A DNS-based blacklist (DNSBL) is a list of IPs or domains flagged as sources of spam or abuse, published as DNS records so mail servers can check it with an ordinary, fast DNS lookup on every incoming connection.

Why did my server get blacklisted?

Common causes include a compromised server sending spam, inheriting a bad reputation from shared hosting, an open mail relay, a missing or mismatched PTR record, or a sudden spike in outbound volume.

How do I get delisted?

Fix the underlying cause first, then use the DNSBL's self-service removal form — most major lists (Spamhaus, SORBS, Barracuda) provide one. On shared infrastructure, the request usually has to come from the hosting provider.

DNS Blacklists (DNSBL) Explained

A DNSBL is a list of IP addresses or domains flagged as sources of spam or abuse — queried using ordinary DNS lookups, which is what makes it fast enough for mail servers to check on every incoming message.

What a DNSBL Actually Is

A DNS-based blacklist (DNSBL) publishes its data as DNS records under its own zone. To check an IP, a mail server reverses its octets and queries them as a subdomain of the blacklist's zone — for example, checking 127.0.0.1 against Spamhaus ZEN means querying 1.0.0.127.zen.spamhaus.org. A DNS answer (typically an A record like 127.0.0.2) means the IP is listed; NXDOMAIN means it isn't.

Common Reasons for Getting Listed

A server was compromised and started sending spam without the operator noticing
Shared hosting or a VPS IP that a previous tenant used for abuse — the reputation problem outlives the tenant
An open mail relay or misconfigured proxy that anyone can send spam through
No PTR (reverse DNS) record, or one that doesn't match the sending domain — many DNSBLs and receiving servers treat this as suspicious on its own
A sudden spike in outbound volume that trips automated abuse detection, even for a legitimate mail migration

What Being Listed Actually Affects

The practical impact is almost entirely email deliverability: mail servers and spam filters query one or more DNSBLs on incoming connections and use a listing as a strong signal to reject or quarantine. A listing rarely affects web traffic or anything unrelated to mail.

How to Get Delisted

Fix the underlying cause first — a delisting that isn't followed by a fix just gets the IP listed again. Most major DNSBLs (Spamhaus, SORBS, Barracuda) provide a self-service lookup and removal request form once the issue is resolved; some entries expire automatically after a period of no further abuse. If the IP is on shared infrastructure, the removal request usually has to come from the hosting provider, not an individual tenant.

Check an IP or Domain

Run a blacklist check →Next: What is Certificate Transparency? →

Try it on your domain

See the theory in practice — run a IP & Domain Blacklist Check for your own domain.