MalwareDomainsBlocklists - archived updates

MalwareDomains updated - 2012.01.30...

FYI...

1617 domains removed, 33 domains added ...
- http://www.malwaredomains.com/wordpress/?p=2430
January 30th, 2012 - "1617 Domains have been removed; 33 domains have been added to the “immortal” domain lists. Please update your blocklists (... no reason to do it every hour like some people who will be blocked for continuous abuse)..."

:fear:
 
Last edited:
MalwareDomains updated - 2012.02.28...

FYI...

Dynamic DNS, bphoster, cycbot, palevo
- http://www.malwaredomains.com/wordpress/?p=2508
February 28th, 2012 - "Added many dynamic dns domains to our dynamic dns list, and domains associated with bphoster, cycbot, palevo, malvertising to our domain blocklists. Sources: xylibox.blogspot.com, malware-control.com, hosts-file.net and others..."

:fear::fear:
 
MalwareDomains updated - 2012.03.02...

FYI...

170+ New Domains
- http://www.malwaredomains.com/wordpress/?p=2514
March 2nd, 2012 - "Added over 170 domains associated with exploits, htaccess redirects, malicious iframes, malicious javascript and other badness. Sources include exposure.iseclab.org, amada.abuse.ch, hosts-file.net and others..."

:fear::fear:
 
MalwareDomains updated - 2012.03.04...

FYI...

Black Hole Exploit Domains, Cridex, Sakura, malspam
- http://www.malwaredomains.com/wordpress/?p=2518
March 4th, 2012 - "Added 167 domains associated with malspam, malicious advertising, Sakura, Cridex, black hole exploits, etc. Sources include mwis.ru, spamalysis.wordpress.com and many others..."

:fear::fear:
 
Urgent Block: ionis90landsi -dot- rr -dot- nu

FYI...

Urgent Block: ionis90landsi -dot- rr -dot- nu
Mass Injection of WordPress Websites
- http://www.malwaredomains.com/wordpress/?p=2522
March 6th, 2012 - "Websense* has posted an article relating to mass SQL injection into wordpress sites. The domain is ionis90landsi. rr. nu (spaces added)..."

* http://community.websense.com/blogs.../03/05/mass-injection-of-wordpress-sites.aspx
5 Mar 2012
___

- http://google.com/safebrowsing/diagnostic?site=ionis90landsi.rr.nu/
"... This site was hosted on 1 network(s) including AS48691 (SPECIALIST)..."
- http://www.google.com/safebrowsing/diagnostic?site=AS:48691
"... Over the past 90 days, we found 285 site(s) on this network... that appeared to function as intermediaries for the infection of 1016 other site(s)... We found 650 site(s)... that infected 8361 other site(s)..."
- http://centralops.net/co/DomainDossier.aspx
inetnum: 194.28.112.0 - 194.28.115.255
descr: Specialist
country: MD
Information related to 194.28.112.0/22
origin: AS48691
___

- https://blogs.msdn.com/themes/blogs...ocking-malware-domains-in-isa-2006&GroupKeys=
"... Also be aware that malware that connects using an IP address instead of a domain name will -not- be blocked when you use just domain name lists..."

:fear::fear:
 
Last edited:
MalwareDomains updated - 2012.03.11...

FYI...

342 Domains Added ... !!
- http://www.malwaredomains.com/wordpress/?p=2535
March 11th, 2012 - "Added 342 domains associated with agent-vcf, bhexploitkit, phoenix exploit kit, zbot, and lots of other badness. Sources include sophos.com, malwareurl.com, c-apt-ure.blogspot.com, and many many others..."

:fear::fear:
 
MalwareDomains updated - 2012.03.23...

FYI...

bankpatch, blackenergy, htaccess redirects
- http://www.malwaredomains.com/wordpress/?p=2550
March 23nd, 2012 - "Added over 190 domains associated with iframes, malicious javascripts, htaccess redirects, malvertising, etc. Sources include sucuri.net, safebrowsing.clients.google.com, iseclab.org and others..."

:fear:
 
You must log in or register to reply here.
Back
Top