Overview

All outgoing MTAs are monitored using MXToolbox Blacklist Monitoring, which checks our sending IPs against a wide set of worldwide DNSBL/RBL providers.
The monitoring runs continuously and alerts whenever an IP becomes listed. If a listing occurs we handle delisting when possible. No customer action is required.


Which blocklists are monitored?

Below is a list of blocklists monitored through MXToolbox, including their active DNSBL endpoints where applicable.
Most of them are relevant for worldwide email delivery and are operationally reliable. They are transparent in listings and offer manual delisting procedures. 

✅ DNSBLs currently monitored

BlacklistEndpoint
0SPAMbl.0spam.org
0SPAM RBLrbl.0spam.org
Abusix Mail Intelligence Blacklist(hidden)
Abusix Mail Intelligence Domain Blacklist(hidden)
Abusix Mail Intelligence Exploit List(hidden)
Anonmails DNSBLspam.dnsbl.anonmails.de
Backscattererips.backscatterer.org
Barracudab.barracudacentral.org
Blocklist.debl.blocklist.de
Caliventdnsbl.calivent.com.pe
Cymru Bogonsbogons.cymru.com
Dan TORtor.dan.me.uk
DrMXbl.drmx.org
Drone BLdnsbl.dronebl.org
Fabelsourcesspamsources.fabel.dk
HILhil.habeas.com
Hostkarma Blackblack.junkemailfilter.com
IMP Spamspamrbl.imp.ch
IMP Wormwormrbl.imp.ch
Interserverrbl.interserver.net
ivmSIP(hidden)
ivmSIP24(hidden)
JIPPGmail-abuse.blacklist.jippg.org
KEMPTBLdnsbl.kempt.net
Konstantbl.konstant.no
Lashbackubl.unsubscore.com
Mailspike BLbl.mailspike.net
Mailspike Zz.mailspike.net
MSRBL Phishingphishing.rbl.msrbl.net
MSRBL Spamspam.rbl.msrbl.net
Netherrelaysrelays.nether.net
Netherunsureunsure.nether.net
Nordspam BLbl.nordspam.com
NoSolicitadobl.nosolicitado.org
PSBLpsbl.surriel.com
RATS DYNAdyna.spamrats.com
RATS NoPtrnoptr.spamrats.com
RATS Spamall.spamrats.com
s5h.netall.s5h.net
Schulterbl.schulte.org
SEM Backscattererbackscatter.spameatingmonkey.net
SEM Blackbl.spameatingmonkey.net
Sender Score Reputation Networkbl.score.senderscore.com
Servicesnetkorea.services.net
Spamcopbl.spamcop.net
Spamhaus ZENzen.spamhaus.org
SPFBL DNSBLdnsbl.spfbl.net
Suomispam Reputationbl.suomispam.net
SWINOGdnsrbl.swinog.ch
TRIUMFrbl2.triumf.ca
Truncatetruncate.gbudb.net
UCEPROTECTL1dnsbl-1.uceprotect.net
UCEPROTECTL2dnsbl-2.uceprotect.net
UCEPROTECTL3dnsbl-3.uceprotect.net
Woodys SMTP Blacklistblacklist.woody.ch
ZapBLdnsbl.zapbl.net

Some DNSBLs (Abusix) do not expose endpoints publicly. MXToolbox supports them via API-level integration.

Microsoft (Outlook/Hotmail) blocklisting

Microsoft does not appear in MXToolbox's monitored blacklist list because their blocklist is not publicly accessible. Instead of publishing listings, Microsoft only communicates blocks through SMTP bounce messages. Below is an example of such a bounce, which can indicate either an S3140 or S3150 block on their internal system. 

The mail system <xxx@hotmail.com>: host
hotmail-com.olc.protection.outlook.com[52.101.11.5] said: 550 5.7.1
Unfortunately, messages from [x.x.x.x] weren't sent. Please contact
your Internet service provider since part of their network is on our block
list (S3150). You can also refer your provider to
http://mail.live.com/mail/troubleshooting.aspx#errors.

This message confirms that Microsoft rejected the message due to a block on their internal IP reputation list. Unlike public DNSBLs, delisting must be handled through Microsoft Support and can't be queried directly online.

Other resources

MultiRBL Valli: https://multirbl.valli.org
This tool checks a domain or IP against more than 200 DNS blacklists and whitelists, and also performs an FCrDNS identity validation. It provides a detailed list of results along with information about each blacklist, including any return codes associated with the listing.


What can I do as an affected customer?

There is no action required on the customer side. When a customer reports delivery problems caused by a blacklisting, Support first needs to determine whether the blacklist is part of our monitored list (as checked via MXToolbox monitoring).

No customer action is required. If one of our sending IP addresses is listed in a monitored blacklist, Open-Xchange will handle the delisting when possible. In most cases blacklist removal requests take 24-48 hours, depending on the blacklist provider.

Blacklist removals can take longer in cases where:
• The listing is automatically time-based (waiting period)
• The blacklist does not support manual removal
• The provider requires additional remediation steps

⛔ About paid delisting
Some blacklist providers, such as UCEPROTECT, offer faster removal in return for payment. Open-Xchange does not pay for delisting and we do not consider such lists trustworthy indicators of sender reputation. We also advice receivers not to use their blacklist service.

This requires manual investigation because it may not be a public block. The issue may be related to:
• Some providers do not provide API access for monitoring purposes
• Private or commercial blacklist, not publicly available (i.e. Microsoft)
• Single mail provider block block (policy based)
• Regional ISP block
• SPF, DMARC or DKIM failures

For these particular cases Open-Xchange needs to contact those providers and will handle the removal, if possible, or must wait until the IP address is automatically delisted.

Spamtrap-based listings
Certain blacklists (Lashback) list IPs when they receive mail addressed to spamtrap accounts. Because spamtrap addresses are intentionally hidden, neither we or the customer can identify them. We continuously improve detection of compromised accounts and suspicious senders to reduce these risks.