Back to Support

Email delivery

DNSBL delisting guidance

What to do when a mail-server IP is listed by Spamhaus ZEN or SpamCop.

A DNS blocklist listing is a signal to investigate, not a reason to submit a removal request before the cause is fixed. Start by stopping the spam, abuse, compromise, or configuration problem that caused the listing. Confirm which organization owns the affected mail server or public IP, because a cloud or ISP provider may need to take the provider-facing action.

Start here: contain the sending source, review outbound mail activity and credentials, correct the issue permanently, and keep evidence of the fix. Then use the matching provider path below.

Spamhaus ZEN

ZEN combines several Spamhaus IP blocklists. Use the official Spamhaus IP and Domain Reputation Checker to look up the affected IP, understand the specific listing, and follow the returned remediation or removal path. Spamhaus directs ZEN users to that checker for listing detail and next steps.

Do not pay a third party that offers to remove a Spamhaus listing. Spamhaus states that removal is never charged and that paid removal offers are scams. If the IP is owned by an ISP, hosting provider, or cloud provider, coordinate with its abuse or security team, since it may be the party authorized to request removal.

Official references: Spamhaus ZEN blocklist and Spamhaus listing and removal FAQ.

SpamCop

Use the official SpamCop Blocking List checker to confirm the affected server. SpamCop lists IPs that have sent reported mail and describes its list as time-based: when reports stop, delisting is normally quick and automatic.

Focus on eliminating the source of reported mail and verifying that the sending IP is under the responsible owner’s control. If you received a SpamCop report, follow the links in that report for the message-specific details and response options. Avoid trying to force removal before the sending issue is resolved, because new reports can keep or return the listing.

Emberix

Emberix builds affordable SaaS tools for the small and mid-sized businesses other platforms ignore. Lens brings network management, assessment, and attack-surface visibility to MSPs and direct customers.

Built by people who've run MSPs

© 2026 Emberix. Built for MSPs, their clients, and direct customers alike.

Lens is an Emberix product. Verto, our billing and client-engagement platform for consultancies, is available separately at vertobill.com.

MSP-first