blacklists Archives - dattaproffs

Right now we have a free api emailstuff (see previous post) for looking up talos reputation (former senderbase), senderscore, reputation authority and blacklists. This api have been used a lot by people and companies and that’s really cool to see. What’s not so cool to see is that the users (often big companies with a lot of ips) that uses the api on a daily basis just hammer it like crazy and not folowing the rate limits. So that makes us take action, either we need to start charging a lot of money (wich we do not wan’t) so we decided to take another path.

We are going to depricate the current api and will be releasing a new one in a few weeks. The new api will be fast and i mean really fast. We are right now looking at lookup for 30 blacklists, senderbase, senderscore, reputation authority in under 100ms.

But that’s not all, we will include cyren lookups in the results also, as far as i know we will be the only api supporting this, isn’t that amazing (tv-shop i know)

So if you are interested in continuing using this service you need to send an email to emailstuff[at]dattaproffs.se and we will get you up and running.

The current api will be closed 31/7/2018.

Best regards
Fredrik Berggren

There is a lot of DNS-blacklists out there. Sometimes you just want to check if your IP is listed in one.

A really easy way to do that is to use your shell, terminal, command prompt. Below i will show two examples using nslookup in windows and dig in OSX (Unix).

## You will reverse the ip you wan't to check and add for example .dnsbl.sorbs.net in the examples here my ip is 1.2.3.4

## Windows; nslookup
nslookup 4.3.2.1.dnsbl.sorbs.net

## If you are listed you will get a answer like this
Non-authoritative answer:
Name:    4.3.2.1.dnsbl.sorbs.net
Address:  127.0.0.2

## If not
*** google-public-dns-a.google.com can't find 4.3.2.1.dnsbl.sorbs.net: Non-existent domain


## Unix; dig 
dig 4.3.2.1.dnsbl.sorbs.net

## If you are listed you will get a answer like this
;; ANSWER SECTION
4.3.2.1.dnsbl.sorbs.net 7170 IN A     127.0.0.2

## If not you won't have a answer section


## Often if you are listed you do the same lookup but for TXT-records instead
## Windows
nslookup -type=txt 4.3.2.1.dnsbl.sorbs.net
## Unix
dig -t txt 4.3.2.1.dnsbl.sorbs.net

## You will reverse the ip you wan't to check and add for example .dnsbl.sorbs.net in the examples here my ip is 1.2.3.4

## Windows; nslookup

nslookup 4.3.2.1.dnsbl.sorbs.net

## If you are listed you will get a answer like this

Non-authoritative answer:

Name: 4.3.2.1.dnsbl.sorbs.net

Address: 127.0.0.2

## If not

*** google-public-dns-a.google.com can't find 4.3.2.1.dnsbl.sorbs.net: Non-existent domain

## Unix; dig

dig 4.3.2.1.dnsbl.sorbs.net

## If you are listed you will get a answer like this

;; ANSWER SECTION

4.3.2.1.dnsbl.sorbs.net 7170 IN A 127.0.0.2

## If not you won't have a answer section

## Often if you are listed you do the same lookup but for TXT-records instead

## Windows

nslookup -type=txt 4.3.2.1.dnsbl.sorbs.net

## Unix

dig -t txt 4.3.2.1.dnsbl.sorbs.net

The basics is that if you get a response your IP is listed. There are different type of listings please refer to each services documentation.

You will typically get a response of 127.0.0.x where x has different meaning in different services.

Sometimes they will publish a TXT-record with the A-record to provide some more information about the listing or information on how to delist. So that i something that can be useful to lookup if listed.

dattaproffs

ninjafying interwebz

blacklists

depricating current version of emailstuff api

How to check DNS-blacklists (dnsbl) from commandline (cmd / terminal)