Nothink.Blocklist: Retrieves Nothink Malware DNS network traffic blacklist...

In hrbrmstr/netintel: Various network intelligence routines

Description

Retrieves Nothink Malware DNS network traffic blacklist (IP/FQDN)

Usage

Nothink.Blocklist(refresh = FALSE,
  nothink_url = "http://www.nothink.org/blacklist/blacklist_malware_dns.txt")

Arguments

refresh	refresh the database? (bool)
nothink_url	Nothink blacklist URL (chr) - defaults to http://www.nothink.org/blacklist/blacklist_malware_dns.txt

Details

The Nothink blocklist refreshes regularly, but the onus is on the caller to force a refresh. First-time call will setup a cache directory & file in the user's home directory, download & generate the data frame then write the data frame out as an R object. Future calls will just re-read this data frame unless refresh == TRUE should the function refresh the database.

Value

List of two singe-column data frames, one for each blocklist

• domains - Zeus domains (column name: domain)

• ips - Zeus ips (column name: IP)

See Also

Nothink - http://www.nothink.org/

hrbrmstr/netintel documentation built on May 17, 2019, 5:11 p.m.