News

• Sept 2nd, 2010: Publication delay on RSS Feeds

  Due to ongoing issues, all public RSS feeds are being produced with publication delays. This was done as an alternative to completely taking them offline again.

• July 21st, 2010: RSS Feeds available

  All RSS feeds that were previously disabled are now available.

• June 19th, 2010: Registrar and Nameserver RSS feeds suspended ...

  We have been forced to disable public access to the blacklisted domains by registrar and by nameserver on our RSS Feed Site. See http://rss.uribl.com for more information.

• April 5th, 2010: No news is good news...

  All systems are operating as expected.

Old News

• March 12th, 2009: Website restored

  We lost a webserver last night due to hardware failure. The site has been moved to another server in the interim until we have a replacement for it. If you notice anything broken, please contact the webmaster

• February 26th, 2009: Heavy Hitter ACL changes

  URIBL.COM has recently introduced a Split-horizon DNS system at the root level to restrict queries from heavy hitters. All Positive ACLs (those which previously returned 127.0.0.255) have been disabled and moved into the split-horizon filtering system. People using nameservers that have been ACL'd can still contact URIBL.COM via the web or by email, but DNS resolution to the URIBL lists will timeout. See About->Abuse for more details on testing your nameserver if you suspect your nameserver has been blocked.

• January 26th, 2009: Decreased Replication Delay = Increased Accuracy

  In an effort to help combat the short spam campaigns, we are in the process of making key changes that will decrease the replication delay for new listings. We have already made changes at the core that allow us to publish the public zone files 3x more often! We have decreased our negative cache time (ncache-ttl) on multi from 600 seconds to 300 seconds. Also, we have asked all public mirrors to increase their polling frequency by more than double. Between these changes, we have effectively reduced the average listing latency for new domains from 6.5 minutes down to just over 2 minutes. Possibly more on this to come! Stay tuned...

• October 13th, 2008: Down for Maintenance

  URIBL will be unavailable for a while today as we try to bring new Database servers online. Maintenance should be complete by 1500 GMT.

• September 25th, 2008: New Servers going in tommorrow - 2008/09/26

  [This maintenance is now complete] - We are going to be installing new database servers on Friday (~1600 GMT), and doing some upgrades the existing ones. Expect some downtime on the web site, but everything else should be operating as normal. At a later date we will be migrating the data from the old databases to the new which will result in a bit more downtime, but that wont happen tommorrow.

• August 5th, 2008: livefilestore.com listing

  Due to the heavy and continued abuse of livefilestore.com (see http://rss.uribl.com/hosters), we have temporarily placed the domain in URIBL Black. Once Microsoft has the abuse under control, we will remove it from black. If you are using SpamAssassin, and want to avoid potential falses on livefilestore.com links, simply remove it from being checked by adding uridnsbl_skip_domain livefilestore.com to your local.cf.

• July 11th, 2008: Website DDoS

  Sorry we were down a bit longer than expected.. Prolexic mitigated the DDoS quickly, but we are just now turning everything back on.

• March 3rd, 2008: Geocities and Blogspot listings (was Googlepages)

  A month or so ago we posted news about how we are listing subdomains for googlepages, blogspot and similar abused hosting sites. Well, that news somehow disappeared. Anyways, if anyone was looking for it, you can find it here.

• December 21st, 2007: Google Map of URIBL Mirrors

  We have a new page on our site which shows our mirror distribution over top a google map. Click Here to see it. The map is updated every 30 minutes with data we have polled from the mirrors over the last 4 hours. The markers are color coded to indicate mirror stats, with green being ok, yellow being warning, and red being failing. It looks like we could use some mirrors outside of the US and EU. If you are interested, please contact dnsadmin@uribl.com.




• October 16th, 2007: ACLs placed on public DNS Infastructure

  UPDATE - Refusing queries on high traffic IPs just caused even more traffic to be generated. Because of the lack of negative caching when sending a refusal, this caused our mirrors to take on every query from IPs that are blocked. We have changed all REFUSED IP addresses over to simply returning NXDOMAIN to all the queries. By doing this, we at least benefit some from caching nameservers serving up the nxdomain for us, which reduces the amount of queries we have to handle from these high traffic hosts.

  URIBL has begun to block IPs hitting our public DNS mirrors with high volume. If you are sending anything close to 500k queries/day to our public dns, you queries may be refused already, or in the near future. If you would like to become a part of the public dns infastructure and give some queries back to the world, please contact dnsadmin@uribl.com

• June 8th, 2007: Services Restored The URIBL website came under a heavy DDoS attack starting on June 6th at 13:30 GMT. SURBL and Spamhaus were also effected by this attack. During the last couple days, we have been working with www.prolexic.com for DDoS mitagation. Thanks to Prolexic, URIBL webservices are back online tonite.
• May 8th, 2007: Mail Services restored The uribl.com mail server and one of the rbldnsd mirrors hosted at GTI died on May 4th, 2007 as a tornado ripped through Greensburg, KS. A new mail server was brought up late on May 7th. If you sent anything important between the 4th and 7th to an uribl.com email address, you may want to followup to make sure it was received.
• June 7th, 2006: RSS Feeds Available Certain sections of URIBL's RSS Site are now public. There you will find thing such as spam domain statistics by Registrar and by Nameserver. Each NIC or NS can be further drilled down on to obtain the most recent domains that have been black listed on that particular registrar or nameserver. Plus, the data is accessible via XML (RSS 2.0) feed for those who would like to know when domains on their registrar and/or nameservers become blacklisted (and hopefully take action).