I am configuring Zabbix to check my IPs against several DNSBLs. My IPs are currently not blacklisted. My monitoring needs to be tested, to verify that it will alert properly if one of my IPs does become blacklisted. How can I obtain, for testing, a known bad IP, one that is on a DNSBL?
I've searched for published blacklists, but haven't found any. I'm guessing that publishing the lists would aid spammers, or have other bad side-effects.
Zabbix will call a Ruby script. That script will probably just shell out to rblcheck, since the lists it checks seem like a good start:
$ rblcheck 126.96.36.199 188.8.131.52 not listed by sbl.spamhaus.org 184.108.40.206 not listed by xbl.spamhaus.org 220.127.116.11 not listed by pbl.spamhaus.org 18.104.22.168 not listed by bl.spamcop.net 22.214.171.124 not listed by psbl.surriel.com 126.96.36.199 not listed by dul.dnsbl.sorbs.net
The DNSBLs that rblcheck uses is configurable. I can add or remove DNSBLs as needed, either permanently, or for testing.