IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [blacklist]

A blacklist is a list of data to filter be filtered out. A blacklist is the opposite of a whitelist. - Whitelist - only these things. - Blacklist - everything but these things.

44 questions
2
votes
2 answers

Is there known statistics of passwords used during brute force password attacks?

I have been reading quite a bit about brute force attacks and I am wondering whether the passwords that are used in such attacks should be kept around so as to later prevent my users from having those passwords, since those brute force systems…
Alexis Wilke
  • 862
  • 5
  • 19
1
vote
1 answer

Protect Wordpress against ddos attack

The above screenshot is from my website's cpanel visitors list.My website is build on wordpress. And I think someone is trying hard to crack open my website with DDOS attack and drain out my 10gb bandwidth in single night.Although I've applied…
psudo
  • 111
  • 2
1
vote
1 answer

Free/Inexpensive IP blacklists

What are some free or inexpensive places where I can grab blacklists automatically? I do not want to have to query for each individual IP. The firewall, PF, requires you to have the IPs or ranges in a file line by line. Any type of blacklist applies…
Saustin
  • 311
  • 1
  • 10
1
vote
1 answer

My website got blacklisted as "phishing". Any hints on how to avoid that?

I have a personal website hosted using my provider's DNS name (i.e. myname.provider.com) on my personal hardware at home. The web server (both HTTP and HTTPS) is Apache on Debian Wheezy (which is rather dated), but I update it regularly. It has an…
Dmitry Grigoryev
  • 10,072
  • 1
  • 26
  • 56
1
vote
0 answers

Website marked as dangerous (phishing) in the past. How to get off blacklists?

One of our clients got his website infected almost a year ago. The site indeed contained some malicious files on the FTP server, and it got marked as dangerous, with suspicion of phishing attempts. A couple of weeks ago we finished a brand new…
Kristián Filo
  • 111
  • 2
1
vote
2 answers

Why would a phishing blacklist be hashed?

I was planning to comment on the question at Finding phishing sites to certain domain and suggest searching Google's blacklist for keywords or substrings of a domain name in question. But then I found…
Sad IT admin
  • 127
  • 1
  • 8
1
vote
1 answer

Might have been infected

I recently got redirected to a site which just made a loud beeping sound, when trying to just access a link in a YouTube video discription. My Anti Virus Program (Kaspersky Internet Security) instantly closed the browser tab and alarmed me. So I…
Jan1902
  • 11
  • 3
1
vote
1 answer

Whitelist Application For Windows Server 2012

My problem I am looking for an application which runs on Windows Server 2012 for security reasons. Our server began attacked on many protocols. They are trying brute force attacks with very weak passwords. It is just annoying and just slowes down…
NagyDani
  • 7
  • 3
1
vote
1 answer

Why does Yahoo cached results button lead to blacklisted "malicious"/"phishing" IP?

I did a search for some on Yahoo, I then click on the little arrow next to one of the search results and then clicked the Cached button because I wanted to view an older version of the page. It took me to the following…
user67447
1
vote
1 answer

Difference between Knowledge-based IDS and behavior-based IDS

I have difficulties in understanding the difference between Knowledge-based IDS and behavior-based IDS. This link says that a knowledge-based IDS uses a database of specific attacks and system vulnerabilities, which is blacklist method, I think.…
Ema
  • 203
  • 1
  • 2
  • 7
1
vote
1 answer

How DNS blacklisting works?

Let's say we have this network setup: PC > Firewall > DNS Server I was under the impression that the PC would attempt to access the DNS server but the firewall would instantly block the request because it has noticed that the domain being requested…
user2437672
  • 11
  • 1
1
vote
2 answers

How to remove my email from spam-lists/blacklists after malware issue?

I am not sure this is the proper place to ask this question, but I am sure someone will be able to help me :) I have a Mac, which I use for daily working (emails, etc.). Recently, I received some weird return emails with strange content. After…
makeMonday
  • 111
  • 1
  • 2
1
vote
0 answers

Making My Cache Work and Not Theirs: Blacklist for Blocking Caching Sites with Squidguard?

Is there a Squid Guard blacklist (assuming SSL decryption and inspection) that will block caching websites like Google Cache, Google Translate, and the Internet Wayback Machine?
leeand00
  • 1,297
  • 1
  • 13
  • 21
1
vote
1 answer

Nginx: How to block IP by hostname regex

I'm running a small wordpress site with nginx + php5-fpm. I have noticed that I get a lot of botnet attacks from IPs with hostnames like: 52-182.static.spheral.ru 208-135.static.spheral.ru 118-239.static.spheral.ru The actual IPs associated with…
David Simic
  • 111
  • 3
1
vote
2 answers

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it makes sense to blacklist attackers SOURCE ports…
George
  • 739
  • 1
  • 6
  • 22
1
2
3