[anti-spam-wg] Completewhois RBL Search

  • From: "william(at)elan.net" <
    >
  • Date: Mon, 1 Aug 2005 03:10:40 -0700 (PDT)


I've mentioned on this list before that we've been working on rbl lookup
and search system by aggregating rbl information from 30+ largest lists in local database with daily (right now) updates and keeping track of history and changes.

The web access to do search for all rbl entries in ip block (that is what somebody asked on the list actually) is now ready and available at:
http://www.completewhois.com/rbl_search.htm

This is intended to be used primarily by ISPs and network operators to check on the listings that cover their own ip blocks to help make operators aware of the extent of possible abuse coming from their network.

The public (anoymous) search access is restricted to maximum /24 range as allowing more then that could in my opinion (and others I consulted) facilitate abuse rather then help stop it. To be able to do more then /24 lookup on your ip block(s), you will need to register and get username and password in our system. Use of rbl_search is also covered by AUP.

The results from ip range search also come in several formats, including
simple list on the website, comprehensive webtable format as well as an
option to produce CSV file for export to spreadsheet. The queries and
searches are typically done in 1-2 seconds for /24 and about 4-8 seconds for /16 (with 1000 matches from various RBLs). Webtable adds additional couple seconds for large (500+) matches.

In the future if there is an interest, further work will be done on the
search interface ISP features to allow not only one-time lookups but reports that can be generated and sent automatically. Options will also include ability to do query based on specified time range (i.e. only new RBL entries that appeared in last 7 days) and/or search on particular list.

---
William Leibzon
Elan Networks
william@localhost