View Single Post
  #5   (View Single Post)  
Old 14th January 2013
pablovalcarcel pablovalcarcel is offline
New User
 
Join Date: Jan 2013
Posts: 7
Default

Hi again .

I have added some extra blaklists in your scripts to make a wide search:
access.redhawk.org
bl.emailbasura.org
bl.spamcop.net
blackholes.five-ten-sg.com
block.dnsbl.sorbs.net
cart00ney.surriel.com
dev.null.dk
dialups.visi.com
dnsbl.anticaptcha.net
dnsbl.justspam.org
dnsbl.sorbs.net
dnsbl-2.uceprotect.net
dul.dnsbl.sorbs.net
hil.habeas.com
intruders.docs.uu.se
l2.apews.org
msgid.bl.gweep.ca
old.dnsbl.sorbs.net
proxy.bl.gweep.ca
rbl.schulte.org
relays.bl.gweep.ca
relays.nether.net
smtp.dnsbl.sorbs.net
spam.olsentech.net
tor.ahbl.org
web.dnsbl.sorbs.net
zombie.dnsbl.sorbs.net
rbl.megarbl.net
b.barracudacentral.org
bl.shlink.org
bl.technovision.dk
blackholes.wirehub.net
blocked.hilli.dk
cbl.abuseat.org
dialup.blacklist.jippg.org
dnsbl.abuse.ch
dnsbl.antispam.or.id
dnsbl.kempt.net
dnsbl.tornevall.org
dnsbl-3.uceprotect.net
dul.ru
black.junkemailfilter.com
ips.backscatterer.org
mail-abuse.blacklist.jippg.org
new.dnsbl.sorbs.net
opm.tornevall.org
psbl.surriel.com
rbl.snark.net
relays.bl.kundenserver.de
rsbl.aupads.org
socks.dnsbl.sorbs.net
spamguard.leadmon.net
tor.dnsbl.sectoor.de
xbl.spamhaus.org
dnsbl.inps.de
bl.csma.biz
bl.spamcannibal.org
bl.tiopan.com
blacklist.sci.kun.nl
bogons.cymru.com
cblless.anti-spam.org.cn
dialups.mail-abuse.org
dnsbl.ahbl.org
dnsbl.dronebl.org
dnsbl.njabl.org
dnsbl-1.uceprotect.net
duinv.aupads.org
escalations.dnsbl.sorbs.net
http.dnsbl.sorbs.net
korea.services.net
misc.dnsbl.sorbs.net
no-more-funn.moensted.dk
pbl.spamhaus.org
pss.spambusters.org.ar
recent.dnsbl.sorbs.net
relays.mail-abuse.org
sbl.spamhaus.org
spam.dnsbl.sorbs.net
spamsources.fabel.dk
ubl.unsubscore.com
zen.spamhaus.org
dyn.shlink.org


I keep the query algorithm: LISTED="$(dig +short -t a ${reverse}.${BL}.)" and modify printing output in order to filter later with grep -v "NOLISTADO" (NOTLISTED in your language ).

I got surprised to obtain responses as:
sudo ./blcheck.sh 82.194.86.158
IP 82.194.86.158 NAME server1.dnsaccesodirecto.com.
2013-01-14_16:20:47_UTC 158.86.194.82.access.redhawk.org. NOLISTADO
2013-01-14_16:20:48_UTC 158.86.194.82.bl.emailbasura.org. NOLISTADO
2013-01-14_16:20:48_UTC 158.86.194.82.bl.spamcop.net. NOLISTADO
2013-01-14_16:20:49_UTC 158.86.194.82.blackholes.five-ten-sg.com.NOLISTADO
2013-01-14_16:20:49_UTC 158.86.194.82.block.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:50_UTC 158.86.194.82.cart00ney.surriel.com. NOLISTADO
2013-01-14_16:20:50_UTC 158.86.194.82.dev.null.dk. NOLISTADO
2013-01-14_16:20:50_UTC 158.86.194.82.dialups.visi.com. NOLISTADO
2013-01-14_16:20:50_UTC 158.86.194.82.dnsbl.anticaptcha.net. NOLISTADO
2013-01-14_16:20:51_UTC 158.86.194.82.dnsbl.justspam.org. NOLISTADO
2013-01-14_16:20:51_UTC 158.86.194.82.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:51_UTC 158.86.194.82.dnsbl-2.uceprotect.net. NOLISTADO
2013-01-14_16:20:51_UTC 158.86.194.82.dul.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.hil.habeas.com. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.intruders.docs.uu.se. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.l2.apews.org. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.msgid.bl.gweep.ca. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.old.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:52_UTC 158.86.194.82.proxy.bl.gweep.ca. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.rbl.schulte.org. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.relays.bl.gweep.ca. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.relays.nether.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.smtp.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.spam.olsentech.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.tor.ahbl.org. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.web.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.zombie.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.rbl.megarbl.net. NOLISTADO
2013-01-14_16:20:53_UTC 158.86.194.82.b.barracudacentral.org. NOLISTADO
2013-01-14_16:20:54_UTC 158.86.194.82.bl.shlink.org. NOLISTADO
2013-01-14_16:20:54_UTC 158.86.194.82.bl.technovision.dk. NOLISTADO
2013-01-14_16:21:05_UTC 158.86.194.82.blackholes.wirehub.net. NOLISTADO
2013-01-14_16:21:05_UTC 158.86.194.82.blocked.hilli.dk. NOLISTADO
2013-01-14_16:21:05_UTC 158.86.194.82.cbl.abuseat.org. NOLISTADO
2013-01-14_16:21:06_UTC 158.86.194.82.dialup.blacklist.jippg.org.NOLISTADO
2013-01-14_16:21:06_UTC 158.86.194.82.dnsbl.abuse.ch. NOLISTADO
2013-01-14_16:21:06_UTC 158.86.194.82.dnsbl.antispam.or.id. NOLISTADO
2013-01-14_16:21:06_UTC 158.86.194.82.dnsbl.kempt.net. NOLISTADO
2013-01-14_16:21:06_UTC 158.86.194.82.dnsbl.tornevall.org. NOLISTADO
2013-01-14_16:21:07_UTC 158.86.194.82.dnsbl-3.uceprotect.net. NOLISTADO
2013-01-14_16:21:07_UTC 158.86.194.82.dul.ru. NOLISTADO
2013-01-14_16:21:07_UTC 158.86.194.82.black.junkemailfilter.com.NOLISTADO
2013-01-14_16:21:07_UTC 158.86.194.82.ips.backscatterer.org. NOLISTADO
2013-01-14_16:21:07_UTC 158.86.194.82.mail-abuse.blacklist.jippg.org.NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.new.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.opm.tornevall.org. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.psbl.surriel.com. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.rbl.snark.net. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.relays.bl.kundenserver.de.NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.rsbl.aupads.org. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.socks.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.spamguard.leadmon.net. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.tor.dnsbl.sectoor.de. NOLISTADO
2013-01-14_16:21:08_UTC 158.86.194.82.xbl.spamhaus.org. NOLISTADO
2013-01-14_16:21:09_UTC 158.86.194.82.dnsbl.inps.de. NOLISTADO

<b>2013-01-14_16:21:09_UTC 158.86.194.82.bl.csma.biz. 208.91.197.19</b>
What this ip means?

2013-01-14_16:21:09_UTC 158.86.194.82.bl.spamcannibal.org. NOLISTADO
2013-01-14_16:21:10_UTC 158.86.194.82.bl.tiopan.com. NOLISTADO
2013-01-14_16:21:21_UTC 158.86.194.82.blacklist.sci.kun.nl. NOLISTADO
2013-01-14_16:21:21_UTC 158.86.194.82.bogons.cymru.com. NOLISTADO
2013-01-14_16:21:21_UTC 158.86.194.82.cblless.anti-spam.org.cn.NOLISTADO
2013-01-14_16:21:21_UTC 158.86.194.82.dialups.mail-abuse.org. NOLISTADO
2013-01-14_16:21:33_UTC 158.86.194.82.dnsbl.ahbl.org. NOLISTADO
2013-01-14_16:21:33_UTC 158.86.194.82.dnsbl.dronebl.org. NOLISTADO
2013-01-14_16:21:33_UTC 158.86.194.82.dnsbl.njabl.org. NOLISTADO
2013-01-14_16:21:33_UTC 158.86.194.82.dnsbl-1.uceprotect.net. NOLISTADO
2013-01-14_16:21:33_UTC 158.86.194.82.duinv.aupads.org. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.escalations.dnsbl.sorbs.net.NOLISTAD O
2013-01-14_16:21:34_UTC 158.86.194.82.http.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.korea.services.net. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.misc.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.no-more-funn.moensted.dk.NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.pbl.spamhaus.org. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.pss.spambusters.org.ar. NOLISTADO
2013-01-14_16:21:34_UTC 158.86.194.82.recent.dnsbl.sorbs.net. NOLISTADO
2013-01-14_16:21:35_UTC 158.86.194.82.relays.mail-abuse.org. NOLISTADO
2013-01-14_16:21:46_UTC 158.86.194.82.sbl.spamhaus.org. NOLISTADO

<b>2013-01-14_16:21:46_UTC 158.86.194.82.spam.dnsbl.sorbs.net. 127.0.0.6</b> : I guess this means is not listed because is in 127.0.0.0/8 range or am I wrong?

2013-01-14_16:21:46_UTC 158.86.194.82.spamsources.fabel.dk. NOLISTADO
2013-01-14_16:21:46_UTC 158.86.194.82.ubl.unsubscore.com. NOLISTADO
2013-01-14_16:21:46_UTC 158.86.194.82.zen.spamhaus.org. NOLISTADO
2013-01-14_16:21:46_UTC 158.86.194.82.dyn.shlink.org. NOLISTADO

A last question, would you be mind to tell me which lists are you using?

Kind regards

Last edited by pablovalcarcel; 14th January 2013 at 04:35 PM.
Reply With Quote