/
Potential DDoS Related Domains
Potential DDoS Related Domains
- Ashish Khabde
Owned by Ashish Khabde
May 15, 2019
Analytics
Loading data...
This rule category includes system rules the appliance uses to blacklist domains that may have been the targets or subjects in NXDOMAIN or DDoS attacks. These rules block all FQDN lookups on UDP for domains that have been observed to be used as targets in DDoS attacks. The rules are enabled by default. You can disable them when necessary.
Note that these rules capture currently observed bad domain names that can change on a regular basis. Infoblox recommends that you update to the latest ruleset to capture the most current rules in this category. For information about how to update to the latest ruleset, refer to the NIOS documentation at docs.infoblox.com.
| Rule ID | Rule Type | Rule Name | Description | Enable Condition | Parameters | Comments |
|---|---|---|---|---|---|---|
| 120600047 | System | Potential DDoS related domain: 33ok.com | This rule blacklists 33ok.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600405 | System | Potential DDoS related domain: qdmini.com | This rule blacklists qdmini.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600528 | System | Potential DDoS related domain: rexuedongman.com | This rule blacklists rexuedongman.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600533 | System | Potential DDoS related domain: namepu.com | This rule blacklists namepu.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600544 | System | Potential DDoS related domain: ts777.net | This rule blacklists ts777.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600546 | System | Potential DDoS related domain: 1396me.com | This rule blacklists 1396me.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600550 | System | Potential DDoS related domain: a3p4.net | This rule blacklists a3p4.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600569 | System | Potential DDoS related domain: jq159.com | This rule blacklists jq159.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600581 | System | Potential DDoS related domain: tuidc.net | This rule blacklists tuidc.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600582 | System | Potential DDoS related domain: ylqxs.com | This rule blacklists ylqxs.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600585 | System | Potential DDoS related domain: 65jjj.com | This rule blacklists 65jjj.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600601 | System | Potential DDoS related domain: rqpay.com | This rule blacklists rqpay.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600633 | System | Potential DDoS related domain: shumenol.com | This rule blacklists shumenol.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600643 | System | Potential DDoS related domain: 388.com | This rule blacklists 388.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600680 | System | Potential DDoS related domain: tjlangyue.com | This rule blacklists tjlangyue.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600684 | System | Potential DDoS related domain: 115seo.com | This rule blacklists 115seo.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600686 | System | Potential DDoS related domain: 72mn.com | This rule blacklists 72mn.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600690 | System | Potential DDoS related domain: smzy.com | This rule blacklists smzy.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600697 | System | Potential DDoS related domain: ch2015.com | This rule blacklists ch2015.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600765 | System | Potential DDoS related domain: csdn.net | This rule blacklists csdn.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600771 | System | Potential DDoS related domain: masterfei.com | This rule blacklists masterfei.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600776 | System | Potential DDoS related domain: xigua.com | This rule blacklists xigua.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600808 | System | Potential DDoS related domain: d3456.com | This rule blacklists d3456.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600812 | System | Potential DDoS related domain: haole018.com | This rule blacklists haole018.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600816 | System | Potential DDoS related domain: km1818.com | This rule blacklists km1818.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600829 | System | Potential DDoS related domain: ai8g.com | This rule blacklists ai8g.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600835 | System | Potential DDoS related domain: haole001.com | This rule blacklists haole001.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600859 | System | Potential DDoS related domain: haole20.com | This rule blacklists haole20.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600870 | System | Potential DDoS related domain: se7c.com | This rule blacklists se7c.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600873 | System | Potential DDoS related domain: w6g7.com | This rule blacklists w6g7.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600891 | System | Potential DDoS related domain: 9ht.com | This rule blacklists 9ht.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600899 | System | Potential DDoS related domain: jianfei.com | This rule blacklists jianfei.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600905 | System | Potential DDoS related domain: money238.com | This rule blacklists money238.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600925 | System | Potential DDoS related domain: uuu9.com | This rule blacklists uuu9.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600927 | System | Potential DDoS related domain: zaihuni.com | This rule blacklists zaihuni.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600929 | System | Potential DDoS related domain: bet16.com | This rule blacklists bet16.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600937 | System | Potential DDoS related domain: 916yy.com | This rule blacklists 916yy.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600981 | System | Potential DDoS related domain: jijizy.com | This rule blacklists jijizy.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600983 | System | Potential DDoS related domain: myzyzy.com | This rule blacklists myzyzy.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120600985 | System | Potential DDoS related domain: tts66.com | This rule blacklists tts66.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601012 | System | Potential DDoS related domain: mgm001.com | This rule blacklists mgm001.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601017 | System | Potential DDoS related domain: mgm008.com | This rule blacklists mgm008.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601024 | System | Potential DDoS related domain: cocounion.com | This rule blacklists cocounion.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601027 | System | Potential DDoS related domain: mgm005.com | This rule blacklists mgm005.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601052 | System | Potential DDoS related domain: yeyelu.com | This rule blacklists yeyelu.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601062 | System | Potential DDoS related domain: cl0579.com | This rule blacklists cl0579.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601063 | System | Potential DDoS related domain: desheng28.com | This rule blacklists desheng28.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601064 | System | Potential DDoS related domain: desheng28.net | This rule blacklists desheng28.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601068 | System | Potential DDoS related domain: modoupi.com | This rule blacklists modoupi.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601085 | System | Potential DDoS related domain: tianya28.net | This rule blacklists tianya28.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601091 | System | Potential DDoS related domain: douwan2888.com | This rule blacklists douwan2888.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601099 | System | Potential DDoS related domain: evil5.com | This rule blacklists evil5.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601107 | System | Potential DDoS related domain: gatewang.com | This rule blacklists gatewang.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601119 | System | Potential DDoS related domain: relakks.com | This rule blacklists relakks.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601137 | System | Potential DDoS related domain: bibi81.net | This rule blacklists bibi81.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601149 | System | Potential DDoS related domain: 622hh.com | This rule blacklists 622hh.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601160 | System | Potential DDoS related domain: omoyu.com | This rule blacklists omoyu.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601163 | System | Potential DDoS related domain: xdmcn.com | This rule blacklists xdmcn.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601165 | System | Potential DDoS related domain: 44cm.com | This rule blacklists 44cm.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601167 | System | Potential DDoS related domain: xksyxw.com | This rule blacklists xksyxw.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601172 | System | Potential DDoS related domain: x99moyu.net | This rule blacklists x99moyu.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601174 | System | Potential DDoS related domain: 255bb.com | This rule blacklists 255bb.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601184 | System | Potential DDoS related domain: 44ququ.com | This rule blacklists 44ququ.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601185 | System | Potential DDoS related domain: 44sasa.com | This rule blacklists 44sasa.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601189 | System | Potential DDoS related domain: ggg42.com | This rule blacklists ggg42.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601192 | System | Potential DDoS related domain: 669rr.com | This rule blacklists 669rr.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601200 | System | Potential DDoS related domain: cswanda.com | This rule blacklists cswanda.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601208 | System | Potential DDoS related domain: 1yyg.com | This rule blacklists 1yyg.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601212 | System | Potential DDoS related domain: rg9699.com | This rule blacklists rg9699.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601215 | System | Potential DDoS related domain: tangren88.com | This rule blacklists tangren88.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601217 | System | Potential DDoS related domain: youbikan.com | This rule blacklists youbikan.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601218 | System | Potential DDoS related domain: zhujiangroad.com | This rule blacklists zhujiangroad.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601223 | System | Potential DDoS related domain: jqfangyu.com | This rule blacklists jqfangyu.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601227 | System | Potential DDoS related domain: xjfxmy.com | This rule blacklists xjfxmy.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601229 | System | Potential DDoS related domain: 1818my.com | This rule blacklists 1818my.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601231 | System | Potential DDoS related domain: dedeni.com | This rule blacklists dedeni.com, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601232 | System | Potential DDoS related domain: dedeni.net | This rule blacklists dedeni.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601233 | System | Potential DDoS related domain: dedeni.org | This rule blacklists dedeni.org, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) | |
| 120601234 | System | Potential DDoS related domain: nemexcikx.net | This rule blacklists nemexcikx.net, which has been observed to be used in DDoS attacks. | Always enabled. | Events per second (default = 1) |