Why IPs end up on blacklists
Blacklists (DNSBLs or RBLs) are lists of IP addresses that mail servers and firewalls consult before accepting a connection. An address gets listed when it sends spam, hits spam traps, gets hacked and joins a botnet, or attacks logins. A listing often comes with the address: cloud and VPS IPs are reused, so a server you just bought may carry its previous owner's history.
If your IP is listed
- Find the cause first. Check the mail queue and logs for spam you didn't send (a hacked WordPress plugin or a contact form abused by bots is the usual culprit), and look for unknown processes or users.
- Fix reverse DNS. Set a PTR record at your hosting provider that matches your mail server's name. Generic names such as
static.1.2.3.4.provider.netlook like home connections to many filters. - Request removal from each list's own page (linked in the results). Most lists remove addresses automatically after a few days without new spam; some, like UCEPROTECT, list whole provider ranges, which you can't fix yourself.
- If you just bought the server and it is listed, ask your provider for a clean IP: it is usually quicker than delisting.
Lists checked
Barracuda, SpamCop, UCEPROTECT Level 1, PSBL, Mailspike, SpamRATS, 0spam, DroneBL, blocklist.de, GBUdb Truncate, InterServer, NordSpam, JustSpam, Anonmails and SEM Backscatter, all at once. Spamhaus, the most widely used list, refuses lookups from shared servers; check it on Spamhaus's own site using the link in the results.