DNS-BH – Malware Domain Blocklist

Recent Posts

• Pushdo DGA
• Using DNS Logs As a Security Information Source
• Redkit, Carberp, facebook scam domains
• Resources for Hacked Sites
• 147 pushdo,malvertising,maliciousjs, iframe domains added
• Ransomware Domains: iestats .cc, emstats .su, ehistats .su, e-protections .su
• SutraTDS, iframe, malvertising,malspam domains

Donate

Sponsors

Donate

• Please Donate

In the News

• Building a DNS Blackhole with FreeBSD
• Dshield: Suspicious Domains
• MalNET
• MSDN Blog: Blocking malware
• SANS-DNS Sinkhole Setup
• SANs-Using PowerShell to manage blackhole DNS domains
• The Register-Blackhole your malware
• Visualizing the Hosting Patterns of Modern Cybercriminals
• Visualizing the Hosting Patterns of Modern Cybercriminals

Latest Updates

• Last Changes – malwaredomains.zones file
• Latest Changes: domain.txt
• Updates to BOOT file

Long-Lived Malware Domains

• Long Lived (immortal) Malware Domains
• long lived malware domains – quick longitudinal analysis
• Malware Domains Hall of Shame

Malware Resources

• Defense in Depth: IP and Netblock Blocking
• Long Lived (immortal) Malware Domains
• MaraDNS
• MSDN Blog: Blocking malware
• Stop Malware with AdBlock Plus
• Stopping Malware with ISA 2006
• WOT-Web of Trust
• ZeuS Blocklists

Mirrors

• Primary Mirror
• SAGADC Mirror

Other Links

• Analyzing DNS Logs Using Splunk
• BlackHole DNS White Paper
• Bulk Domain Registrars & URL Shorteners
• Internet Storm Center
• Malware Domain List
• Secure Home Networks
• SunbeltBLOG
• Symantec Threat Explorer
• The Malware Block List
• Threat Expert

Search for Delisted Domains

• Search for Delisted Domains

Spam Blocklists

• joewein.net
• Project Honeypot Spam Domains List
• SpamBot domains
• Spamtrackers wiki

sql injection

• ASProx Toolkit
• Check your website for SQL Injection
• Preventing SQL Injection
• SQL IFRAME INJECTION RESOURCES

The Complete Files

• Complete Bind Zone file
• Complete BOOT FIle
• Complete Domains.txt file

Unofficial FAQ

• “You have no right to block a website”
• Keeping the Blocklist Current
• Terms of Use
• Underscores in Domain Names
• Underscores in Domain Names Part II
• wget -n (save bandwidth)
• What to do if your domain is listed
• Why don’t you have a host file?

Archives

• May 2013 (15)
• April 2013 (10)
• March 2013 (14)
• February 2013 (11)
• January 2013 (10)
• December 2012 (13)
• November 2012 (10)
• October 2012 (6)
• September 2012 (10)
• August 2012 (9)
• July 2012 (13)
• June 2012 (19)
• May 2012 (14)
• April 2012 (18)
• March 2012 (14)
• February 2012 (15)
• January 2012 (25)
• December 2011 (23)
• November 2011 (15)
• October 2011 (13)
• September 2011 (23)
• August 2011 (12)
• July 2011 (16)
• June 2011 (12)
• May 2011 (17)
• April 2011 (13)
• March 2011 (18)
• February 2011 (19)
• January 2011 (18)
• December 2010 (22)
• November 2010 (21)
• October 2010 (22)
• September 2010 (22)
• August 2010 (24)
• July 2010 (20)
• June 2010 (26)
• May 2010 (14)
• April 2010 (18)
• March 2010 (16)
• February 2010 (12)
• January 2010 (17)
• December 2009 (14)
• November 2009 (13)
• October 2009 (12)
• September 2009 (11)
• August 2009 (11)
• July 2009 (15)
• June 2009 (12)
• May 2009 (13)
• April 2009 (8)
• March 2009 (7)
• February 2009 (8)
• January 2009 (9)
• December 2008 (13)
• November 2008 (15)
• October 2008 (10)
• September 2008 (16)
• August 2008 (13)
• July 2008 (19)
• June 2008 (16)
• May 2008 (28)
• April 2008 (25)
• March 2008 (22)
• February 2008 (19)
• January 2008 (24)
• December 2007 (29)
• November 2007 (4)

Categories

• 0day (56)
• apt (1)
• asprox (40)
• Bandwidth (3)
• BH Exploit Kit (25)
• Bulk Registrars (2)
• bulletproof (3)
• Conficker (2)
• Domain News (239)
• Donate (8)
• dynamic dns (2)
• Email Me (2)
• exploit (134)
• fake codecs (62)
• fastflux (41)
• fraud (8)
• General Security (11)
• gumblar (17)
• iframes (103)
• immortal (6)
• koobface (5)
• malspam (62)
• malvertising (43)
• mirror (6)
• MoneyMule (20)
• New Domains (641)
• News (15)
• NewSploit (2)
• Off Topic (6)
• Phishing (36)
• RBN (17)
• relisted (3)
• Removed Domains (184)
• rogue antivirus (225)
• runforestrun (1)
• spam (18)
• Spyeye (26)
• sql injection (69)
• Storm Worm (23)
• trojan (12)
• Trojans (166)
• Unverified Domains (3)
• Waledac (3)
• zeus (161)
• zlob (30)

Feed

Pages

• About
  • Latest Updates
• BH DNS Files
• BH DNS White Paper
• Donate
• Email Us
• Mirrors
• Sponsor Us
• Terms of Use

Sponsored Links

Tags