The Cisco SpamCop Blocking List (SCBL) is a DNS-based blocklist (blacklist) that contains a list of IP addresses known to have sent email reported as spam by SpamCop users. Internet service providers, businesses, and individual users utilize the SCBL to filter and block unwanted emails. It functions as an aggressive and highly automated blacklist, quickly adding IP addresses based on spam reports from various sources, including user submissions and automated spamtraps.
A key feature of this blocklist is its time-based system. IP addresses are listed for a limited duration, typically 24 hours, and are automatically removed if no new spam reports are received. SpamCop uses a reputation system, where mail servers gain points for sending legitimate email, which helps balance against false positives. Due to its aggressive nature, SpamCop advises users of the blacklist to combine it with an allowlist of trusted senders or to use a 'tag and divert' approach instead of outright blocking messages.
- Report Weighting: Reports for recently received emails are weighted more heavily than older ones. Reports older than one week are ignored.
- Spamtrap Integration: Reports from spamtraps (email addresses used exclusively to catch spam) significantly increase an IP's negative score.
- Listing Threshold: An IP address needs more than one spam report to be listed. For an IP with only two reports, the listing duration is capped at 12 hours.
- Automatic Expiration: Listings automatically expire. If no new reports are received against an IP within 24 hours, it is removed from the blocklist.