[prev in list] [next in list] [prev in thread] [next in thread] 

List:       emerging-sigs
Subject:    [Emerging-Sigs] domains
From:       david.glosser () gmail ! com (David Glosser)
Date:       2008-02-24 2:17:00
Message-ID: ac597e6e0802231817h15855c4cg3f6b751154eba9bd () mail ! gmail ! com
[Download RAW message or body]

I removed about 500 domains which were no longer registered using some bulk
whois tools. Others were either registered but not active in the past 3
years or have changed registrars.

But revalidating  domains has been extremely time consuming since it is a
manual process. But I'm only talking about 17,500 domains, not over 100,000.
Wow. Good Luck.


On Sat, Feb 23, 2008 at 9:06 PM, Jim McQuaid <jim.mcquaid at gmail.com> wrote:

> These have been accumulated over two years frI om a variety of sources
> including: lists included in various software packages (Spybot,
> AdAware, SpySweeper, FireStarter, etc.), security blogs, Symantec
> Threat Explorer searches, Snort logs, Site Advisor searches,
> StopBadware searches (found a couple thousand at blogspot on December
> 31st), malwaredomains.com, hiperlinks.com, CNet queries of RBN IP
> space (I've blackholed newly created domains which later started
> hosting malware ), etc.   I've not delisted any domains,but am
> approaching the ceiling for Smoothwall, and will have to start.  The
> Badware Website Clearinghouse claims 272,333 urls reported...
> 
> > Date: Sat, 23 Feb 2008 08:12:02 -0500
> > From: "David Glosser" <david.glosser at gmail.com>
> > Subject: Re: [Emerging-Sigs] Smoothwall collapses
> > To: "Jim McQuaid" <jim.mcquaid at gmail.com>
> > 
> > the dns-bh list "only" has 17,500 domains and the BadGuys are creating
> more
> > fast-flux domains every day.....  Where do the other 95,000 domains
> come
> > from?
> 
> --
> James McQuaid
> http://www.jamesmcquaid.com
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20080223/2f6dd766/attachment-0001.html



[prev in list] [next in list] [prev in thread] [next in thread]