Author Topic: Various public Blocklists for malicious URL..  (Read 4024 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Various public Blocklists for malicious URL..
« on: May 29, 2010, 08:10:17 PM »
Hi malware fighters,

A nice collection here: http://zeltser.com/combating-malicious-software/malicious-ip-blocklists.html
added by me: http://www.malwaredomainlist.com/forums/index.php?topic=3945.0;wap2

polonus

P.S. An example:  vparimvam.info 113.11.194.178    CHINA
Region    :    BEIJING
City    :    BEIJING
Latutude    :    39.9
Longitude    :    116.413
ZIP Code    :    -
Time Zone    :    +08:00
ISP    :    BEIJING DIGILAND MEDIA TEC...
Domain    :    -
Net Speed    :    DSL
IDD Code    :    86
Area Code    :    -
Weather    :    (CHXX0008) BEIJING

Malware there: Hostname: 113.11.194.178
IP Address: 113.11.194.178
Date: 29-05-2010 12:03

Running on: Apache/2.2.8

System info: (CentOS)  check also here: http://dwm.cc/search/node
Domain clean by Google Safe Brownsing: 113.11.194.178

Domain clean by Norton Safe web: 113.11.194.178

Domain clean by Sucuri Web Blacklist: 113.11.194.178

Domain clean by the Phish Tank: 113.11.194.178

Domain clean by the Malware Domain List: 113.11.194.178

polonus

 P.S. malicious URL sanitizer: http://dwm.cc/node/74
« Last Edit: May 29, 2010, 09:10:18 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
Re: Various public Blocklists for malicious URL..
« Reply #1 on: May 30, 2010, 04:09:16 AM »
Hey polonus, Does this add to what Spywareblaster already blocks?
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

0strodamus

  • Guest
Re: Various public Blocklists for malicious URL..
« Reply #2 on: June 02, 2010, 10:20:22 PM »
These lists can supplement what SpywareBlaster's restricted sites blocks, but are generally for use in the HOSTS file and provide system-wide blocking. Spywareblaster just provides protection for IE only.

0strodamus

  • Guest
Re: Various public Blocklists for malicious URL..
« Reply #3 on: June 02, 2010, 10:22:28 PM »
I should have also said thanks to polonus for the post. I'm already using 4 of the lists on this site in my HOSTS and will be adding some more!  :)

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Various public Blocklists for malicious URL..
« Reply #4 on: June 02, 2010, 10:46:20 PM »
Hi Ostrodamus,

What you could also do is to use SpywareBlaster's snapshot function to keep an eye on any changes,
and the worth of any blocklist is it's actuality, so update regularly.
There are some forums to help you with this.
There are also questionable host lists that mingle "overripe and green results and even wrong and cleared ones" so to say, and you can better do without these, an example is this one: http://www.unixhub.com/block.html
This again is a good tool for members only (so register): http://www.bluetack.co.uk/config/index.php
And go here every month: http://www.securelist.com/en/analysis/204792116/Monthly_Malware_Statistics_April_2010

enjoy to block the malcreants...,

polonus
« Last Edit: June 02, 2010, 11:25:01 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

0strodamus

  • Guest
Re: Various public Blocklists for malicious URL..
« Reply #5 on: June 02, 2010, 11:07:57 PM »
Thanks for tips polonus!  :)