News
- March 26th, 2008: Additional abused hosts added
Geocities, Googlepages, Blogspot, and Tripod are all being heavily abused now. Tripod abuse is on the upswing the last couple days, running at near 100%. One of the same offenders abusing Tripod has begun to move some of the operation over to the free .ru hostings of by.ru and hotmail.ru. We are now support subdomain listings on those free .ru sites. And shortly after adding notlong.com, it received a pill spam hit. Now, if only someone would put this data to use.
Anyways, we have extended our reach to cover even more free hosters that we have seen abuse on recently. The current list of hosts that we support listings on can be found here. We will continue to add additional domains to this list as we deem necessary.
To see a running comparision of abused hosts, go here.
- March 3rd, 2008: Geocities and Blogspot listings (was Googlepages)
A month or so ago we posted news about how we are listing subdomains for googlepages, blogspot and similar abused hosting sites. Well, that news somehow disappeared. Anyways, if anyone was looking for it, you can find it here.
Old News
- December 21st, 2007: Google Map of URIBL Mirrors
We have a new page on our site which shows our mirror distribution over top a google map. Click Here to see it. The map is updated every 30 minutes with data we have polled from the mirrors over the last 4 hours. The markers are color coded to indicate mirror stats, with green being ok, yellow being warning, and red being failing. It looks like we could use some mirrors outside of the US and EU. If you are interested, please contact dnsadmin@uribl.com.
October 16th, 2007: ACLs placed on public DNS Infastructure
UPDATE - Refusing queries on high traffic IPs just caused even more traffic to be generated. Because of the lack of negative caching when sending a refusal, this caused our mirrors to take on every query from IPs that are blocked. We have changed all REFUSED IP addresses over to simply returning NXDOMAIN to all the queries. By doing this, we at least benefit some from caching nameservers serving up the nxdomain for us, which reduces the amount of queries we have to handle from these high traffic hosts.
URIBL has begun to block IPs hitting our public DNS mirrors with high volume. If you are sending anything close to 500k queries/day to our public dns, you queries may be refused already, or in the near future. If you would like to become a part of the public dns infastructure and give some queries back to the world, please contact dnsadmin@uribl.com
June 13th, 2007: Web Services Restored (again)
The second wave to DDoS attacks started on June 11th. An HTTP GET flood with random query strings was used to bypass proxy caching, with an ACK flood to boot. Prolexic has mitigated this attack, and we are back... at least for now. If you want to help in some way, consider a donation (even if its small), as we try to expand our redundancy and failover mechanisms.
June 8th, 2007: Services Restored
The URIBL website came under a heavy DDoS attack starting on June 6th at 13:30 GMT. SURBL and Spamhaus were also effected by this attack. During the last couple days, we have been working with www.prolexic.com for DDoS mitagation. Thanks to Prolexic, URIBL webservices are back online tonite.
May 8th, 2007: Mail Services restored
The uribl.com mail server and one of the rbldnsd mirrors hosted at GTI
died on May 4th, 2007 as a
tornado ripped
through Greensburg, KS. A new mail server was brought up late on May 7th.
If you sent anything important between the 4th and 7th to an uribl.com email address,
you may want to followup to make sure it was received.
September 25th, 2006: Server Move
We are moving servers Friday, Oct. 13th from 17:00 GMT until 01:00 GMT
on the 14th. Public mirrors will remain active during this period, but
no new data will be fed into the zones, so expect a decrease in spam
accuracy during this period until the systems are back online.
June 7th, 2006: RSS Feeds Available
Certain sections of URIBL's RSS Site are now public. There you will find thing such as spam domain statistics by Registrar and by Nameserver. Each NIC or NS can be further drilled down on to obtain the most recent domains that have been black listed on that particular registrar or nameserver. Plus, the data is accessible via XML (RSS 2.0) feed for those who would like to know when domains on their registrar and/or nameservers become blacklisted (and hopefully take action).
February 6th, 2006: Hardware Needs
First of all, thank you to everyone who has offered mirror services for URIBL lists.
Many of you will be found listed under the links page.
If you are not and would like to be, please contact webmaster@uribl.com.
Additionally, we are currently looking for additional hardware for our backend DB cache and
scraping systems that are used to continously monitor for new spam uri's in the wild.
If anyone has a good hardware vendor connection that is willing to help, please contact us!
January 17th, 2006: Contributor Links
An addition was made to the links page today for links back to those who have helped us get where we are today! If you are not listed and think you should be, just drop a note to webmaster@uribl.com. If you would like to contribute to the effort, see the help us page.
|
