What is Spamhaus? The World's Most Important Email Blacklist Explained
Spamhaus blocks billions of spam emails daily. Learn what Spamhaus is, how SBL, XBL, PBL, CSS, and ZEN work, and what to do if you're listed.
What is Spamhaus?
Spamhaus is the world's most widely used email blacklist operator, responsible for blocking an estimated 80% of global spam. Founded in 1998, Spamhaus maintains several databases that ISPs, mail servers, and email security providers query in real time to decide whether to accept, filter, or reject incoming email.
A listing on any Spamhaus database is among the most damaging things that can happen to your email deliverability. Gmail, Yahoo, Outlook, and virtually every major email provider consults Spamhaus before delivering your email.
Spamhaus databases explained
Spamhaus operates several distinct databases, each targeting a different type of spam source. Most mail servers query the ZEN zone which combines all IP-based lists in a single DNS lookup.
Spamhaus blacklist zones reference
| Zone ↕ | Full Name ↕ | What It Lists ↕ | Removal Process ↕ |
|---|---|---|---|
| SBL | Spamhaus Block List | IPs and domains directly involved in spam operations | Manual request; Spamhaus reviews cause and remediation |
| CSS | CSS (subset of SBL) | High-volume spam operations, snowshoe spammers | Fix sending practices + submit removal request |
| XBL | Exploits Block List | Compromised PCs, malware, open proxies, botnets | Clean infection, then automated via CBL checker |
| PBL | Policy Block List | Dynamic IPs and residential connections not for direct email | Self-service if you have a static IP and valid PTR record |
| ZEN | ZEN (combined) | SBL + CSS + XBL + PBL in a single query | Resolve the specific underlying zone first |
| DBL | Domain Block List | Domains found in spam message bodies and URLs | Submit via Spamhaus DBL removal form |
| HASH | Spamhaus Hash Blocklist | Cryptographic hashes of known spam message content | Not IP/domain based — triggered by content matching |
How to check if you're on Spamhaus
Use a multi-blacklist checker to scan your domain and IP against all Spamhaus zones simultaneously. A listing will show which specific zone (SBL, XBL, PBL, CSS) you're on, which determines the removal process.
You can also query Spamhaus directly by looking up your IP at their website, or by doing a DNS query: for IP 1.2.3.4, query 4.3.2.1.zen.spamhaus.org.
How to get removed from Spamhaus
Removal depends on which zone you're listed in:
SBL: Requires submitting a removal request after fixing the underlying issue. Spamhaus manually reviews all SBL removal requests and will ask what caused the spam and how you've prevented recurrence.
XBL: Look up your IP at Spamhaus's XBL checker. If listed via the CBL (Composite Blocking List), the CBL provides automated removal. First clean the infected device or malware.
PBL: If you're on the PBL and legitimately running a mail server (not a dynamic IP), you can request PBL removal via the Spamhaus PBL removal form. This is for servers with valid PTR records and static IPs.
CSS: Fix sending practices (complaint rates, spam traps, list quality) and submit a removal request.
How to avoid Spamhaus listings
Prevention is far easier than removal: maintain list hygiene, never purchase email lists, keep complaint rates below 0.1%, secure your servers against compromise, avoid sending patterns that trigger spam traps, and monitor your blacklist status continuously so you catch listings before they compound.
- ✓Never purchase or rent email lists — guaranteed source of spam traps and complaints
- ✓Keep spam complaint rate below 0.10% — measured via Google Postmaster Tools
- ·Implement double opt-in for all new subscribers
- ✓Remove hard bounces immediately after the first occurrence
- ✓Suppress unsubscribers within 24 hours
- ·Patch servers immediately — compromised servers are the #1 cause of XBL listings
- ·Monitor blacklist status automatically — catch listings within minutes, not days
- ·Set up DMARC p=reject to prevent domain spoofing that leads to DBL listings
Check your domain's email health
Run a free scan against 60 blacklists. Validate SPF, DKIM, DMARC, and MX records in seconds.
Related free tools