jgamblin / isthisipbad Goto Github PK

View Code? Open in Web Editor NEW

216.0 19.0 100.0 28 KB

Python Script to Check IP Against Blacklist

License: MIT License

Python 100.00%

isthisipbad's Introduction

Is this IP Bad?

Is This IP Bad? is a python script that will check an IP against popular IP and DNS blacklists.

Usage

python3 isthisipbad.py

Important Notice

I don't know what I am doing.

Update: I wrote this code over six years ago as a side project and had not given it much thought. Since people were still using it, it had some errors and bad lists, so I updated it to Python3 and removed offline or bad sources.

isthisipbad's People

Contributors

Stargazers

Watchers

Forkers

lojikil seecurity pedrosa-t travmi raaka1 kwadronaut bupt007 johnjohnsp1 davinirjr intermezzo-fr tjcran jbecher skamasle ogordienko ganesh-git2014 pbrears nyimbi mustafamoneer bluetropics houcy beezimoss fluxkompensator eglis cinno arcipicchio filmancco agent-0007 ryanohoro hexadiam bongwa likeshumidity telukir olivierh59500 cesardv bhavananarayan secsecsec woolly-headed mlucien functure netwrkspider theboroer sathishdsgithub chrisemoulton bonaxcrimo greycel knc331 alvarogonjim primmus rulcsoft germankingyt littlehann laurentperche cloudxtreme fo0nikens vmr-sec srinivengala tailoredaccessteam morristech guest20 junk13 exs-xgg vladimircicovic david9631 rahmiy kildarejoe1 nadavra alex0x90 leandromenezes iguy0 daudmalik06 modulexcite namnamir winstonm mlynchcogent marciopocebon mralecthomas abhay-98 agdlgv imuledx skjortan23 choirrulloh willerpp 5l1v3r1 thor1982 nadeera3784 danielrescana johnbardoe msiva21 omicron-b jmfer1 muratozfidan ishansaurav socketz julespoli thered123 alecs-mkd sergeyg333

isthisipbad's Issues

DNS Timeout exception is not catched

Traceback (most recent call last):
  File "isthisipbad.py", line 211, in <module>
    answers = my_resolver.query(query, "A")
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 819, in query
    timeout = self._compute_timeout(start)
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 734, in _compute_timeout
    raise Timeout
dns.exception.Timeout

Using threads would get results faster

My IP is reported as listed on malc0de even though it isn't

I ran the script against my IP and the script reported (in red)

xx.xx.110.155 is listed on malc0de

When checking the list @ http://malc0de.com/bl/IP_Blacklist.txt , I couldn't find that IP.

DShield issue with padding of IP octets

$ python isthisipbad.py -i 150.164.225.030
150.164.225.030 is listed on dshield

$ python isthisipbad.py -i 150.164.225.30
150.164.225.30 is not listed on dshield

SyntaxError: invalid syntax--On Line number 61

$ python --version
Python 3.6.4 :: Anaconda, Inc.

File "", line 61
html_content = opened_request.read()
^
SyntaxError: invalid syntax

About removing UceProtect

Will you please remove UceProtect as they are not trusted?

Reference:

https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html

https://www.linode.com/community/questions/2324/uceprotectnet-has-us-blacklisted

https://www.titanhq.com/blog/warning-ignore-pay-for-de-listing-blacklist-service/

https://community.spiceworks.com/topic/2170592-uceprotect-blacklist-scam

https://wordtothewise.com/2018/05/uceprotect-gdpr-fallout/

http://kontech.net/uceprotect-blacklist-scheme-2020/

https://twitter.com/search?q=uceprotect

https://www.lowendtalk.com/discussion/comment/3204705

4 false positives

Hi,

There are 4 lists that always returns false positives because of errors retrieving the real data:

8.8.8.8 is listed on Dragon Research Group - SSH
Error! <urlopen error [Errno 110] Connection timed out>
8.8.8.8 is listed on Dragon Research Group - VNC
Error! HTTP Error 404: Not Found
8.8.8.8 is listed on OpenBlock
Error! HTTP Error 403: Forbidden
8.8.8.8 is listed on malc0de

I will try to make a patch for it soon.
Nice tool btw.

There isn't a license file

What's the license for this code?

IPv6

Hihi,

You merge fast!
Problem with IPv6: 'api.hackertarget.com' doesn't understand IPv6 (error input invalid.)

create a main() method

Nice script. However, the code below

if __name__ == "__main__":

is too long. It would look much better if you called a method and you put everything in there:

if __name__ == "__main__":
    main()

You can also split up the main() method to smaller functions/methods.