chg: Dynamically set the impact based on the FP rate
Raphaël Vinot
parent
77c62cd937
commit
faa3c634f2
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-iplist.txt",
|
||||
"name": "Bamital",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bamital",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Bamital\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-nsiplist.txt",
|
||||
"name": "Bamital_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bamital_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Bamital\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt",
|
||||
"name": "Banjori",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Banjori",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:banker=\"Banjori\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-nsiplist.txt",
|
||||
"name": "Banjori_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Banjori_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:banker=\"Banjori\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt",
|
||||
"name": "Bebloh/URLZone",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bebloh/URLZone",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Bebloh\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-nsiplist.txt",
|
||||
"name": "Bebloh/URLZone_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bebloh/URLZone_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Bebloh\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-iplist.txt",
|
||||
"name": "Bedep",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bedep",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Bedep\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-nsiplist.txt",
|
||||
"name": "Bedep_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bedep_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Bedep\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-iplist.txt",
|
||||
"name": "Beebone",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Beebone",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Beebone\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-nsiplist.txt",
|
||||
"name": "Beebone_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Beebone_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Beebone\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-iplist.txt",
|
||||
"name": "Chinad",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Chinad",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-nsiplist.txt",
|
||||
"name": "Chinad_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Chinad_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/corebot-iplist.txt",
|
||||
"name": "Corebot",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Corebot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/corebot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Corebot\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-iplist.txt",
|
||||
"name": "Cryptolocker",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Cryptolocker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"CryptoLocker\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-nsiplist.txt",
|
||||
"name": "Cryptolocker_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Cryptolocker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"CryptoLocker\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt",
|
||||
"name": "Dircrypt",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dircrypt",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"DirCrypt\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-nsiplist.txt",
|
||||
"name": "Dircrypt_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dircrypt_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"DirCrypt\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-iplist.txt",
|
||||
"name": "Dromedan",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dromedan",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-nsiplist.txt",
|
||||
"name": "Dromedan_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dromedan_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt",
|
||||
"name": "Dyre",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dyre",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Dyre\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-nsiplist.txt",
|
||||
"name": "Dyre_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dyre_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Dyre\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-iplist.txt",
|
||||
"name": "Fobber",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Fobber",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Fobber\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-nsiplist.txt",
|
||||
"name": "Fobber_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Fobber_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Fobber\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-iplist.txt",
|
||||
"name": "G01",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "G01",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-nsiplist.txt",
|
||||
"name": "G01_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "G01_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt",
|
||||
"name": "Geodo",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Geodo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Geodo\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-nsiplist.txt",
|
||||
"name": "Geodo_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Geodo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Geodo\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-iplist.txt",
|
||||
"name": "Gozi",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Gozi",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Gozi\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-nsiplist.txt",
|
||||
"name": "Gozi_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Gozi_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Gozi\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt",
|
||||
"name": "Hesperbot",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Hesperbot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:android=\"Hesperbot\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-nsiplist.txt",
|
||||
"name": "Hesperbot_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Hesperbot_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:android=\"Hesperbot\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-iplist.txt",
|
||||
"name": "Kraken",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Kraken",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Kraken\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-nsiplist.txt",
|
||||
"name": "Kraken_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Kraken_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Kraken\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-iplist.txt",
|
||||
"name": "Locky",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Locky",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"Locky\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-nsiplist.txt",
|
||||
"name": "Locky_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Locky_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"Locky\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-iplist.txt",
|
||||
"name": "Madmax",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Madmax",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Madmax\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-nsiplist.txt",
|
||||
"name": "Madmax_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Madmax_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Madmax\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt",
|
||||
"name": "Matsnu",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Matsnu",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-nsiplist.txt",
|
||||
"name": "Matsnu_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Matsnu_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-iplist.txt",
|
||||
"name": "Mirai",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Mirai",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Mirai\"",
|
||||
"misp-galaxy:botnet=\"Mirai\""
|
||||
"misp-galaxy:botnet=\"Mirai\"",
|
||||
"misp-galaxy:tool=\"Mirai\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-nsiplist.txt",
|
||||
"name": "Mirai_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Mirai_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Mirai\"",
|
||||
"misp-galaxy:botnet=\"Mirai\""
|
||||
"misp-galaxy:botnet=\"Mirai\"",
|
||||
"misp-galaxy:tool=\"Mirai\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-iplist.txt",
|
||||
"name": "Murofet",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Murofet",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Licat\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-nsiplist.txt",
|
||||
"name": "Murofet_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Murofet_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Licat\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt",
|
||||
"name": "Necurs",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Necurs",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Necurs\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-nsiplist.txt",
|
||||
"name": "Necurs_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Necurs_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Necurs\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-iplist.txt",
|
||||
"name": "Nymaim",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Nymaim",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Nymaim\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-nsiplist.txt",
|
||||
"name": "Nymaim_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Nymaim_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Nymaim\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt",
|
||||
"name": "P2P_GOZ",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "P2P_GOZ",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-nsiplist.txt",
|
||||
"name": "P2P_GOZ_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "P2P_GOZ_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ptgoz-nsiplist.txt",
|
||||
"name": "PT_GOZ_/_New_GOZ_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "PT_GOZ_/_New_GOZ_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ptgoz-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-iplist.txt",
|
||||
"name": "Padcrypt",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Padcrypt",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"PadCrypt\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-nsiplist.txt",
|
||||
"name": "Padcrypt_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Padcrypt_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"PadCrypt\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-iplist.txt",
|
||||
"name": "Pandabanker",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pandabanker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Panda Banker\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-nsiplist.txt",
|
||||
"name": "Pandabanker_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pandabanker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Panda Banker\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-iplist.txt",
|
||||
"name": "Pizd",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Pizd",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-nsiplist.txt",
|
||||
"name": "Pizd_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Pizd_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-iplist.txt",
|
||||
"name": "Proslikefan",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Proslikefan",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-nsiplist.txt",
|
||||
"name": "Proslikefan_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Proslikefan_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt",
|
||||
"name": "Pushdo",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pushdo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Pushdo\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-nsiplist.txt",
|
||||
"name": "Pushdo_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pushdo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Pushdo\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt",
|
||||
"name": "Pykspa",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Pykspa",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-nsiplist.txt",
|
||||
"name": "Pykspa_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Pykspa_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-iplist.txt",
|
||||
"name": "Qadars",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qadars",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Qadars\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-nsiplist.txt",
|
||||
"name": "Qadars_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qadars_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Qadars\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt",
|
||||
"name": "Qakbot",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qakbot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Akbot\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-nsiplist.txt",
|
||||
"name": "Qakbot_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qakbot_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Akbot\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-iplist.txt",
|
||||
"name": "Ramdo",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramdo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-nsiplist.txt",
|
||||
"name": "Ramdo_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramdo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt",
|
||||
"name": "Ramnit",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramnit",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\"",
|
||||
"misp-galaxy:banker=\"Ramnit\""
|
||||
"misp-galaxy:banker=\"Ramnit\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-nsiplist.txt",
|
||||
"name": "Ramnit_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramnit_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\"",
|
||||
"misp-galaxy:banker=\"Ramnit\""
|
||||
"misp-galaxy:banker=\"Ramnit\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt",
|
||||
"name": "Ranbyus",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ranbyus",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ranbyus\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-nsiplist.txt",
|
||||
"name": "Ranbyus_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ranbyus_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ranbyus\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-iplist.txt",
|
||||
"name": "Shifu",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Shifu",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Shifu\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-nsiplist.txt",
|
||||
"name": "Shifu_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Shifu_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Shifu\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-iplist.txt",
|
||||
"name": "Simda",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Simda",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Simda\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-nsiplist.txt",
|
||||
"name": "Simda_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Simda_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Simda\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-iplist.txt",
|
||||
"name": "Sisron",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sisron",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Sisron\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-nsiplist.txt",
|
||||
"name": "Sisron_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sisron_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Sisron\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-iplist.txt",
|
||||
"name": "Sphinx",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sphinx",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Zeus Sphinx\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-nsiplist.txt",
|
||||
"name": "Sphinx_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sphinx_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Zeus Sphinx\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt",
|
||||
"name": "Suppobox",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Suppobox",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-nsiplist.txt",
|
||||
"name": "Suppobox_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Suppobox_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt",
|
||||
"name": "Symmi",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Symmi",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-iplist.txt",
|
||||
"name": "Tempedreve",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tempedreve",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-nsiplist.txt",
|
||||
"name": "Tempedreve_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tempedreve_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt",
|
||||
"name": "Tinba_/_TinyBanker",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinba_/_TinyBanker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Tinba\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-nsiplist.txt",
|
||||
"name": "Tinba_/_TinyBanker_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinba_/_TinyBanker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Tinba\"",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-iplist.txt",
|
||||
"name": "Tinynuke",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinynuke",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"TinyNuke\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-nsiplist.txt",
|
||||
"name": "Tinynuke_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinynuke_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"TinyNuke\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-iplist.txt",
|
||||
"name": "Tofsee",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Tofsee",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Gheg\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-nsiplist.txt",
|
||||
"name": "Tofsee_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Tofsee_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Gheg\""
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-iplist.txt",
|
||||
"name": "Unknowndropper",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknowndropper",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-nsiplist.txt",
|
||||
"name": "Unknowndropper_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknowndropper_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-iplist.txt",
|
||||
"name": "Unknownjs",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknownjs",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-nsiplist.txt",
|
||||
"name": "Unknownjs_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknownjs_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vawtrak-iplist.txt",
|
||||
"name": "Vawtrak",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Vawtrak",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vawtrak-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Vawtrak\"",
|
||||
"misp-galaxy:tool=\"Vawtrak\""
|
||||
"misp-galaxy:tool=\"Vawtrak\"",
|
||||
"misp-galaxy:banker=\"Vawtrak\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,12 +1,12 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vawtrak-nsiplist.txt",
|
||||
"name": "Vawtrak_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Vawtrak_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vawtrak-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Vawtrak\"",
|
||||
"misp-galaxy:tool=\"Vawtrak\""
|
||||
"misp-galaxy:tool=\"Vawtrak\"",
|
||||
"misp-galaxy:banker=\"Vawtrak\""
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vidro-iplist.txt",
|
||||
"name": "Vidro",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Vidro",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vidro-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vidro-nsiplist.txt",
|
||||
"name": "Vidro_NS",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Vidro_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vidro-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/virut-iplist.txt",
|
||||
"name": "Virut",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3,
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Virut",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/virut-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Virut\""
|
||||
|
|
|
|||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue