EFnet RBL
The EFnet RBL is a blocklist used to restrict undesirable clients like open proxies, TOR exit nodes, and hosts known for spreading viruses.
Updated on 17 Jun 2026: We updated this guide for EFnet's current mirror, reply codes, and removal workflow.
Summarize with
Check if you are listed on EFnet RBL
And 143 other blocklists.
Spamhaus
0Spam
Cisco
NoSolicitado
URIBL
abuse.ro
ALPHANET
Anonmails
Ascams
BLOCKEDSERVERS
Calivent Networks
EFnet
JustSpam
Kempt.net
NordSpam
RV-SOFT Technology
Scientific Spam
Spamikaze
SpamRATS
SPFBL
Suomispam
System 5 Hosting
Team Cymru
Validity
www.blocklist.de Fail2Ban-Reporting Service
ZapBL
2stepback.dk
Fayntic Services
ORB UK
technoirc.org
TechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftWhat is EFnet RBL?
The EFnet RBL (rbl.efnetrbl.org) is a DNS-based blocklist designed for Internet Relay Chat (IRC) network administrators. It helps IRC admins block undesirable clients from connecting to IRC servers, especially clients tied to open proxies, malware, Tor exit nodes, and drone or flooding patterns. It is an IP-based blacklist (or blocklist) that combines several EFnet data sources into one DNSBL.
The current public host, rbl.efnetrbl.org, mirrors the older rbl.efnet.org zone with the same data and DNS responses. EFnet asks administrators to use the mirror in configurations.
The policy of this particular blacklist (or blocklist) aggregates listings based on specific criteria. An IP address can be listed on the EFnet RBL for several reasons, including:
- Open proxies scanned by EFnet Open Proxy Monitors.
- Spamtrap hosts with a score of 666, used for known self-spreading viruses and trojans.
- Spamtrap hosts with a score of 50 or more, used for viruses and trojans known to self-spread.
- Scanned Tor exit node proxies.
- Other disruptive clients added manually by trusted administrators or automatically by drone detection patterns.
Listing duration depends on the type of threat. Open proxies and spamtrap hosts are listed for seven days. Tor nodes are listed for ten days because they tend to be more stable.
How EFnet RBL lookups work
EFnet RBL uses DNSBL A-record replies. In a server configuration, the response value tells the IRC server why the IP address is listed and what ban reason to apply.
EFnet RBL reply valuestext
1 = Open proxy 2 = Spamtrap score 666 3 = Spamtrap score 50 or more 4 = Tor exit node 5 = Drones / flooding
These replies matter because not every listing means the same thing. A Tor exit-node listing usually calls for IRC access control, while an open proxy or spamtrap listing should trigger a host security review.
Who runs EFnet RBL?
The blocklist is operated by the EFnet IRC community through EFnet's RBL infrastructure and trusted administrators. EFnet is the Eris Free Network, the IRC network name that followed the removal of eris.berkeley.edu in 1990. IRC predates EFnet, but the EFnet name and network identity come from that split.
Each EFnet server is managed by local operators and administrators, so enforcement can differ by server. The RBL gives those administrators shared data for blocking known abuse sources.
How do I get removed and delisted from EFnet RBL?
The delisting process for the EFnet RBL is straightforward. First, identify the IP address that is on the blacklist. After confirming the listing, use the official delisting form. The form asks for a name, valid email address, IP address, optional manual review, and a short message. You can access the removal page directly. Manual review takes longer than an automated request when available.
Before requesting removal, ensure that the issue causing the listing has been fully resolved. Close open proxies, remove malware or trojans, stop drone or flooding behavior, or expect repeated listings if the IP address is still operating as a Tor exit node. Submitting a delisting request without fixing the underlying problem will likely result in the IP being listed on the blocklist again.
What's the impact of being listed on EFnet RBL?
The impact of being on the EFnet RBL is generally low for email senders. This blocklist is specialized for IRC abuse control and is not a mainstream email blacklist. Major mailbox providers like Gmail, Outlook, and Yahoo do not use EFnet RBL to filter mail, so a listing is unlikely to affect DMARC, SPF, DKIM results, or inbox placement directly.
The direct impact is IRC access. Servers that use the RBL can reject or temporarily K-line the listed IP address, depending on local server configuration. In Suped's DMARC reporting product, classify an EFnet RBL hit as contextual IP reputation information, not as a DMARC authentication failure, when reviewing sending issues.
