How to Remove IP from Blacklist

Before Requesting Removal

Blacklists require you to fix the underlying problem first:

# 1. Scan for malware
sudo clamscan -r --bell -i /

# 2. Check for open relay
telnet YOUR_IP 25
EHLO test.com
MAIL FROM: test@test.com
RCPT TO: someuser@example.com
QUIT

# 3. Check for spam scripts
grep -r "eval(" /var/www
grep -r "base64_decode" /var/www

Spamhaus Removal

1. Go to https://www.spamhaus.org/lookup/
2. Enter your IP
3. Click "Lookup"
4. If listed on SBL, CSS, or XBL, click "Remove"
5. Provide justification (e.g., "Secured server, no more spam")
6. Wait 24-48 hours

Barracuda Removal

1. Visit https://barracudacentral.org/lookups
2. Enter IP and submit
3. Click "Request Removal"
4. Confirm you've fixed issues

SpamCop Removal

1. SpamCop listings expire automatically after 24-48 hours
2. Or visit https://www.spamcop.net/bl.shtml
3. Enter IP to check status

Other Major RBLs

SURBL: Listed due to domain, not IP. Remove domain from emails.

UCEPROTECT: Check at https://www.uceprotect.net. Removal may require payment for Level 2/3.

DNSWL: Whitelist request at https://www.dnswl.org.

After Removal

# Monitor delisting
watch -n 3600 "dig +short YOUR_IP.zen.spamhaus.org"

Prevent recurrence:

# Set up monitoring
sudo apt install rkhunter clamav fail2ban -y
# Configure daily scans
echo "0 2 * * * root clamscan -r --quiet /" >> /etc/crontab