ZBLACKLIST(1)
π ZBLACKLIST(1) β the zblacklist manual, bestie edition π
okay so bestie, this is zblacklist, from the zblacklist manual page. it's the IP blacklist tool that comes with zmap. pull up a chair, we're gonna read the whole thing together, no skimming, no skipping, promise π«Ά
β¨ NAME β¨
zblacklist β the zmap IP blacklist tool π
πΈ SYNOPSIS πΈ
zblacklist [ -b <blacklist> ] [ -w <whitelist> ] [ OPTIONS... ]
literally that's it. flags in, addresses out, slay β¨
π¦ DESCRIPTION π¦
so ZBlacklist is a network tool, right? and its whole thing β its entire main character moment β is limiting and deduplicating a list of IP addresses using a blacklist or a whitelist. that's the vibe. you give it addresses, it filters them, it cleans up the dupes. periodt π
π OPTIONS π
π« BASIC OPTIONS π«
-b,--blacklist-file=pathβ this is your file of subnets to exclude, written in CIDR notation, one per line. and ngl, the manpage is strongly recommending you actually use this, because you wanna exclude RFC 1918 addresses, multicast, IANA reserved space, and all those other IANA special-purpose addresses. there's an example blacklist file,blacklist.conf, made for exactly this purpose. use it bestie, it's iconic π-w,--whitelist-file=nameβ the opposite energy: this is your file of subnets to include, also in CIDR notation, also one per line. and here's the thing β everything else? all the other subnets? excluded. gone. not invited to the party π-l,--log-file=nameβ the file you wanna log to. that's it, that's the option β¨-v,--verbosityβ how much log detail you want, on a scale of0-5, and the default is3. dial it up if you're nosy, dial it down if you're chill π--no-duplicate-checkingβ don't deduplicate the input addresses. the default isfalse. so by default it IS deduplicating, got it? no cap π--ignore-blacklist-errorsβ ignore invalid entries in the blacklist. the default isfalse, so heads up: invalid entries will absolutely get noticed unless you turn this on π
fr fr, those two defaults being false is doing a lot of work in this page. don't sleep on it.
and that's the whole page bestie, we ate that ππ
this was from the zblacklist page, and the version info at the bottom says zmap v2.1.1, September 2015 β so yeah, vintage, but still iconic. mwah πβ¨ππ¦πΈ
π¦ where this page comes from
- debian bookworm: zmap 2.1.1-2+b6 Β· Apache-2.0
- debian trixie: zmap 2.1.1-2.1+b1 Β· Apache-2.0
- ubuntu jammy: zmap 2.1.1-2build4 Β· Apache-2.0
- ubuntu noble: zmap 2.1.1-2.1build2 Β· Apache-2.0
- ubuntu questing: zmap 2.1.1-2.1build2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms