# Spamhaus Delisting: What to Do for SBL, CSS, XBL, PBL and DBL

URL: https://warmerly.com/blog/spamhaus-delisting-by-list-type
Published: 2026-10-14
Reading time: 7 minutes
Tags: Deliverability, Troubleshooting, Blocklists

> Which Spamhaus list are you on? What SBL, CSS, XBL, PBL and DBL each mean, why a listing returns after removal, and the order to fix things in.

First find out which Spamhaus list you are on, because the cause and the removal route differ. SBL and CSS are about spam sources, XBL is about hijacked machines, PBL is about address ranges that should not send mail directly, and DBL lists domains. Fix the cause, then use the removal option the Spamhaus lookup page shows for your exact listing.

> **How this was checked**: List purposes are as Spamhaus describes them on its own site. Removal routes and wait times change, so this page does not quote them: the lookup page for your IP or domain is the source of truth. Warmerly's own lookup treats Spamhaus answers in 127.255.255.x as the query being refused, not as a listing.

## The five lists

**Spamhaus lists, in plain English**
| List | What it covers | Typical cause | What to do |
| --- | --- | --- | --- |
| SBL | IP addresses sending or supporting spam | A spam source, or a provider range with bad customers | Fix the source. Removal normally needs a request through Spamhaus |
| CSS | Part of the SBL: IPs whose sending looks like snowshoe spam, many addresses used to spread volume | Many mailboxes or domains sending similar mail from one range | Stop the pattern, then follow the lookup page's removal option |
| XBL | IPs with exploited or hijacked machines | Malware, an open proxy, a compromised server | Clean the machine first, then request removal |
| PBL | IP ranges that should not send mail directly to other servers | A home or dynamic IP sending straight to receivers | Send through your provider's mail server. Owners of a static IP can ask to be removed |
| DBL | Domain names seen in spam or malicious content | Your domain, or a link domain in your mail, was used in spam | Find the offending domain, fix the cause, then request removal |

## Step 1: confirm the listing is real

Spamhaus refuses queries that come through large public DNS resolvers, and answers with a code in the 127.255.255.x range. A checker that treats any 127.x answer as a listing will show a false positive. Use the Spamhaus lookup page directly, or a checker that separates refused queries from listings, as Warmerly's blacklist checker does.

## Step 2: find the cause before you ask for removal

- Which IP or domain is listed: your own sending IP, a shared IP of your mail provider, or a link domain inside your messages?
- What changed in the days before: a new batch of mailboxes, a bought list, a template change, a new tracking domain?
- If the IP belongs to a provider, tell the provider. You cannot fix a shared range alone.

## Step 3: stop whatever caused it

A removal granted while the behaviour continues is usually followed by a new listing. Pause the affected sending, clean the list, remove the pattern that looked like snowshoe spam, and make sure unsubscribe and bounce handling work.

## Step 4: request removal through the lookup page

Search the IP or domain at Spamhaus's lookup page. It shows the list, the reason and the removal options available for that listing. Some listings can be removed by you, some need a request that a Spamhaus team reads, and some expire by themselves once the activity stops. Follow what the page offers. Write the request plainly: what happened, what you changed, and what stops it recurring.

## How to avoid it next time

- Do not send from many mailboxes on one IP range with near-identical messages.
- Verify lists, and stop sending to anyone who bounces or complains.
- Check blocklists regularly rather than after the damage. Warmerly monitors blocklists for connected domains and sending IPs and alerts you.

**Check and read more**
- [Free blacklist checker](https://warmerly.com/blacklist-checker)
- [What is an email blacklist?](https://warmerly.com/blog/what-is-an-email-blacklist)
- [Spam placement when authentication passes](https://warmerly.com/blog/emails-go-to-spam-when-spf-dkim-dmarc-pass)

---
Source: https://warmerly.com/blog/spamhaus-delisting-by-list-type
Full content index: https://warmerly.com/llms-full.txt
Site index: https://warmerly.com/llms.txt