Blacklist check UNIX/Linux utility. I was just a bit tired of web interfaces.

License: MIT License

Shell 100.00%

blacklist-check-unix-linux-utility's Introduction

blacklist-check-unix-linux-utility

Blacklist check UNIX/Linux utility. I was just a bit tired of web interfaces.

Introduction

Check blacklisting for domains and IP addresses in shell.

Works on UNIX/Linux systems with Bash.

Blacklists grabbed from https://hetrixtools.com/blacklist-check. Previously used http://multirbl.valli.org/, but changed due to hetrixtools.com providing a list with more reliable responses. You can find both below or go to the url and copy/paste them.

Installation

git clone https://github.com/adionditsak/blacklist-check-unix-linux-utility.git
cd blacklist-check-unix-linux-utility
chmod +x ./bl
mv ./bl /usr/local/bin

Usage

# Use with domains or IP addresses
$ ./bl domain.tld
$ ./bl 8.8.8.8 # IP

# Pipe with other UNIX utils, eg. grep. Only blacklisted:
$ ./bl domain.tld | grep "blacklisted"

Sample output

$ ./bl 8.8.8.8
You entered an IP: 8.8.8.8
8.8.8.8 name google-public-dns-a.google.com.
15-02-17_Feb:02:1424185674_+0000 8.8.8.8.0spam.fusionzero.com.          [not listed]
15-02-17_Feb:02:1424185674_+0000 8.8.8.8.0spam-killlist.fusionzero.com. [not listed]
15-02-17_Feb:02:1424185674_+0000 8.8.8.8.rbl.abuse.ro.                  [not listed]
15-02-17_Feb:02:1424185674_+0000 8.8.8.8.spam.dnsbl.anonmails.de.       [not listed]
15-02-17_Feb:02:1424185674_+0000 8.8.8.8.dnsbl.anticaptcha.net.         [not listed]
...

blacklists providers

multirbl.valli.org

#### blacklists - grabbed from http://multirbl.valli.org/ ####
blacklists="
0spamurl.fusionzero.com
uribl.zeustracker.abuse.ch
uribl.abuse.ro
bsb.empty.us
bsb.spamlookup.net
ex.dnsbl.org
in.dnsbl.org
bl.fmb.la
communicado.fmb.la
nsbl.fmb.la
short.fmb.la
black.junkemailfilter.com
ubl.nszones.com
uribl.pofon.foobar.hu
abuse.rfc-clueless.org
bogusmx.rfc-clueless.org
dsn.rfc-clueless.org
elitist.rfc-clueless.org
fulldom.rfc-clueless.org
postmaster.rfc-clueless.org
whois.rfc-clueless.org
mailsl.dnsbl.rjek.com
urlsl.dnsbl.rjek.com
rhsbl.rymsho.ru
public.sarbl.org
rhsbl.scientificspam.net
nomail.rhsbl.sorbs.net
badconf.rhsbl.sorbs.net
rhsbl.sorbs.net
fresh.spameatingmonkey.net
fresh10.spameatingmonkey.net
fresh15.spameatingmonkey.net
uribl.spameatingmonkey.net
urired.spameatingmonkey.net
dbl.spamhaus.org
dnsbl.spfbl.net
dbl.suomispam.net
multi.surbl.org
dob.sibl.support-intelligence.net
black.uribl.com
grey.uribl.com
multi.uribl.com
red.uribl.com
uri.blacklist.woody.ch
rhsbl.zapbl.net
sa.fmb.la
hostkarma.junkemailfilter.com
nobl.junkemailfilter.com
reputation-domain.rbl.scrolloutf1.com
reputation-ns.rbl.scrolloutf1.com
dwl.dnswl.org
iddb.isipp.com
_vouch.dwl.spamhaus.org
dnswl.spfbl.net
white.uribl.com
"

hetrixtools.com/blacklist-check

#### blacklists - grabbed from https://hetrixtools.com/blacklist-check ####
blacklists="
0spam.fusionzero.com
access.redhawk.org
all.s5h.net
all.spamrats.com
aspews.ext.sorbs.net
babl.rbl.webiron.net
backscatter.spameatingmonkey.net
b.barracudacentral.org
bb.barracudacentral.org
black.junkemailfilter.com
bl.blocklist.de
bl.drmx.org
bl.konstant.no
bl.mailspike.net
bl.nosolicitado.org
bl.nszones.com
block.dnsbl.sorbs.net
bl.rbl.scrolloutf1.com
bl.scientificspam.net
bl.score.senderscore.com
bl.spamcop.net
bl.spameatingmonkey.net
bl.suomispam.net
bsb.empty.us
cart00ney.surriel.com
cbl.abuseat.org
cbl.anti-spam.org.cn
cblless.anti-spam.org.cn
cblplus.anti-spam.org.cn
cdl.anti-spam.org.cn
combined.rbl.msrbl.net
db.wpbl.info
dnsbl-1.uceprotect.net
dnsbl-2.uceprotect.net
dnsbl-3.uceprotect.net
dnsbl.cobion.com
dnsbl.dronebl.org
dnsbl.justspam.org
dnsbl.kempt.net
dnsbl.net.ua
dnsbl.rv-soft.info
dnsbl.rymsho.ru
dnsbl.sorbs.net
dnsbl.spfbl.net
dnsbl.tornevall.org
dnsbl.zapbl.net
dnsrbl.org
dnsrbl.swinog.ch
dul.dnsbl.sorbs.net
dyna.spamrats.com
dyn.nszones.com
escalations.dnsbl.sorbs.net
fnrbl.fast.net
hostkarma.junkemailfilter.com
http.dnsbl.sorbs.net
images.rbl.msrbl.net
invaluement
ips.backscatterer.org
ix.dnsbl.manitu.net
l1.bbfh.ext.sorbs.net
l2.bbfh.ext.sorbs.net
l4.bbfh.ext.sorbs.net
list.bbfh.org
mail-abuse.blacklist.jippg.org
misc.dnsbl.sorbs.net
multi.surbl.org
netscan.rbl.blockedservers.com
new.spam.dnsbl.sorbs.net
noptr.spamrats.com
old.spam.dnsbl.sorbs.net
pbl.spamhaus.org
phishing.rbl.msrbl.net
pofon.foobar.hu
problems.dnsbl.sorbs.net
proxies.dnsbl.sorbs.net
psbl.surriel.com
rbl2.triumf.ca
rbl.abuse.ro
rbl.blockedservers.com
rbl.dns-servicios.com
rbl.efnet.org
rbl.efnetrbl.org
rbl.interserver.net
rbl.megarbl.net
rbl.realtimeblacklist.com
recent.spam.dnsbl.sorbs.net
relays.dnsbl.sorbs.net
rep.mailspike.net
safe.dnsbl.sorbs.net
sbl.spamhaus.org
smtp.dnsbl.sorbs.net
socks.dnsbl.sorbs.net
spam.dnsbl.anonmails.de
spam.dnsbl.sorbs.net
spamlist.or.kr
spam.pedantic.org
spam.rbl.blockedservers.com
spamrbl.imp.ch
spam.rbl.msrbl.net
spamsources.fabel.dk
spam.spamrats.com
srn.surgate.net
stabl.rbl.webiron.net
st.technovision.dk
talosintelligence.com
torexit.dan.me.uk
truncate.gbudb.net
ubl.unsubscore.com
virus.rbl.msrbl.net
web.dnsbl.sorbs.net
web.rbl.msrbl.net
xbl.spamhaus.org
zen.spamhaus.org
z.mailspike.net
zombie.dnsbl.sorbs.net
"

Contributors

Found an extensive list of 800+ blacklists at slurp-ramen.com

blacklist-check-unix-linux-utility's People

Contributors

Stargazers

Watchers

blacklist-check-unix-linux-utility's Issues

IP listed in hostkarma.junkemailfilter.com as it return a code like 127.0.0.x

Hello I got this issue :

hostkarma.junkemailfilter.com return a list of code as the documentations says : http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists

127.0.0.1 - whilelist - trusted nonspam
127.0.0.2 - blacklist - block spam
127.0.0.3 - yellowlist - mix of spam and nonspam
127.0.0.4 - brownlist - all spam - but not yet enough to blacklist
127.0.0.5 - NOBL - This IP is not a spam only source and no blacklists need to be tested

So when the script found that there is a DNS record it say that the IP is blacklisted even if it's a code like 127.0.0.1

Exemple :
22-09-19_Sep:09:1663567873_+0400 15.153.124.94.hostkarma.junkemailfilter.com.[blacklisted] (127.0.0.5
127.0.1.1)

but the record say 127.0.0.5 who mean NOBL.

Thanks.

How to check a list of IPs against the blacklist?

PS: Sorry, I know it's not an issue but a query, I didn't know where else to place this.

Why the script reverse the IPs?

I just ask why when you make a query for some IP A.B.C.D you see the imverted order of the numbers.. example:

D.C.B.A.black.uribl.com

Blacklisted IP replies with an address ?

What's the deal with 127.0.0.* wouldnt it be better just to say blacklisted?

You entered an IP: 1.160.44.67
1.160.44.67 name 1-160-44-67.dynamic.hinet.net.
15-02-17_Feb:02:1424212273_+0000 67.44.160.1.b.barracudacentral.org.    127.0.0.2
15-02-17_Feb:02:1424212273_+0000 67.44.160.1.bb.barracudacentral.org.   127.0.0.2
15-02-17_Feb:02:1424212277_+0000 67.44.160.1.dnsblchile.org.            127.0.0.11
15-02-17_Feb:02:1424212280_+0000 67.44.160.1.dyn.nszones.com.           127.0.0.3
15-02-17_Feb:02:1424212280_+0000 67.44.160.1.bl.nszones.com.            127.0.0.3
15-02-17_Feb:02:1424212285_+0000 67.44.160.1.rbl.rbldns.ru.             127.0.0.2
15-02-17_Feb:02:1424212286_+0000 67.44.160.1.dnsbl.sorbs.net.           127.0.0.7
15-02-17_Feb:02:1424212286_+0000 67.44.160.1.problems.dnsbl.sorbs.net.  127.0.0.7
15-02-17_Feb:02:1424212286_+0000 67.44.160.1.safe.dnsbl.sorbs.net.      127.0.0.7
15-02-17_Feb:02:1424212287_+0000 67.44.160.1.spam.dnsbl.sorbs.net.      127.0.0.6
15-02-17_Feb:02:1424212287_+0000 67.44.160.1.web.dnsbl.sorbs.net.       127.0.0.7
15-02-17_Feb:02:1424212288_+0000 67.44.160.1.bl.spameatingmonkey.net.   127.0.0.3
15-02-17_Feb:02:1424212288_+0000 67.44.160.1.pbl.spamhaus.org.          127.0.0.11
15-02-17_Feb:02:1424212289_+0000 67.44.160.1.zen.spamhaus.org.          127.0.0.11
15-02-17_Feb:02:1424212289_+0000 67.44.160.1.all.spamrats.com.          127.0.0.36
15-02-17_Feb:02:1424212289_+0000 67.44.160.1.dyna.spamrats.com.         127.0.0.36
15-02-17_Feb:02:1424212293_+0000 67.44.160.1.list.quorum.to.            127.0.0.2
15-02-17_Feb:02:1424212300_+0000 67.44.160.1.abuse-contacts.abusix.org. 127.0.0.1
15-02-17_Feb:02:1424212301_+0000 67.44.160.1.all.ascc.dnsbl.bit.nl.     127.0.0.156
15-02-17_Feb:02:1424212301_+0000 67.44.160.1.zz.countries.nerd.dk.      127.0.0.158
15-02-17_Feb:02:1424212301_+0000 67.44.160.1.origin.asn.cymru.com.      127.0.0.2
15-02-17_Feb:02:1424212301_+0000 67.44.160.1.peer.asn.cymru.com.        127.0.0.2
15-02-17_Feb:02:1424212303_+0000 67.44.160.1.origin.asn.spameatingmonkey.net.127.0.0.2

Unexpected activity

Regardless of what IP I check I tend to get back the result [not listed] or [blacklisted] (92.242.140.21). I did not ask to check 92,242.140.21 yet it pops up in the results regardless of what IP I check, even local ones like 127.0.0.1 that shouldn't be found at all.

here is the output
/bl 127.0.0.1
You entered an IP: 127.0.0.1
127.0.0.1 name localhost.
20-06-03_Jun:06:1591212528_-0400 1.0.0.127.0spam.fusionzero.com. [not listed]
20-06-03_Jun:06:1591212528_-0400 1.0.0.127.access.redhawk.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212528_-0400 1.0.0.127.all.s5h.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212528_-0400 1.0.0.127.all.spamrats.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212528_-0400 1.0.0.127.aspews.ext.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212530_-0400 1.0.0.127.babl.rbl.webiron.net. [not listed]
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.backscatter.spameatingmonkey.net.[blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.b.barracudacentral.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.bb.barracudacentral.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.black.junkemailfilter.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.bl.blocklist.de. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212537_-0400 1.0.0.127.bl.drmx.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212538_-0400 1.0.0.127.bl.konstant.no. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212538_-0400 1.0.0.127.bl.mailspike.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212538_-0400 1.0.0.127.bl.nosolicitado.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.nszones.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.block.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.rbl.scrolloutf1.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.scientificspam.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.score.senderscore.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.spamcop.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.spameatingmonkey.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212539_-0400 1.0.0.127.bl.suomispam.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.bsb.empty.us. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cart00ney.surriel.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cbl.abuseat.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cbl.anti-spam.org.cn. [not listed]
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cblless.anti-spam.org.cn. [not listed]
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cblplus.anti-spam.org.cn. [not listed]
20-06-03_Jun:06:1591212540_-0400 1.0.0.127.cdl.anti-spam.org.cn. [not listed]
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.combined.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.db.wpbl.info. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl-1.uceprotect.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl-2.uceprotect.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl-3.uceprotect.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl.cobion.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl.dronebl.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl.justspam.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl.kempt.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212541_-0400 1.0.0.127.dnsbl.net.ua. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212542_-0400 1.0.0.127.dnsbl.rv-soft.info. [not listed]
20-06-03_Jun:06:1591212542_-0400 1.0.0.127.dnsbl.rymsho.ru. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212542_-0400 1.0.0.127.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212542_-0400 1.0.0.127.dnsbl.spfbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212542_-0400 1.0.0.127.dnsbl.tornevall.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212543_-0400 1.0.0.127.dnsbl.zapbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212543_-0400 1.0.0.127.dnsrbl.org. [not listed]
20-06-03_Jun:06:1591212546_-0400 1.0.0.127.dnsrbl.swinog.ch. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212546_-0400 1.0.0.127.dul.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212547_-0400 1.0.0.127.dyna.spamrats.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212547_-0400 1.0.0.127.dyn.nszones.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212547_-0400 1.0.0.127.escalations.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212549_-0400 1.0.0.127.fnrbl.fast.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212549_-0400 1.0.0.127.hostkarma.junkemailfilter.com.[not listed]
20-06-03_Jun:06:1591212549_-0400 1.0.0.127.http.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212550_-0400 1.0.0.127.images.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212550_-0400 1.0.0.127.invaluement. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212550_-0400 1.0.0.127.ips.backscatterer.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212550_-0400 1.0.0.127.ix.dnsbl.manitu.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212551_-0400 1.0.0.127.l1.bbfh.ext.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212552_-0400 1.0.0.127.l2.bbfh.ext.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212553_-0400 1.0.0.127.l4.bbfh.ext.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212554_-0400 1.0.0.127.list.bbfh.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212554_-0400 1.0.0.127.mail-abuse.blacklist.jippg.org.[blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212555_-0400 1.0.0.127.misc.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212555_-0400 1.0.0.127.multi.surbl.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212555_-0400 1.0.0.127.netscan.rbl.blockedservers.com.[blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212555_-0400 1.0.0.127.new.spam.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212555_-0400 1.0.0.127.noptr.spamrats.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212556_-0400 1.0.0.127.old.spam.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212556_-0400 1.0.0.127.pbl.spamhaus.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212556_-0400 1.0.0.127.phishing.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212556_-0400 1.0.0.127.pofon.foobar.hu. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212557_-0400 1.0.0.127.problems.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212558_-0400 1.0.0.127.proxies.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.psbl.surriel.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.rbl2.triumf.ca. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.rbl.abuse.ro. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.rbl.blockedservers.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.rbl.dns-servicios.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212559_-0400 1.0.0.127.rbl.efnet.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212560_-0400 1.0.0.127.rbl.efnetrbl.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212560_-0400 1.0.0.127.rbl.interserver.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212560_-0400 1.0.0.127.rbl.megarbl.net. [blacklisted] (75.2.37.224)
20-06-03_Jun:06:1591212560_-0400 1.0.0.127.rbl.realtimeblacklist.com. [not listed]
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.recent.spam.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.relays.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.rep.mailspike.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.safe.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.sbl.spamhaus.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.smtp.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.socks.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.spam.dnsbl.anonmails.de. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212561_-0400 1.0.0.127.spam.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spamlist.or.kr. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spam.pedantic.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spam.rbl.blockedservers.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spamrbl.imp.ch. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spam.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spamsources.fabel.dk. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.spam.spamrats.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212562_-0400 1.0.0.127.srn.surgate.net. [not listed]
20-06-03_Jun:06:1591212566_-0400 1.0.0.127.stabl.rbl.webiron.net. [not listed]
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.st.technovision.dk. [not listed]
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.talosintelligence.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.torexit.dan.me.uk. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.truncate.gbudb.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.ubl.unsubscore.com. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.virus.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212574_-0400 1.0.0.127.web.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212576_-0400 1.0.0.127.web.rbl.msrbl.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212576_-0400 1.0.0.127.xbl.spamhaus.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212576_-0400 1.0.0.127.zen.spamhaus.org. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212576_-0400 1.0.0.127.z.mailspike.net. [blacklisted] (92.242.140.21)
20-06-03_Jun:06:1591212576_-0400 1.0.0.127.zombie.dnsbl.sorbs.net. [blacklisted] (92.242.140.21)

Feature: Add IPv6

IPv6 lookup currently doesn't work - would be nice if it was added.

root@box:~# bl 2600:xxxx::xxxx:xxxx:5573/64

You entered an IP: 2600:xxxx::xxxx:xxxx:5573/64
/usr/local/bin/bl error: IP

False Positives on Spamhaus and Uribl

It is not important what I am looking for with bl I always get false positives on spamhaus and all uribl.

16-07-11_Jul:07:1468222701_+0200 A.B.C.D.dbl.spamhaus.org.      [blacklisted] (127.0.1.255)
16-07-11_Jul:07:1468222701_+0200 A.B.C.D.multi.surbl.org.       [not listed]
16-07-11_Jul:07:1468222701_+0200 A.B.C.D.uribl.swinog.ch.       [not listed]
16-07-11_Jul:07:1468222701_+0200 A.B.C.D.dob.sibl.support-intelligence.net.[not listed]
16-07-11_Jul:07:1468222701_+0200 A.B.C.D.black.uribl.com.       [blacklisted] (127.0.0.1)
16-07-11_Jul:07:1468222701_+0200 A.B.C.D.grey.uribl.com.        [blacklisted] (127.0.0.1)
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.multi.uribl.com.       [blacklisted] (127.0.0.1)
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.red.uribl.com.         [blacklisted] (127.0.0.1)
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.uri.blacklist.woody.ch.[not listed]
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.rhsbl.zapbl.net.       [not listed]
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.hostkarma.junkemailfilter.com.[blacklisted] (127.0.0.5)
16-07-11_Jul:07:1468222702_+0200 A.B.C.D.reputation-domain.rbl.scrolloutf1.com.[not listed]
16-07-11_Jul:07:1468222703_+0200 A.B.C.D.reputation-ns.rbl.scrolloutf1.com.[not listed]
16-07-11_Jul:07:1468222703_+0200 A.B.C.D.nobl.junkemailfilter.com.[blacklisted] (127.0.0.5)
16-07-11_Jul:07:1468222704_+0200 A.B.C.D.iddb.isipp.com.        [not listed]
16-07-11_Jul:07:1468222704_+0200 A.B.C.D._vouch.dwl.spamhaus.org.[not listed]
16-07-11_Jul:07:1468222704_+0200 A.B.C.D.white.uribl.com.       [blacklisted] (127.0.0.1)
16-07-11_Jul:07:1468222704_+0200 A.B.C.D.list.anonwhois.net.    [not listed]

Example:

dig +short -t a 8.8.8.8.white.uribl.com.
127.0.0.1

Why should googles DNS Server be on that list? I tried out a good dozen of IP Adresses that should be whitelisted but are reported as listed.

google
1and1
amazon
two of my servers who are not even using mails
my own mailserver ( 2 )
Mailservers of a friend
...

And they all are reported by spamhaus and uribl..

And idea how to fix this?

Greetings from germany,

Bastian

adionditsak / blacklist-check-unix-linux-utility Goto Github PK

blacklist-check-unix-linux-utility's Introduction

blacklist-check-unix-linux-utility

Introduction

Installation

Usage

Sample output

blacklists providers

multirbl.valli.org

hetrixtools.com/blacklist-check

Contributors

blacklist-check-unix-linux-utility's People

Contributors

Stargazers

Watchers

Forkers

blacklist-check-unix-linux-utility's Issues

Recommend Projects

Recommend Topics

Recommend Org