AbuseBox open-source tool monitors DNS blacklists, SSL and email records
Original title: AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
It scans 60 DNSBLs plus AbuseIPDB, SPF, DKIM and DMARC, and alerts by email, Slack, Discord or webhook.
AbuseBox is a free MIT-licensed monitor that checks IPs and domains against 60 DNS blacklists, AbuseIPDB scores, DNS, SSL, WHOIS, server status, and email-authentication records. Users register assets, schedule checks every 360 minutes by default, and receive alerts for new listings, recoveries, outages and expiry warnings. Bulk checks cover up to 300 hosts and subnet scans up to a /24. It runs via Docker Compose with Python, FastAPI, React and SQLite.
- A single-host check needs a free AbuseIPDB API key; DNS, SSL, WHOIS and status do not.
- Email checks grade SPF, DKIM and DMARC from A to F.
- Fresh installs start with login admin and password123, which should be changed.
- The unauthenticated blacklist quick check is limited to 10 requests per minute per IP.
From the original article
2 min read at helpnetsecurity.com
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, is a list that mail servers and other services consult when deciding whether to trust an address.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.