P
P
propovednik2013-09-28 18:49:26
Domain Name System
propovednik, 2013-09-28 18:49:26

Lists of websites with malware/badware

For a good purpose, lists of infected sites were required (we want to help people from our city in removing all sorts of nasty things from sites). Stopbadware gives lists only to ASok administrators, other projects that offer downloadable lists are either very weak (the total database is several thousand addresses) or abandoned.
Google offers a Safe Browsing API - but from there you can only pull out hashes, or check the presence in the database at a specific site address.
Does anyone have similar information? Or know alternatives to Stopbadware and Google offering downloadable options?

Answer the question

In order to leave comments, you need to log in

3 answer(s)
S
Sergey, 2013-09-28
@bondbig

from one script that I use at work:

[IPSOURCES]
url1 = http://www.mtc.sri.com/live_data/attackers/
url2 = http://isc.sans.edu/reports.html
url3 = https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist
url4 = https://spyeyetracker.abuse.ch/blocklist.php?download=ipblocklist
url5 = http://www.projecthoneypot.org/list_of_ips.php
url6 = http://intel.martincyber.com/ip
url7 = https://reputation.alienvault.com/reputation.generic
url8 = https://www.openbl.org/lists/base.txt
url9 = http://www.blocklist.de/lists/ssh.txt
url10 = https://palevotracker.abuse.ch/
url11 = http://www.malwaregroup.com/ipaddresses
url12 = http://www.ciarmy.com/list/ci-badguys.txt
url13 = http://rules.emergingthreats.net/blockrules/rbn-malvertisers-ips.txt

[DOMAINSOURCES]
url1 = https://secure.mayhemiclabs.com/malhosts/malhosts.txt
url2 = https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
url3 = https://spyeyetracker.abuse.ch/blocklist.php?download=domainblocklist
url4 = http://mirror1.malwaredomains.com/files/BOOT
url5 = http://www.malwaredomainlist.com/hostslist/hosts.txt
url6 = http://www.malware.com.br/cgi/submit?action=list
url7 = http://www.malwarepatrol.net/cgi/submit?action=list_xml

N
nebularia, 2013-09-28
@nebularia

List

V
Veliant, 2013-09-28
@Veliant

parse periodically malwaredomainlist.com and urlquery.net

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question