This can happen because SPFBL has two different response codes for their blacklist:

  • 127.0.0.2 – which means that your IP is blacklisted for confirmed spam
  • 127.0.0.3 – which means that your IP is only suspected of sending spam

You can read more about their response codes here: http://spfbl.net/en/dnsbl/

Our platform only considers an IP as being blacklisted on this RBL for the first response code, and not for the “suspected of spam” response code, as well.

We have done this in order to prevent a lot of false positives.

So, if your IP is only suspected of spam, but not actually confirmed of sending spam, this RBL will return the second response code, which we do not consider as being blacklisted, but other blacklist monitoring services may show as being blacklisted, and this is where the discrepancy in results may come from.