STICKY: The TechNutopia Fullsize Hostiles List

Need help and support? Post your problems and questions here.

Moderators: et voilà, Efrain, gubatron, spuggy, nonproffessional, ianw, FTA, Calliope, Casper67, cootmaster, Only A Hobo

STICKY: The TechNutopia Fullsize Hostiles List

Postby Aaron.Walkhouse » Sun May 24, 2009 10:31 pm

This is an expanded list for protection against malware, spammers and other abusers of gnutella.
It is compiled from many sources, including the lists from BlueTack Internet Security Systems
and my own scans of the network for defective nodes, over a dozen types of trojan, the top ten
worms and about a dozen classes of spam. It was started in 2004 for BearShare, then LimeWire
started using it in 2006 and FrostWire acquired the capability soon afterwards. It has grown to
fit the task over the past 5 years and has become effective against all kinds of hazards while
enhancing performance (despite it's size) due to steadily improving intelligence on every kind
of threat on gnutella. It now averages 400,000 rules, effectively blocking everything but us.

Needless to say, this makes for a large list. It tend to cut the noise level down so you can get
some searching done without having to wade through mountains of trash. Now it's just hills. :mrgreen:

Place "hostiles.txt" into the settings folder:

  • Windows: C:\Documents and Settings\YOUR_NAME\Application Data\FrostWire
    or C:\Documents and Settings\YOUR_NAME\.frostWire
  • Vista: C:\Users\YOUR_NAME\AppData\Roaming\FrostWire
    (You may have to change a setting in Explorer to be able to see this folder.
    In the Tools menu, it's Folder Options and in the View tab turn on "Show hidden files and folders".)


  • Mac OSX: Macintosh HD\Users:YOUR_NAME\Library\Preferences\FrostWire

  • linux: /home/YOUR_NAME/.frostwire

PLEASE REMEMBER TO DELETE THE PREVIOUS LISTS!
They go stale and should be replaced often.


Here's a web link to the ZIP file:TechNutopia Fullsize Hostiles List
And another:TechNutopia Fullsize Hostiles List
User avatar
Aaron.Walkhouse
Moderator
 
Posts: 555
Joined: Wed Mar 19, 2008 12:04 am
Location: My igloos melt in June.

Postby Aaron.Walkhouse » Sun May 24, 2009 10:46 pm

P.S: Don't forget to subscribe to this thread. :mrgreen:
User avatar
Aaron.Walkhouse
Moderator
 
Posts: 555
Joined: Wed Mar 19, 2008 12:04 am
Location: My igloos melt in June.

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Carlos » Sat Aug 15, 2009 4:40 am

ALL the lists Bluetack are included? :?:
Level 1 and level 2?
Ciao! :)
Carlos
Member
 
Posts: 17
Joined: Mon Aug 10, 2009 12:28 am

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Aaron.Walkhouse » Sun Aug 16, 2009 10:51 pm

I use most of the lists from Bluetack:

Ad Trackers
Bogon Ranges
DShield Recommended
Hijacked IP Blocks
Level 1
Level 2
Master exclusions
Microsoft Related
Proxy List
Spiders List
Spyware List

And then just a few of my own:

360share and eTomi clones.new
3Wplayer.new
3Wplayer.repeats
AP2P.txt
BAD GUID - 5D1CECE8584FF507FF5EE44E3F5A5701 GiFT .txt
BAD GUID - 69D4F5C2D934FBEC6FC6CB06BDD32D29 BS 5.3.0 .new
BAD GUID - 69D4F5C2D934FBEC6FC6CB06BDD32D29 BS 5.3.0 .ranges.TXT
BAD GUID - 69D4F5C2D934FBEC6FC6CB06BDD32D29 BS 5.3.0 .repeats
BAD GUID - 9C51E42153D4C94A858F8E8A8391173D Morpheus.new
BAD GUID - 9C51E42153D4C94A858F8E8A8391173D Morpheus.repeats
Bad Peers.TXT
Bad_DC_Hubs.p2p
BearShare and LimeWire Pro scams and worms.new
BearShare and LimeWire Pro scams and worms.repeats
BearShare default hostiles.txt
Fake Lime 4.18.8 with 64K QRT.TXT
Fakes.new
Fakes.repeats
Gathered.from.Spamhaus.txt
GnuShare 2.8 with 472 files and 2863 GB on commercial rackspace.TXT
GTK hostiles.txt
LimeWire default hostiles.txt
MediaDefender.new
MediaDefender.repeats
mpa_trackers.p2p
RBN.txt
SmokeBlower Networks.txt
Sound Control Media Protection.txt
SPAM - 0-8K bytes - How2 [open with notepad.avi].new
SPAM - 0-8K bytes - How2 [open with notepad.avi].repeats
SPAM - 15,872, 70-170K bytes - EFreeClub.new
SPAM - 15,872, 70-170K bytes - EFreeClub.repeats
SPAM - 22 bytes - Empty zip files.new
SPAM - 22 bytes - Empty zip files.repeats
SPAM - 23,102 - e-mirrorsite.com .wma.new
SPAM - 30,311-440,299 - RING TONES .mov.new
SPAM - 30,311-440,299 - RING TONES .mov.repeats
SPAM - 584,236 - WYZO.new
SPAM - 735,663,716 - Play3W.avi.new
SPAM - bitdownload.new
SPAM - bitdownload.repeats
SPAM - p2pblast.new
SPAM - p2pblast.repeats
SPAM - SecuredIE.new
SPAM - Various.new
SPAM - Various.repeats
SPAM - Win32.HIDRAG.virus.BitDownload.new
SPAM - Win32.HIDRAG.virus.BitDownload.repeats
The Spamhaus Don't Route Or Peer List.txt
Trident Mediguard.txt
TROJAN - 1,005,411 bytes - Downloader.Generic3.UVY.new
TROJAN - 1,134,377 bytes - Backdoor.Generic9.AWBM.new
TROJAN - 113,234 bytes - Dropper.Generic.RGQ.new
TROJAN - 233472 bytes - Dropper.Generic.DZD.new
TROJAN - 233472 bytes - Dropper.Generic.DZD.repeats
TROJAN - 50-80K bytes - ISTbar.new
TROJAN - 50-80K bytes - ISTbar.repeats
TROJAN - 61-62K bytes - Mainpean StarDialer.new
TROJAN - 61-62K bytes - Mainpean StarDialer.repeats
TROJAN - 736,590 bytes.new
TROJAN - 783843 bytes - Crypt.B.new
TROJAN - 783843 bytes - Crypt.B.repeats
TROJAN - 81,964 bytes - WinVBIE Toolbar.new
TROJAN - 81,964 bytes - WinVBIE Toolbar.repeats
TROJAN - Various.new
wma.wmv.spam.txt
WORM - 123897 bytes - GEDZAC VBS-Israfel.new
WORM - 123897 bytes - GEDZAC VBS-Israfel.repeats
WORM - 178861 bytes - IRC.Backdoor.SdBot.LFI.new
WORM - 178861 bytes - IRC.Backdoor.SdBot.LFI.repeats
WORM - 202477 bytes - Generic.FX!CME-24.new
WORM - 202477 bytes - Generic.FX!CME-24.repeats
WORM - 417792 bytes - Delf.ATB.new
WORM - 535082 bytes - W32.Alcra.D.new
WORM - 535082 bytes - W32.Alcra.D.repeats
WORM - 643767 bytes - VB.FL.new
WORM - 643767 bytes - VB.FL.repeats
WORM - 71,070 bytes - W32.Alcra.C.new
WORM - 71,070 bytes - W32.Alcra.C.repeats
WORM - 756709 bytes - IRC.BackDoor.SdBot2.CFK.new
WORM - 872159 bytes - VB.CC.new
WORM - 872159 bytes - VB.CC.repeats
User avatar
Aaron.Walkhouse
Moderator
 
Posts: 555
Joined: Wed Mar 19, 2008 12:04 am
Location: My igloos melt in June.

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Carlos » Wed Aug 19, 2009 9:31 am

Congratulations. :mrgreen:
With which frequency these lists are updated :?:


It will be possible in future to automate this update via a button on the GUI :?: :wink:
Carlos
Member
 
Posts: 17
Joined: Mon Aug 10, 2009 12:28 am

Postby Aaron.Walkhouse » Wed Aug 19, 2009 10:16 pm

Something like that is being considered right now.
User avatar
Aaron.Walkhouse
Moderator
 
Posts: 555
Joined: Wed Mar 19, 2008 12:04 am
Location: My igloos melt in June.

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby gubatron » Wed Dec 09, 2009 4:12 pm

Right now FrostWire supports an automatic update of this hostiles list.
As soon as you have compiled a new list please let me know to populate this list on the bittorrent tracker.

There's currently 9877 seeds of the current hostiles list.
Do not pay for FrostWire, it's 100% Free, get it from the official website only
http://www.frostwire.com
User avatar
gubatron
Development Team
 
Posts: 525
Joined: Wed Apr 05, 2006 12:23 am
Location: Solar System

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Centarus05 » Sun Jan 03, 2010 10:01 am

HOWDY!!

Windows: C:\Documents and Settings\YOUR_NAME\Application Data\FrostWire
or C:\Documents and Settings\YOUR_NAME\.frostWire

I have Windows XP home. I cannot follow this file path. It doesn't exist. I can go as far as "Your Name"
But I do not have a file listed as "Application Data" Since it is not there I also do not have a file inside it
listed as FW.

If I create these files, following the order that they are listed as will it work??

Respectfully
Centarus05
Centarus05
Member
 
Posts: 22
Joined: Wed Nov 18, 2009 10:16 pm
Location: Ft. Myers, FL.USA

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Centarus05 » Sun Jan 03, 2010 10:54 am

HOWDY!!

OOPS!

I was wrong. The file path does exist. It, Application Data was a hidden file. When Itried to create it
i got the msg. that it already was there so I had to make it so I could see it.

Please Re-specify the file Path so others will be able to find it also.

Thanks for the help. Maybe now I won't get all thos BAD Files that have executable prog. or Viruses in them.

Respectfully
Centarus05
Centarus05
Member
 
Posts: 22
Joined: Wed Nov 18, 2009 10:16 pm
Location: Ft. Myers, FL.USA

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby puffnstuff » Mon Jan 04, 2010 12:18 am

hmm. is it just me, or is this hostiles list now built into FrostWire on it's own? I just updated FrostWire (now using version 4.18.5 and I have a hostiles file already in that folder, along with a hostiles updater. :)

BTW, those confused with the app path.....try this shortcut.

Start > Run - type %APPDATA% and hit Enter. Now look for your FrostWire folder. This is the folder that you should add the hostiles too.
puffnstuff
Member
 
Posts: 25
Joined: Thu Aug 02, 2007 8:56 pm

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby gubatron » Mon Jan 04, 2010 10:34 am

yes, frostwire now downloads a torrent with the latest hostiles.dat

If anybody wants to contribute, we're all ears for new ideas on how to keep hostiles.dat fresh and valid.
Meaning eliminating false positives and adding new bad guys.
Do not pay for FrostWire, it's 100% Free, get it from the official website only
http://www.frostwire.com
User avatar
gubatron
Development Team
 
Posts: 525
Joined: Wed Apr 05, 2006 12:23 am
Location: Solar System

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Humanoid » Tue Jan 05, 2010 11:33 am

Vista: C:\Users\YOUR_NAME\AppData\Roaming\FrostWire
(You may have to change a setting in Explorer to be able to see this folder.
In the Tools menu, it's Folder Options and in the View tab turn on "Show hidden files and folders".)


That parentheses text showed up really small for me, so I thought I'd re-post in case anyone else could hardly read it. :P
Image
User avatar
Humanoid
Member
 
Posts: 115
Joined: Wed May 13, 2009 5:47 pm
Location: Southeast Michigan

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby Centarus05 » Wed Jan 06, 2010 3:15 pm

HOWDY!!

Can we add those bad guys that shar zip files that have executable files in them or thos guy's who share movies
that have spam or have avi files that have a re-direct to a website that will put tracking cookies on your comp.
If we can Please tell us, the people who use FW every day, How do we do it?

Respectfully
Centarus05
Centarus05
Member
 
Posts: 22
Joined: Wed Nov 18, 2009 10:16 pm
Location: Ft. Myers, FL.USA

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby puffnstuff » Fri Jan 15, 2010 2:10 am

good deal :) Glad to see this "revolutionized" blocklist - the whole fact that "everyone" who uses the blocklist also "seeds" the blocklist within FW is a GREAT concept ;)

+1 for that.....no dealing with overloaded, down, timing out, etc. list servers, ala iblocklist.com, phoenixlabs, bluetack :) I like it.

But yea, my only concern/curiosity, is how does FW know when to update the locally stored hostiles list?

From the little research I've done, it appears iblocklist and blutack.co.uk update their lists nearly DAILY....it would be great if the hostiles blocklist could be put on this auto-update schedule too so that we're always on the "cutting edge".

Also, is there any "logging" feature? To see incoming connections, what's been blocked, who I've uploaded to, etc....? I looked through the Logging tab, and it looks like it's "almost" there, but not sure if it has what I need, since it just shows when my shared files are uploaded...I took a gander through the Console tab, but it seemed very...err....what's the word, I guess complicated to me.

Looking more for something straightforward/simple such as uTorrent's "Logger" options. To show bad hash senders, show me what IPs the hostiles is blocking (to weed out high traffic targets, as well as false positives....etc).
puffnstuff
Member
 
Posts: 25
Joined: Thu Aug 02, 2007 8:56 pm

Re: STICKY: The TechNutopia Fullsize Hostiles List

Postby gubatron » Fri Jan 15, 2010 9:53 am

Thanks for the tip about blutack.co.uk
We've been meaning to update the hostiles.txt file more often, and I've been monitoring this thread to read something just like what you said.
We'll take a look at blutack.co.uk
Do not pay for FrostWire, it's 100% Free, get it from the official website only
http://www.frostwire.com
User avatar
gubatron
Development Team
 
Posts: 525
Joined: Wed Apr 05, 2006 12:23 am
Location: Solar System

Next

Return to Software Support

Who is online

Users browsing this forum: Google [Bot] and 1 guest