You do not have permission to edit this page, for the following reasons:

This IP address has been blocked from editing Wikipedia.
This does not affect your ability to read Wikipedia pages.
Most people who see this message have done nothing wrong. Some kinds of blocks restrict editing from specific service providers or telecom companies in response to recent abuse or vandalism, and can sometimes affect other users who are unrelated to that abuse. Review the information below for assistance if you do not believe that you have done anything wrong.

The IP address or range 3.95.0.0/16 has been blocked (disabled) by ‪Blablubbs‬ for the following reason(s):

The IP address that you are currently using has been blocked because it is believed to be a web host provider or colocation provider. To prevent abuse, web hosts and colocation providers may be blocked from editing Wikipedia.
You will not be able to edit Wikipedia using a web host or colocation provider because it hides your IP address, much like a proxy or VPN.
We recommend that you attempt to use another connection to edit. For example, if you use a proxy or VPN to connect to the internet, turn it off when editing Wikipedia. If you edit using a mobile connection, try using a Wi-Fi connection, and vice versa. If you are using a corporate internet connection, switch to a different Wi-Fi network. If you have a Wikipedia account, please log in.
If you do not have any other way to edit Wikipedia, you will need to request an IP block exemption.

How to appeal if you are confident that your connection does not use a colocation provider's IP address:
If you are confident that you are not using a web host, you may appeal this block by adding the following text on your talk page: ((unblock|reason=Caught by a colocation web host block but this host or IP is not a web host. My IP address is _______. Place any further information here. ~~~~)). You must fill in the blank with your IP address for this block to be investigated. Your IP address can be determined here. Alternatively, if you wish to keep your IP address private you can use the unblock ticket request system. There are several reasons you might be editing using the IP address of a web host or colocation provider (such as if you are using VPN software or a business network); please use this method of appeal only if you think your IP address is in fact not a web host or colocation provider.

Administrators: The IP block exemption user right should only be applied to allow users to edit using web host in exceptional circumstances, and requests should usually be directed to the functionaries team via email. If you intend to give the IPBE user right, a CheckUser needs to take a look at the account. This can be requested most easily at SPI Quick Checkuser Requests. Unblocking an IP or IP range with this template is highly discouraged without at least contacting the blocking administrator.

This block will expire on 08:49, 2 November 2024.

Even when blocked, you will usually still be able to edit your user talk page, as well as email administrators and other editors.

For information on how to proceed, please read the FAQ for blocked users and the guideline on block appeals. The guide to appealing blocks may also be helpful.

Other useful links: Blocking policy · Help:I have been blocked
Your IP address is in a range that has been blocked on all Wikimedia Foundation wikis. The block was made by ‪Jon Kolbert‬. The reason given is Open proxy/Webhost: See the help page if you are affected .
- Start of block: 05:35, 21 February 2024
- Expiry of block: 05:35, 21 February 2029
Your current IP address is 3.95.186.134. The blocked range is 3.95.0.0/16. Please include all above details in any queries you make. If you believe you were blocked by mistake, you can find additional information and instructions in the No open proxies global policy. Otherwise, to discuss the block please post a request for review on Meta-Wiki. You could also send an email to the stewards VRT queue at stewards@wikimedia.org including all above details.

You can view and copy the source of this page:

((Short description|DNS server that points a domain to bogus internet addresses))
((More citations needed|date=November 2021))
A '''DNS sinkhole''', also known as a '''sinkhole server''', '''Internet sinkhole''', or '''Blackhole DNS'''<ref name="BlackholeDNS">((cite news | first=pfsense.org | title=BlackholeDNS: Anyone tried it with pfsense? | author=kevross33 | date=November 22, 2011 | url=http://forum.pfsense.org/index.php?topic=43298.0;wap2 | access-date=October 12, 2012 ))((Dead link|date=January 2024 |bot=InternetArchiveBot |fix-attempted=yes ))</ref> is a [[Domain Name System]] (DNS) server that has been configured to hand out non-routable addresses for a certain set of [[domain names]]. Computers that use the sinkhole fail to access the real site.<ref name="DNS Sinkhole - SANS Institute">((cite news | first=sans.org | title=DNS Sinkhole - SANS Institute | author=Kelly Jackson Higgins | date=October 2, 2012 | url=http://www.sans.org/reading_room/whitepapers/dns/dns-sinkhole_33523 | access-date=October 12, 2012))</ref> The higher up the DNS resolution chain the sinkhole is, the more requests will fail, because of the greater number of lower nameservers that in turn serve a greater number of clients. Some of the larger botnets have been made unusable by [[top-level domain]] sinkholes that span the entire Internet.<ref name="Conficter Hand off">((cite news | first=darkreading.com | title=Microsoft Hands Off Nitol Botnet Sinkhole Operation To Chinese CERT | author=Kelly Jackson Higgins | date=October 2, 2012 | url=http://www.darkreading.com/risk/microsoft-hands-off-nitol-botnet-sinkhole-operation-to-chinese-cert/d/d-id/1138455 | access-date=September 2, 2015))</ref> DNS Sinkholes are effective at detecting and blocking bots and other malicious traffic. 

By default, the local [[Hosts (file)|hosts file]] on a computer is checked before DNS servers, and can be used to block sites in the same way.

== Applications ==
Sinkholes can be used both constructively, to contain threats such as [[WannaCry cyber attack|WannaCry]]<ref>((Cite magazine |last=Hay Newman |first=Lily |date=2017-05-13 |title=The WannaCry Ransomware 'Kill Switch' That Saved Untold PCs From Harm |url=https://www.wired.com/2017/05/accidental-kill-switch-slowed-fridays-massive-ransomware-attack/ |archive-url=https://web.archive.org/web/20220627123222/https://www.wired.com/2017/05/accidental-kill-switch-slowed-fridays-massive-ransomware-attack/ |archive-date=2022-06-27 |access-date=2022-08-19 |magazine=[[Wired (magazine)|Wired]]))</ref> and [[Avalanche (phishing group)|Avalanche]],<ref>((Cite web|url=https://www.symantec.com/connect/blogs/avalanche-malware-network-hit-law-enforcement-takedown|title=Avalanche malware network hit with law enforcement takedown|last=Symantec Security Response|date=December 1, 2016|website=Symantec Connect|publisher=Symantec|access-date=December 3, 2016))</ref><ref>((Cite web|url=https://www.europol.europa.eu/newsroom/news/%E2%80%98avalanche%E2%80%99-network-dismantled-in-international-cyber-operation|title='Avalanche' network dismantled in international cyber operation|last=Europol|date=December 1, 2016|website=europol.europa.eu|publisher=Europol|access-date=December 3, 2016))</ref> and destructively, for example disrupting DNS services in a [[Denial-of-service attack|DoS]] attack.((clarify|date=August 2021|reason=how?))

DNS sinkholing can be used to protect users by intercepting DNS request attempting to connect to known malicious domains and instead returning an IP address of a sinkhole server defined by the DNS sinkhole administrator.<ref>((Cite web |title=DNS Sinkhole |url=https://www.enisa.europa.eu/topics/csirts-in-europe/glossary/dns-sinkhole |access-date=2022-08-19 |website=[[ENISA]]))</ref> One example of blocking malicious domains is to stop [[botnet]]s, by interrupting the DNS names the botnet is programmed to use for coordination.<ref>((Cite magazine |last=Hay Newman |first=Lily |date=2018-01-02 |title=Hacker Lexicon: What Is Sinkholing? |url=https://www.wired.com/story/what-is-sinkholing/ |access-date=2022-08-19 |magazine=[[Wired (magazine)|Wired]]))</ref> Another use is to block [[ad serving]] sites, either using a hosts file-based sinkhole<ref name="Hosts based ad block">((cite news | first=someonewhocares.org | title=How to make the Internet not suck (as much) | author=Dan Pollock | date=October 11, 2012 | url=http://someonewhocares.org/hosts/ | access-date=October 12, 2012))</ref> or by locally running a DNS server (e.g., using a [[Pi-hole]]). Local DNS servers effectively block ads for all devices on the network.<ref>((Cite news|url=https://www.lifehacker.com.au/2015/02/turn-a-raspberry-pi-into-an-ad-blocker-with-a-single-command/|title=Turn A Raspberry Pi Into An Ad Blocker With A Single Command|date=2015-02-17|work=Lifehacker Australia|access-date=2018-05-06|language=en))</ref>

==References==
((Reflist))

[[Category:Domain Name System]]

Pages transcluded onto the current version of this page (help):

DNS sinkhole (edit)
Template:Ambox (view source) (template editor protected)
Template:Category handler (view source) (protected)
Template:Cite magazine (view source) (protected)
Template:Cite news (view source) (protected)
Template:Cite web (view source) (protected)
Template:Clarify (view source) (template editor protected)
Template:Dead link (view source) (template editor protected)
Template:Delink (view source) (protected)
Template:Find sources mainspace (view source) (template editor protected)
Template:Fix (view source) (protected)
Template:Fix-span (view source) (template editor protected)
Template:Fix/category (view source) (protected)
Template:Main other (view source) (protected)
Template:More citations needed (view source) (template editor protected)
Template:Pagetype (view source) (protected)
Template:Reflist (view source) (protected)
Template:Reflist/styles.css (view source) (protected)
Template:SDcat (view source) (protected)
Template:Short description (view source) (protected)
Template:Short description/lowercasecheck (view source) (protected)
Module:Arguments (view source) (protected)
Module:Category handler (view source) (protected)
Module:Category handler/blacklist (view source) (protected)
Module:Category handler/config (view source) (protected)
Module:Category handler/data (view source) (protected)
Module:Category handler/shared (view source) (protected)
Module:Check for unknown parameters (view source) (protected)
Module:Citation/CS1 (view source) (protected)
Module:Citation/CS1/COinS (view source) (protected)
Module:Citation/CS1/Configuration (view source) (protected)
Module:Citation/CS1/Date validation (view source) (protected)
Module:Citation/CS1/Identifiers (view source) (protected)
Module:Citation/CS1/Utilities (view source) (protected)
Module:Citation/CS1/Whitelist (view source) (protected)
Module:Citation/CS1/styles.css (view source) (protected)
Module:DecodeEncode (view source) (template editor protected)
Module:Delink (view source) (protected)
Module:Disambiguation/templates (view source) (protected)
Module:Find sources (view source) (template editor protected)
Module:Find sources/config (view source) (template editor protected)
Module:Find sources/links (view source) (template editor protected)
Module:Find sources/templates/Find sources mainspace (view source) (template editor protected)
Module:Message box (view source) (protected)
Module:Message box/ambox.css (view source) (protected)
Module:Message box/configuration (view source) (protected)
Module:Namespace detect/config (view source) (protected)
Module:Namespace detect/data (view source) (protected)
Module:Pagetype (view source) (protected)
Module:Pagetype/config (view source) (protected)
Module:Pagetype/disambiguation (view source) (protected)
Module:Pagetype/setindex (view source) (protected)
Module:Pagetype/softredirect (view source) (protected)
Module:SDcat (view source) (protected)
Module:String (view source) (protected)
Module:Unsubst (view source) (protected)
Module:Wikitext Parsing (view source) (protected)
Module:Yesno (view source) (protected)

Return to DNS sinkhole.

Retrieved from "https://en.wikipedia.org/wiki/DNS_sinkhole"