Blacklist wiki · Retired
SORBS Web Exploits
SORBS Web lists IP addresses hosting vulnerable or exploited web applications that are being used to send spam or host phishing content.
- Zone
- Widely used
- Tier
- Author
At a glance
- Zone
- web.dnsbl.sorbs.net
- Tier
- Widely used. Referenced by many corporate filters and ISPs, usually as one signal among several. A listing costs you some recipients, and a scan reports it as a warning.
- What it lists
- IP addresses running exploited web applications used for spam or phishing.
- Impact
- Medium: targets web servers with security vulnerabilities.
- How to check
- Nothing to check: the zone no longer answers queries.
- How to delist
- No need: a list that has shut down holds no listings.
- Auto-expiry
- Does not auto-expire. Requires remediation and manual removal.
How to get delisted
Kept for reference: this list no longer operates.
- 01Check your IP on SORBS and identify the web exploit listing
- 02Audit your web applications for vulnerabilities (outdated CMS, plugins, etc.)
- 03Patch or remove the exploited application
- 04Submit a delisting request after remediation
- 05Implement a web application firewall (WAF) to prevent future exploits