A record pointing back to the same IP. This bidirectional consistency is called FCrDNS and is required for deliverability to Gmail and many enterprise mail systems.

Yes — domain blacklisting is separate from IP blacklisting and works differently. SURBL (Spam URI Real-time Blocklist) and URIBL list domains that appear in spam message bodies — the domain you're sending from, or domains you link to in your emails. Domain blacklisting is checked by content filters rather than connection-level filters. Your domain can be blacklisted even if your sending IP is clean. Additionally, Google, Microsoft, and Yahoo maintain their own internal domain reputation scores. Sending consistently low-engagement email (low open rates, high spam reports) will degrade your domain reputation even without a formal DNSBL listing.

An IP blacklist lists IP addresses — it's checked at the connection level when a mail server connects to deliver email. An email blacklist (or domain blacklist like SURBL/URIBL) lists domain names or email addresses — it's checked by content filters after the email is accepted. Both can prevent delivery but at different stages. IP blacklisting causes connection-level rejection (before the email content is even transmitted). Domain blacklisting causes content-level filtering (the email may be accepted but then filtered based on domain reputation). You need to be clean on both for reliable email deliverability.

Yes — completely free, no signup, no account, no API key required. The tool scans your IP against 20 major DNSBLs simultaneously and returns results with severity ratings and direct links to each blacklist's delisting page. We do not store, log, or share the IP addresses you check. Privacy is by default. The check takes approximately 20–30 seconds to query all 20 blacklists and collate results.