What do you guys use for automated IP reputation monitoring? I need something that checks RBLs, threat feeds, etc for a /22 and some IPv6 space. Currently doing manual lookups like it's 2010. Running on a small box so can't eat too much VRAM... jk it's just a cronjob box. Ngl I tried some commercial tool and it wanted $400/month for 256 IPs.
Please try rblcheck script. No need for fancy server. Just cron and curl. Help.
---
- monitoring:
- commercial:
- service A: expensive
- service B: more expensive
- NOTE: not worth it for small blocks
---
- diy approach:
- curl to 4 RBLs
- parse with jq
- alert via webhook
---
- WARNING: most "platforms" are wrapper around this
Member
I evaluated twelve (yes, twelve (I have a spreadsheet (color-coded))) tools and they all (except one ) are just cronjobs with better CSS. The one exception might be a real platform (or might not be (I stopped reading their whitepaper at page 47 (it was very boring))).
Whence came this proliferation of reputation-monitoring services, wherefore do they charge such princely sums for what doth amount to a simple query of ye olde DNS blocklists, methinks the modern operator hath forgotten that the ancient tools, which were forged in the fires of simpler times when men were men and servers were servers and cron was king, still serve most faithfully and true, though I confess I once paid for such a service myself in a moment of weakness brought on by the pressures of management who knew not what they asked.
