diff --git a/bgpranking/config/modules/bambenekconsulting_Bamital.json b/bgpranking/config/modules/bambenekconsulting_Bamital.json index 6b41665..4343879 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bamital.json +++ b/bgpranking/config/modules/bambenekconsulting_Bamital.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bamital-iplist.txt", - "name": "Bamital", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bamital", + "url": "http://osint.bambenekconsulting.com/feeds/bamital-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Bamital\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Bamital_NS.json b/bgpranking/config/modules/bambenekconsulting_Bamital_NS.json index e0c5b8f..287ded3 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bamital_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Bamital_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bamital-nsiplist.txt", - "name": "Bamital_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bamital_NS", + "url": "http://osint.bambenekconsulting.com/feeds/bamital-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Bamital\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Banjori.json b/bgpranking/config/modules/bambenekconsulting_Banjori.json index bff735f..84e19c4 100644 --- a/bgpranking/config/modules/bambenekconsulting_Banjori.json +++ b/bgpranking/config/modules/bambenekconsulting_Banjori.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt", - "name": "Banjori", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Banjori", + "url": "http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:banker=\"Banjori\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Banjori_NS.json b/bgpranking/config/modules/bambenekconsulting_Banjori_NS.json index a356b60..6d330c8 100644 --- a/bgpranking/config/modules/bambenekconsulting_Banjori_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Banjori_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/banjori-nsiplist.txt", - "name": "Banjori_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Banjori_NS", + "url": "http://osint.bambenekconsulting.com/feeds/banjori-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:banker=\"Banjori\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone.json b/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone.json index 6a40185..5a3d55d 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone.json +++ b/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt", - "name": "Bebloh/URLZone", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bebloh/URLZone", + "url": "http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Bebloh\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone_NS.json b/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone_NS.json index 4491ece..4ca01e8 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Bebloh_URLZone_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bebloh-nsiplist.txt", - "name": "Bebloh/URLZone_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bebloh/URLZone_NS", + "url": "http://osint.bambenekconsulting.com/feeds/bebloh-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Bebloh\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Bedep.json b/bgpranking/config/modules/bambenekconsulting_Bedep.json index 91f19ba..5921758 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bedep.json +++ b/bgpranking/config/modules/bambenekconsulting_Bedep.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bedep-iplist.txt", - "name": "Bedep", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bedep", + "url": "http://osint.bambenekconsulting.com/feeds/bedep-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Bedep\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Bedep_NS.json b/bgpranking/config/modules/bambenekconsulting_Bedep_NS.json index bba7876..8e5e237 100644 --- a/bgpranking/config/modules/bambenekconsulting_Bedep_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Bedep_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/bedep-nsiplist.txt", - "name": "Bedep_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Bedep_NS", + "url": "http://osint.bambenekconsulting.com/feeds/bedep-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Bedep\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Beebone.json b/bgpranking/config/modules/bambenekconsulting_Beebone.json index 0c343a8..ab30e36 100644 --- a/bgpranking/config/modules/bambenekconsulting_Beebone.json +++ b/bgpranking/config/modules/bambenekconsulting_Beebone.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/beebone-iplist.txt", - "name": "Beebone", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Beebone", + "url": "http://osint.bambenekconsulting.com/feeds/beebone-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Beebone\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Beebone_NS.json b/bgpranking/config/modules/bambenekconsulting_Beebone_NS.json index c1655aa..a061b1e 100644 --- a/bgpranking/config/modules/bambenekconsulting_Beebone_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Beebone_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/beebone-nsiplist.txt", - "name": "Beebone_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Beebone_NS", + "url": "http://osint.bambenekconsulting.com/feeds/beebone-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Beebone\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Chinad.json b/bgpranking/config/modules/bambenekconsulting_Chinad.json index 9c75b65..6bf3795 100644 --- a/bgpranking/config/modules/bambenekconsulting_Chinad.json +++ b/bgpranking/config/modules/bambenekconsulting_Chinad.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/chinad-iplist.txt", - "name": "Chinad", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Chinad", + "url": "http://osint.bambenekconsulting.com/feeds/chinad-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Chinad_NS.json b/bgpranking/config/modules/bambenekconsulting_Chinad_NS.json index e85e259..3a8609a 100644 --- a/bgpranking/config/modules/bambenekconsulting_Chinad_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Chinad_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/chinad-nsiplist.txt", - "name": "Chinad_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Chinad_NS", + "url": "http://osint.bambenekconsulting.com/feeds/chinad-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Corebot.json b/bgpranking/config/modules/bambenekconsulting_Corebot.json index 252d4bb..cde556b 100644 --- a/bgpranking/config/modules/bambenekconsulting_Corebot.json +++ b/bgpranking/config/modules/bambenekconsulting_Corebot.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/corebot-iplist.txt", - "name": "Corebot", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Corebot", + "url": "http://osint.bambenekconsulting.com/feeds/corebot-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Corebot\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Cryptolocker.json b/bgpranking/config/modules/bambenekconsulting_Cryptolocker.json index c26f63b..b5e4a93 100644 --- a/bgpranking/config/modules/bambenekconsulting_Cryptolocker.json +++ b/bgpranking/config/modules/bambenekconsulting_Cryptolocker.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/cl-iplist.txt", - "name": "Cryptolocker", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Cryptolocker", + "url": "http://osint.bambenekconsulting.com/feeds/cl-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"CryptoLocker\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Cryptolocker_NS.json b/bgpranking/config/modules/bambenekconsulting_Cryptolocker_NS.json index 6902b3e..430d54b 100644 --- a/bgpranking/config/modules/bambenekconsulting_Cryptolocker_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Cryptolocker_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/cl-nsiplist.txt", - "name": "Cryptolocker_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Cryptolocker_NS", + "url": "http://osint.bambenekconsulting.com/feeds/cl-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"CryptoLocker\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Dircrypt.json b/bgpranking/config/modules/bambenekconsulting_Dircrypt.json index d4027b2..03183cc 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dircrypt.json +++ b/bgpranking/config/modules/bambenekconsulting_Dircrypt.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt", - "name": "Dircrypt", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dircrypt", + "url": "http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"DirCrypt\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Dircrypt_NS.json b/bgpranking/config/modules/bambenekconsulting_Dircrypt_NS.json index b4e9e75..dac037f 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dircrypt_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Dircrypt_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dircrypt-nsiplist.txt", - "name": "Dircrypt_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dircrypt_NS", + "url": "http://osint.bambenekconsulting.com/feeds/dircrypt-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"DirCrypt\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Dromedan.json b/bgpranking/config/modules/bambenekconsulting_Dromedan.json index 8e0cd48..0200002 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dromedan.json +++ b/bgpranking/config/modules/bambenekconsulting_Dromedan.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dromedan-iplist.txt", - "name": "Dromedan", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dromedan", + "url": "http://osint.bambenekconsulting.com/feeds/dromedan-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Dromedan_NS.json b/bgpranking/config/modules/bambenekconsulting_Dromedan_NS.json index be23aaa..f575485 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dromedan_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Dromedan_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dromedan-nsiplist.txt", - "name": "Dromedan_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dromedan_NS", + "url": "http://osint.bambenekconsulting.com/feeds/dromedan-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Dyre.json b/bgpranking/config/modules/bambenekconsulting_Dyre.json index c82fb2f..f5f1fe5 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dyre.json +++ b/bgpranking/config/modules/bambenekconsulting_Dyre.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt", - "name": "Dyre", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dyre", + "url": "http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Dyre\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Dyre_NS.json b/bgpranking/config/modules/bambenekconsulting_Dyre_NS.json index 803319b..4db2ddf 100644 --- a/bgpranking/config/modules/bambenekconsulting_Dyre_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Dyre_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/dyre-nsiplist.txt", - "name": "Dyre_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Dyre_NS", + "url": "http://osint.bambenekconsulting.com/feeds/dyre-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Dyre\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Fobber.json b/bgpranking/config/modules/bambenekconsulting_Fobber.json index 7063f1a..042a3e0 100644 --- a/bgpranking/config/modules/bambenekconsulting_Fobber.json +++ b/bgpranking/config/modules/bambenekconsulting_Fobber.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/fobber-iplist.txt", - "name": "Fobber", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Fobber", + "url": "http://osint.bambenekconsulting.com/feeds/fobber-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Fobber\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Fobber_NS.json b/bgpranking/config/modules/bambenekconsulting_Fobber_NS.json index e8e2400..5758889 100644 --- a/bgpranking/config/modules/bambenekconsulting_Fobber_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Fobber_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/fobber-nsiplist.txt", - "name": "Fobber_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Fobber_NS", + "url": "http://osint.bambenekconsulting.com/feeds/fobber-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Fobber\"" diff --git a/bgpranking/config/modules/bambenekconsulting_G01.json b/bgpranking/config/modules/bambenekconsulting_G01.json index 0690d5a..6925e8a 100644 --- a/bgpranking/config/modules/bambenekconsulting_G01.json +++ b/bgpranking/config/modules/bambenekconsulting_G01.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/g01-iplist.txt", - "name": "G01", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "G01", + "url": "http://osint.bambenekconsulting.com/feeds/g01-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_G01_NS.json b/bgpranking/config/modules/bambenekconsulting_G01_NS.json index 7421062..a986c23 100644 --- a/bgpranking/config/modules/bambenekconsulting_G01_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_G01_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/g01-nsiplist.txt", - "name": "G01_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "G01_NS", + "url": "http://osint.bambenekconsulting.com/feeds/g01-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Geodo.json b/bgpranking/config/modules/bambenekconsulting_Geodo.json index 3636ebb..2041941 100644 --- a/bgpranking/config/modules/bambenekconsulting_Geodo.json +++ b/bgpranking/config/modules/bambenekconsulting_Geodo.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt", - "name": "Geodo", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Geodo", + "url": "http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Geodo\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Geodo_NS.json b/bgpranking/config/modules/bambenekconsulting_Geodo_NS.json index 9b4684a..e17ff98 100644 --- a/bgpranking/config/modules/bambenekconsulting_Geodo_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Geodo_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/geodo-nsiplist.txt", - "name": "Geodo_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Geodo_NS", + "url": "http://osint.bambenekconsulting.com/feeds/geodo-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Geodo\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Gozi.json b/bgpranking/config/modules/bambenekconsulting_Gozi.json index 0942a3a..cae56ed 100644 --- a/bgpranking/config/modules/bambenekconsulting_Gozi.json +++ b/bgpranking/config/modules/bambenekconsulting_Gozi.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/gozi-iplist.txt", - "name": "Gozi", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Gozi", + "url": "http://osint.bambenekconsulting.com/feeds/gozi-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Gozi\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Gozi_NS.json b/bgpranking/config/modules/bambenekconsulting_Gozi_NS.json index fd25f80..b285e6e 100644 --- a/bgpranking/config/modules/bambenekconsulting_Gozi_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Gozi_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/gozi-nsiplist.txt", - "name": "Gozi_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Gozi_NS", + "url": "http://osint.bambenekconsulting.com/feeds/gozi-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Gozi\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Hesperbot.json b/bgpranking/config/modules/bambenekconsulting_Hesperbot.json index 9f5d590..7349a10 100644 --- a/bgpranking/config/modules/bambenekconsulting_Hesperbot.json +++ b/bgpranking/config/modules/bambenekconsulting_Hesperbot.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt", - "name": "Hesperbot", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Hesperbot", + "url": "http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:android=\"Hesperbot\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Hesperbot_NS.json b/bgpranking/config/modules/bambenekconsulting_Hesperbot_NS.json index e59fb3e..83a75a2 100644 --- a/bgpranking/config/modules/bambenekconsulting_Hesperbot_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Hesperbot_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/hesperbot-nsiplist.txt", - "name": "Hesperbot_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Hesperbot_NS", + "url": "http://osint.bambenekconsulting.com/feeds/hesperbot-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:android=\"Hesperbot\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Kraken.json b/bgpranking/config/modules/bambenekconsulting_Kraken.json index 8c301a9..862a4ac 100644 --- a/bgpranking/config/modules/bambenekconsulting_Kraken.json +++ b/bgpranking/config/modules/bambenekconsulting_Kraken.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/kraken-iplist.txt", - "name": "Kraken", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Kraken", + "url": "http://osint.bambenekconsulting.com/feeds/kraken-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Kraken\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Kraken_NS.json b/bgpranking/config/modules/bambenekconsulting_Kraken_NS.json index b26a3f6..9044353 100644 --- a/bgpranking/config/modules/bambenekconsulting_Kraken_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Kraken_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/kraken-nsiplist.txt", - "name": "Kraken_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Kraken_NS", + "url": "http://osint.bambenekconsulting.com/feeds/kraken-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Kraken\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Locky.json b/bgpranking/config/modules/bambenekconsulting_Locky.json index fa93769..e0f111b 100644 --- a/bgpranking/config/modules/bambenekconsulting_Locky.json +++ b/bgpranking/config/modules/bambenekconsulting_Locky.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/locky-iplist.txt", - "name": "Locky", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Locky", + "url": "http://osint.bambenekconsulting.com/feeds/locky-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"Locky\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Locky_NS.json b/bgpranking/config/modules/bambenekconsulting_Locky_NS.json index f8f842f..cdb5f13 100644 --- a/bgpranking/config/modules/bambenekconsulting_Locky_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Locky_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/locky-nsiplist.txt", - "name": "Locky_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Locky_NS", + "url": "http://osint.bambenekconsulting.com/feeds/locky-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"Locky\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Madmax.json b/bgpranking/config/modules/bambenekconsulting_Madmax.json index ac977ba..a9cb8af 100644 --- a/bgpranking/config/modules/bambenekconsulting_Madmax.json +++ b/bgpranking/config/modules/bambenekconsulting_Madmax.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/madmax-iplist.txt", - "name": "Madmax", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Madmax", + "url": "http://osint.bambenekconsulting.com/feeds/madmax-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Madmax\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Madmax_NS.json b/bgpranking/config/modules/bambenekconsulting_Madmax_NS.json index 58271d7..19b3cae 100644 --- a/bgpranking/config/modules/bambenekconsulting_Madmax_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Madmax_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/madmax-nsiplist.txt", - "name": "Madmax_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Madmax_NS", + "url": "http://osint.bambenekconsulting.com/feeds/madmax-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Madmax\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Matsnu.json b/bgpranking/config/modules/bambenekconsulting_Matsnu.json index d833a19..e8840a0 100644 --- a/bgpranking/config/modules/bambenekconsulting_Matsnu.json +++ b/bgpranking/config/modules/bambenekconsulting_Matsnu.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt", - "name": "Matsnu", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Matsnu", + "url": "http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Matsnu_NS.json b/bgpranking/config/modules/bambenekconsulting_Matsnu_NS.json index 02aba10..76ba41c 100644 --- a/bgpranking/config/modules/bambenekconsulting_Matsnu_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Matsnu_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/matsnu-nsiplist.txt", - "name": "Matsnu_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Matsnu_NS", + "url": "http://osint.bambenekconsulting.com/feeds/matsnu-nsiplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Mirai.json b/bgpranking/config/modules/bambenekconsulting_Mirai.json index 5f2fee5..65b8df5 100644 --- a/bgpranking/config/modules/bambenekconsulting_Mirai.json +++ b/bgpranking/config/modules/bambenekconsulting_Mirai.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/mirai-iplist.txt", - "name": "Mirai", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Mirai", + "url": "http://osint.bambenekconsulting.com/feeds/mirai-iplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:tool=\"Mirai\"", - "misp-galaxy:botnet=\"Mirai\"" + "misp-galaxy:botnet=\"Mirai\"", + "misp-galaxy:tool=\"Mirai\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Mirai_NS.json b/bgpranking/config/modules/bambenekconsulting_Mirai_NS.json index e0f4325..12553b7 100644 --- a/bgpranking/config/modules/bambenekconsulting_Mirai_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Mirai_NS.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/mirai-nsiplist.txt", - "name": "Mirai_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Mirai_NS", + "url": "http://osint.bambenekconsulting.com/feeds/mirai-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:tool=\"Mirai\"", - "misp-galaxy:botnet=\"Mirai\"" + "misp-galaxy:botnet=\"Mirai\"", + "misp-galaxy:tool=\"Mirai\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Murofet.json b/bgpranking/config/modules/bambenekconsulting_Murofet.json index bc7a083..226f226 100644 --- a/bgpranking/config/modules/bambenekconsulting_Murofet.json +++ b/bgpranking/config/modules/bambenekconsulting_Murofet.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/murofet-iplist.txt", - "name": "Murofet", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Murofet", + "url": "http://osint.bambenekconsulting.com/feeds/murofet-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Licat\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Murofet_NS.json b/bgpranking/config/modules/bambenekconsulting_Murofet_NS.json index 33a62ee..f334632 100644 --- a/bgpranking/config/modules/bambenekconsulting_Murofet_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Murofet_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/murofet-nsiplist.txt", - "name": "Murofet_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Murofet_NS", + "url": "http://osint.bambenekconsulting.com/feeds/murofet-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Licat\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Necurs.json b/bgpranking/config/modules/bambenekconsulting_Necurs.json index ce1d184..47c7b32 100644 --- a/bgpranking/config/modules/bambenekconsulting_Necurs.json +++ b/bgpranking/config/modules/bambenekconsulting_Necurs.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt", - "name": "Necurs", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Necurs", + "url": "http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Necurs\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Necurs_NS.json b/bgpranking/config/modules/bambenekconsulting_Necurs_NS.json index cd2b257..7d4d91f 100644 --- a/bgpranking/config/modules/bambenekconsulting_Necurs_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Necurs_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/necurs-nsiplist.txt", - "name": "Necurs_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Necurs_NS", + "url": "http://osint.bambenekconsulting.com/feeds/necurs-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Necurs\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Nymaim.json b/bgpranking/config/modules/bambenekconsulting_Nymaim.json index 455563b..a66278d 100644 --- a/bgpranking/config/modules/bambenekconsulting_Nymaim.json +++ b/bgpranking/config/modules/bambenekconsulting_Nymaim.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/nymaim-iplist.txt", - "name": "Nymaim", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Nymaim", + "url": "http://osint.bambenekconsulting.com/feeds/nymaim-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:tool=\"Nymaim\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Nymaim_NS.json b/bgpranking/config/modules/bambenekconsulting_Nymaim_NS.json index 4632a00..af37c63 100644 --- a/bgpranking/config/modules/bambenekconsulting_Nymaim_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Nymaim_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/nymaim-nsiplist.txt", - "name": "Nymaim_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Nymaim_NS", + "url": "http://osint.bambenekconsulting.com/feeds/nymaim-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:tool=\"Nymaim\"" diff --git a/bgpranking/config/modules/bambenekconsulting_P2P_GOZ.json b/bgpranking/config/modules/bambenekconsulting_P2P_GOZ.json index 57a89bc..8ab0698 100644 --- a/bgpranking/config/modules/bambenekconsulting_P2P_GOZ.json +++ b/bgpranking/config/modules/bambenekconsulting_P2P_GOZ.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt", - "name": "P2P_GOZ", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "P2P_GOZ", + "url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_P2P_GOZ_NS.json b/bgpranking/config/modules/bambenekconsulting_P2P_GOZ_NS.json index dce6b34..27f0180 100644 --- a/bgpranking/config/modules/bambenekconsulting_P2P_GOZ_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_P2P_GOZ_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-nsiplist.txt", - "name": "P2P_GOZ_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "P2P_GOZ_NS", + "url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_PT_GOZ_New_GOZ_NS.json b/bgpranking/config/modules/bambenekconsulting_PT_GOZ_New_GOZ_NS.json index 62dc7e5..3e1948d 100644 --- a/bgpranking/config/modules/bambenekconsulting_PT_GOZ_New_GOZ_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_PT_GOZ_New_GOZ_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ptgoz-nsiplist.txt", - "name": "PT_GOZ_/_New_GOZ_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "PT_GOZ_/_New_GOZ_NS", + "url": "http://osint.bambenekconsulting.com/feeds/ptgoz-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Padcrypt.json b/bgpranking/config/modules/bambenekconsulting_Padcrypt.json index 2ef7a4b..53101c6 100644 --- a/bgpranking/config/modules/bambenekconsulting_Padcrypt.json +++ b/bgpranking/config/modules/bambenekconsulting_Padcrypt.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/padcrypt-iplist.txt", - "name": "Padcrypt", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Padcrypt", + "url": "http://osint.bambenekconsulting.com/feeds/padcrypt-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"PadCrypt\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Padcrypt_NS.json b/bgpranking/config/modules/bambenekconsulting_Padcrypt_NS.json index 25269d9..a75b6c2 100644 --- a/bgpranking/config/modules/bambenekconsulting_Padcrypt_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Padcrypt_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/padcrypt-nsiplist.txt", - "name": "Padcrypt_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Padcrypt_NS", + "url": "http://osint.bambenekconsulting.com/feeds/padcrypt-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:ransomware=\"PadCrypt\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Pandabanker.json b/bgpranking/config/modules/bambenekconsulting_Pandabanker.json index 94805d1..08b8a54 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pandabanker.json +++ b/bgpranking/config/modules/bambenekconsulting_Pandabanker.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pandabanker-iplist.txt", - "name": "Pandabanker", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Pandabanker", + "url": "http://osint.bambenekconsulting.com/feeds/pandabanker-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Panda Banker\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Pandabanker_NS.json b/bgpranking/config/modules/bambenekconsulting_Pandabanker_NS.json index aff7aef..7d9a892 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pandabanker_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Pandabanker_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pandabanker-nsiplist.txt", - "name": "Pandabanker_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Pandabanker_NS", + "url": "http://osint.bambenekconsulting.com/feeds/pandabanker-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Panda Banker\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Pizd.json b/bgpranking/config/modules/bambenekconsulting_Pizd.json index 797a6c6..d79e51c 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pizd.json +++ b/bgpranking/config/modules/bambenekconsulting_Pizd.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pizd-iplist.txt", - "name": "Pizd", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Pizd", + "url": "http://osint.bambenekconsulting.com/feeds/pizd-iplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Pizd_NS.json b/bgpranking/config/modules/bambenekconsulting_Pizd_NS.json index 1398d1d..204aae2 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pizd_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Pizd_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pizd-nsiplist.txt", - "name": "Pizd_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Pizd_NS", + "url": "http://osint.bambenekconsulting.com/feeds/pizd-nsiplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Proslikefan.json b/bgpranking/config/modules/bambenekconsulting_Proslikefan.json index 6b82ada..f9e6cdb 100644 --- a/bgpranking/config/modules/bambenekconsulting_Proslikefan.json +++ b/bgpranking/config/modules/bambenekconsulting_Proslikefan.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/proslikefan-iplist.txt", - "name": "Proslikefan", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Proslikefan", + "url": "http://osint.bambenekconsulting.com/feeds/proslikefan-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Proslikefan_NS.json b/bgpranking/config/modules/bambenekconsulting_Proslikefan_NS.json index f4c9e15..4cc8058 100644 --- a/bgpranking/config/modules/bambenekconsulting_Proslikefan_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Proslikefan_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/proslikefan-nsiplist.txt", - "name": "Proslikefan_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Proslikefan_NS", + "url": "http://osint.bambenekconsulting.com/feeds/proslikefan-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Pushdo.json b/bgpranking/config/modules/bambenekconsulting_Pushdo.json index ac81f17..f5d11ed 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pushdo.json +++ b/bgpranking/config/modules/bambenekconsulting_Pushdo.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt", - "name": "Pushdo", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Pushdo", + "url": "http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Pushdo\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Pushdo_NS.json b/bgpranking/config/modules/bambenekconsulting_Pushdo_NS.json index 19b0e9b..6972707 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pushdo_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Pushdo_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pushdo-nsiplist.txt", - "name": "Pushdo_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Pushdo_NS", + "url": "http://osint.bambenekconsulting.com/feeds/pushdo-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:botnet=\"Pushdo\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Pykspa.json b/bgpranking/config/modules/bambenekconsulting_Pykspa.json index 82d11d5..d8d942c 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pykspa.json +++ b/bgpranking/config/modules/bambenekconsulting_Pykspa.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt", - "name": "Pykspa", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Pykspa", + "url": "http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt", "tags": [ "false-positive:risk=\"medium\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Pykspa_NS.json b/bgpranking/config/modules/bambenekconsulting_Pykspa_NS.json index 20d0237..198a16e 100644 --- a/bgpranking/config/modules/bambenekconsulting_Pykspa_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Pykspa_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/pykspa-nsiplist.txt", - "name": "Pykspa_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Pykspa_NS", + "url": "http://osint.bambenekconsulting.com/feeds/pykspa-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Qadars.json b/bgpranking/config/modules/bambenekconsulting_Qadars.json index 56d2561..ecd1f32 100644 --- a/bgpranking/config/modules/bambenekconsulting_Qadars.json +++ b/bgpranking/config/modules/bambenekconsulting_Qadars.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/qadars-iplist.txt", - "name": "Qadars", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Qadars", + "url": "http://osint.bambenekconsulting.com/feeds/qadars-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Qadars\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Qadars_NS.json b/bgpranking/config/modules/bambenekconsulting_Qadars_NS.json index 63f04b6..36105e7 100644 --- a/bgpranking/config/modules/bambenekconsulting_Qadars_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Qadars_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/qadars-nsiplist.txt", - "name": "Qadars_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Qadars_NS", + "url": "http://osint.bambenekconsulting.com/feeds/qadars-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Qadars\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Qakbot.json b/bgpranking/config/modules/bambenekconsulting_Qakbot.json index fe8819a..1d59924 100644 --- a/bgpranking/config/modules/bambenekconsulting_Qakbot.json +++ b/bgpranking/config/modules/bambenekconsulting_Qakbot.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt", - "name": "Qakbot", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Qakbot", + "url": "http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Akbot\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Qakbot_NS.json b/bgpranking/config/modules/bambenekconsulting_Qakbot_NS.json index bfdb65f..fa8df49 100644 --- a/bgpranking/config/modules/bambenekconsulting_Qakbot_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Qakbot_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/qakbot-nsiplist.txt", - "name": "Qakbot_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Qakbot_NS", + "url": "http://osint.bambenekconsulting.com/feeds/qakbot-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Akbot\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Ramdo.json b/bgpranking/config/modules/bambenekconsulting_Ramdo.json index 0551818..39af5a0 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ramdo.json +++ b/bgpranking/config/modules/bambenekconsulting_Ramdo.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ramdo-iplist.txt", - "name": "Ramdo", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ramdo", + "url": "http://osint.bambenekconsulting.com/feeds/ramdo-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Ramdo_NS.json b/bgpranking/config/modules/bambenekconsulting_Ramdo_NS.json index 2773ae3..7549558 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ramdo_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Ramdo_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ramdo-nsiplist.txt", - "name": "Ramdo_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ramdo_NS", + "url": "http://osint.bambenekconsulting.com/feeds/ramdo-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Ramnit.json b/bgpranking/config/modules/bambenekconsulting_Ramnit.json index d65eed3..6afa9ee 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ramnit.json +++ b/bgpranking/config/modules/bambenekconsulting_Ramnit.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt", - "name": "Ramnit", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ramnit", + "url": "http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:botnet=\"Ramnit\"", - "misp-galaxy:banker=\"Ramnit\"" + "misp-galaxy:banker=\"Ramnit\"", + "misp-galaxy:botnet=\"Ramnit\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Ramnit_NS.json b/bgpranking/config/modules/bambenekconsulting_Ramnit_NS.json index a453df4..28ae0ca 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ramnit_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Ramnit_NS.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ramnit-nsiplist.txt", - "name": "Ramnit_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ramnit_NS", + "url": "http://osint.bambenekconsulting.com/feeds/ramnit-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:botnet=\"Ramnit\"", - "misp-galaxy:banker=\"Ramnit\"" + "misp-galaxy:banker=\"Ramnit\"", + "misp-galaxy:botnet=\"Ramnit\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Ranbyus.json b/bgpranking/config/modules/bambenekconsulting_Ranbyus.json index c1304c2..5e3dbc1 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ranbyus.json +++ b/bgpranking/config/modules/bambenekconsulting_Ranbyus.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt", - "name": "Ranbyus", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ranbyus", + "url": "http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Ranbyus\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Ranbyus_NS.json b/bgpranking/config/modules/bambenekconsulting_Ranbyus_NS.json index 11ab814..366a65f 100644 --- a/bgpranking/config/modules/bambenekconsulting_Ranbyus_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Ranbyus_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/ranbyus-nsiplist.txt", - "name": "Ranbyus_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Ranbyus_NS", + "url": "http://osint.bambenekconsulting.com/feeds/ranbyus-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Ranbyus\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Shifu.json b/bgpranking/config/modules/bambenekconsulting_Shifu.json index ea98007..3b05cbe 100644 --- a/bgpranking/config/modules/bambenekconsulting_Shifu.json +++ b/bgpranking/config/modules/bambenekconsulting_Shifu.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/shifu-iplist.txt", - "name": "Shifu", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Shifu", + "url": "http://osint.bambenekconsulting.com/feeds/shifu-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:tool=\"Shifu\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Shifu_NS.json b/bgpranking/config/modules/bambenekconsulting_Shifu_NS.json index e386e51..05c9d53 100644 --- a/bgpranking/config/modules/bambenekconsulting_Shifu_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Shifu_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/shifu-nsiplist.txt", - "name": "Shifu_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Shifu_NS", + "url": "http://osint.bambenekconsulting.com/feeds/shifu-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:tool=\"Shifu\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Simda.json b/bgpranking/config/modules/bambenekconsulting_Simda.json index 6c769c1..a92a362 100644 --- a/bgpranking/config/modules/bambenekconsulting_Simda.json +++ b/bgpranking/config/modules/bambenekconsulting_Simda.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/simda-iplist.txt", - "name": "Simda", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Simda", + "url": "http://osint.bambenekconsulting.com/feeds/simda-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Simda\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Simda_NS.json b/bgpranking/config/modules/bambenekconsulting_Simda_NS.json index 7b91513..0aae9d1 100644 --- a/bgpranking/config/modules/bambenekconsulting_Simda_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Simda_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/simda-nsiplist.txt", - "name": "Simda_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Simda_NS", + "url": "http://osint.bambenekconsulting.com/feeds/simda-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Simda\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Sisron.json b/bgpranking/config/modules/bambenekconsulting_Sisron.json index 8127d19..13eb614 100644 --- a/bgpranking/config/modules/bambenekconsulting_Sisron.json +++ b/bgpranking/config/modules/bambenekconsulting_Sisron.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/sisron-iplist.txt", - "name": "Sisron", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Sisron", + "url": "http://osint.bambenekconsulting.com/feeds/sisron-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Sisron\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Sisron_NS.json b/bgpranking/config/modules/bambenekconsulting_Sisron_NS.json index 918abc0..deb721a 100644 --- a/bgpranking/config/modules/bambenekconsulting_Sisron_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Sisron_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/sisron-nsiplist.txt", - "name": "Sisron_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Sisron_NS", + "url": "http://osint.bambenekconsulting.com/feeds/sisron-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Sisron\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Sphinx.json b/bgpranking/config/modules/bambenekconsulting_Sphinx.json index b9bb299..ed0acea 100644 --- a/bgpranking/config/modules/bambenekconsulting_Sphinx.json +++ b/bgpranking/config/modules/bambenekconsulting_Sphinx.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/sphinx-iplist.txt", - "name": "Sphinx", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Sphinx", + "url": "http://osint.bambenekconsulting.com/feeds/sphinx-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Zeus Sphinx\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Sphinx_NS.json b/bgpranking/config/modules/bambenekconsulting_Sphinx_NS.json index 39fd7b3..bdcdcc2 100644 --- a/bgpranking/config/modules/bambenekconsulting_Sphinx_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Sphinx_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/sphinx-nsiplist.txt", - "name": "Sphinx_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Sphinx_NS", + "url": "http://osint.bambenekconsulting.com/feeds/sphinx-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"Zeus Sphinx\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Suppobox.json b/bgpranking/config/modules/bambenekconsulting_Suppobox.json index 7454889..3f2e41a 100644 --- a/bgpranking/config/modules/bambenekconsulting_Suppobox.json +++ b/bgpranking/config/modules/bambenekconsulting_Suppobox.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt", - "name": "Suppobox", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Suppobox", + "url": "http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Suppobox_NS.json b/bgpranking/config/modules/bambenekconsulting_Suppobox_NS.json index daab3a2..2f2c5b8 100644 --- a/bgpranking/config/modules/bambenekconsulting_Suppobox_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Suppobox_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/suppobox-nsiplist.txt", - "name": "Suppobox_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 1, + "name": "Suppobox_NS", + "url": "http://osint.bambenekconsulting.com/feeds/suppobox-nsiplist.txt", "tags": [ "false-positive:risk=\"high\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Symmi.json b/bgpranking/config/modules/bambenekconsulting_Symmi.json index 39248c4..ad503b5 100644 --- a/bgpranking/config/modules/bambenekconsulting_Symmi.json +++ b/bgpranking/config/modules/bambenekconsulting_Symmi.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt", - "name": "Symmi", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Symmi", + "url": "http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Tempedreve.json b/bgpranking/config/modules/bambenekconsulting_Tempedreve.json index 2386392..056f50f 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tempedreve.json +++ b/bgpranking/config/modules/bambenekconsulting_Tempedreve.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tempedreve-iplist.txt", - "name": "Tempedreve", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tempedreve", + "url": "http://osint.bambenekconsulting.com/feeds/tempedreve-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Tempedreve_NS.json b/bgpranking/config/modules/bambenekconsulting_Tempedreve_NS.json index feec328..45e5072 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tempedreve_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Tempedreve_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tempedreve-nsiplist.txt", - "name": "Tempedreve_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tempedreve_NS", + "url": "http://osint.bambenekconsulting.com/feeds/tempedreve-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker.json b/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker.json index be4db61..40143a4 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker.json +++ b/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt", - "name": "Tinba_/_TinyBanker", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tinba_/_TinyBanker", + "url": "http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Tinba\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker_NS.json b/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker_NS.json index e2a4fe0..405b3aa 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Tinba_TinyBanker_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tinba-nsiplist.txt", - "name": "Tinba_/_TinyBanker_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tinba_/_TinyBanker_NS", + "url": "http://osint.bambenekconsulting.com/feeds/tinba-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:tool=\"Tinba\"", diff --git a/bgpranking/config/modules/bambenekconsulting_Tinynuke.json b/bgpranking/config/modules/bambenekconsulting_Tinynuke.json index 0a0aff7..8a75a76 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tinynuke.json +++ b/bgpranking/config/modules/bambenekconsulting_Tinynuke.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tinynuke-iplist.txt", - "name": "Tinynuke", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tinynuke", + "url": "http://osint.bambenekconsulting.com/feeds/tinynuke-iplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"TinyNuke\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Tinynuke_NS.json b/bgpranking/config/modules/bambenekconsulting_Tinynuke_NS.json index 11b99e8..eec7e6a 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tinynuke_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Tinynuke_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tinynuke-nsiplist.txt", - "name": "Tinynuke_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Tinynuke_NS", + "url": "http://osint.bambenekconsulting.com/feeds/tinynuke-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", "misp-galaxy:banker=\"TinyNuke\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Tofsee.json b/bgpranking/config/modules/bambenekconsulting_Tofsee.json index c2957f6..ef477e4 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tofsee.json +++ b/bgpranking/config/modules/bambenekconsulting_Tofsee.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tofsee-iplist.txt", - "name": "Tofsee", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Tofsee", + "url": "http://osint.bambenekconsulting.com/feeds/tofsee-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Gheg\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Tofsee_NS.json b/bgpranking/config/modules/bambenekconsulting_Tofsee_NS.json index 285c657..2e81d34 100644 --- a/bgpranking/config/modules/bambenekconsulting_Tofsee_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Tofsee_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/tofsee-nsiplist.txt", - "name": "Tofsee_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Tofsee_NS", + "url": "http://osint.bambenekconsulting.com/feeds/tofsee-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Gheg\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Unknowndropper.json b/bgpranking/config/modules/bambenekconsulting_Unknowndropper.json index 995be09..2538d15 100644 --- a/bgpranking/config/modules/bambenekconsulting_Unknowndropper.json +++ b/bgpranking/config/modules/bambenekconsulting_Unknowndropper.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-iplist.txt", - "name": "Unknowndropper", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Unknowndropper", + "url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Unknowndropper_NS.json b/bgpranking/config/modules/bambenekconsulting_Unknowndropper_NS.json index bc1a2c8..49be249 100644 --- a/bgpranking/config/modules/bambenekconsulting_Unknowndropper_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Unknowndropper_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-nsiplist.txt", - "name": "Unknowndropper_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Unknowndropper_NS", + "url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Unknownjs.json b/bgpranking/config/modules/bambenekconsulting_Unknownjs.json index 45d53ea..b316372 100644 --- a/bgpranking/config/modules/bambenekconsulting_Unknownjs.json +++ b/bgpranking/config/modules/bambenekconsulting_Unknownjs.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/unknownjs-iplist.txt", - "name": "Unknownjs", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Unknownjs", + "url": "http://osint.bambenekconsulting.com/feeds/unknownjs-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Unknownjs_NS.json b/bgpranking/config/modules/bambenekconsulting_Unknownjs_NS.json index f90b4cf..97a5bd9 100644 --- a/bgpranking/config/modules/bambenekconsulting_Unknownjs_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Unknownjs_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/unknownjs-nsiplist.txt", - "name": "Unknownjs_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Unknownjs_NS", + "url": "http://osint.bambenekconsulting.com/feeds/unknownjs-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Vawtrak.json b/bgpranking/config/modules/bambenekconsulting_Vawtrak.json index 0ddcc02..5fe3a83 100644 --- a/bgpranking/config/modules/bambenekconsulting_Vawtrak.json +++ b/bgpranking/config/modules/bambenekconsulting_Vawtrak.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/vawtrak-iplist.txt", - "name": "Vawtrak", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Vawtrak", + "url": "http://osint.bambenekconsulting.com/feeds/vawtrak-iplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:banker=\"Vawtrak\"", - "misp-galaxy:tool=\"Vawtrak\"" + "misp-galaxy:tool=\"Vawtrak\"", + "misp-galaxy:banker=\"Vawtrak\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Vawtrak_NS.json b/bgpranking/config/modules/bambenekconsulting_Vawtrak_NS.json index 0ab6a54..1477e38 100644 --- a/bgpranking/config/modules/bambenekconsulting_Vawtrak_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Vawtrak_NS.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/vawtrak-nsiplist.txt", - "name": "Vawtrak_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Vawtrak_NS", + "url": "http://osint.bambenekconsulting.com/feeds/vawtrak-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:banker=\"Vawtrak\"", - "misp-galaxy:tool=\"Vawtrak\"" + "misp-galaxy:tool=\"Vawtrak\"", + "misp-galaxy:banker=\"Vawtrak\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Vidro.json b/bgpranking/config/modules/bambenekconsulting_Vidro.json index 7161e92..1283818 100644 --- a/bgpranking/config/modules/bambenekconsulting_Vidro.json +++ b/bgpranking/config/modules/bambenekconsulting_Vidro.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/vidro-iplist.txt", - "name": "Vidro", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Vidro", + "url": "http://osint.bambenekconsulting.com/feeds/vidro-iplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Vidro_NS.json b/bgpranking/config/modules/bambenekconsulting_Vidro_NS.json index ddd2949..1f75231 100644 --- a/bgpranking/config/modules/bambenekconsulting_Vidro_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Vidro_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/vidro-nsiplist.txt", - "name": "Vidro_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Vidro_NS", + "url": "http://osint.bambenekconsulting.com/feeds/vidro-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"" ] diff --git a/bgpranking/config/modules/bambenekconsulting_Virut.json b/bgpranking/config/modules/bambenekconsulting_Virut.json index 815b765..40adcc2 100644 --- a/bgpranking/config/modules/bambenekconsulting_Virut.json +++ b/bgpranking/config/modules/bambenekconsulting_Virut.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/virut-iplist.txt", - "name": "Virut", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Virut", + "url": "http://osint.bambenekconsulting.com/feeds/virut-iplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Virut\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Virut_NS.json b/bgpranking/config/modules/bambenekconsulting_Virut_NS.json index 9634d79..487ad65 100644 --- a/bgpranking/config/modules/bambenekconsulting_Virut_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Virut_NS.json @@ -1,9 +1,9 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/virut-nsiplist.txt", - "name": "Virut_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 3, + "name": "Virut_NS", + "url": "http://osint.bambenekconsulting.com/feeds/virut-nsiplist.txt", "tags": [ "false-positive:risk=\"medium\"", "misp-galaxy:botnet=\"Virut\"" diff --git a/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive.json b/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive.json index af8b9be..58788c7 100644 --- a/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive.json +++ b/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt", - "name": "Volatile_Cedar_/_Explosive", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Volatile_Cedar_/_Explosive", + "url": "http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:tool=\"Explosive\"", - "misp-galaxy:threat-actor=\"Volatile Cedar\"" + "misp-galaxy:threat-actor=\"Volatile Cedar\"", + "misp-galaxy:tool=\"Explosive\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive_NS.json b/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive_NS.json index 41c52fc..6e262f8 100644 --- a/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive_NS.json +++ b/bgpranking/config/modules/bambenekconsulting_Volatile_Cedar_Explosive_NS.json @@ -1,12 +1,12 @@ { - "url": "http://osint.bambenekconsulting.com/feeds/volatile-nsiplist.txt", - "name": "Volatile_Cedar_/_Explosive_NS", "vendor": "bambenekconsulting", - "impact": 3, "parser": ".parsers.bambenekconsulting", + "impact": 5, + "name": "Volatile_Cedar_/_Explosive_NS", + "url": "http://osint.bambenekconsulting.com/feeds/volatile-nsiplist.txt", "tags": [ "false-positive:risk=\"low\"", - "misp-galaxy:tool=\"Explosive\"", - "misp-galaxy:threat-actor=\"Volatile Cedar\"" + "misp-galaxy:threat-actor=\"Volatile Cedar\"", + "misp-galaxy:tool=\"Explosive\"" ] } diff --git a/bgpranking/config/modules/bambenekconsulting_feeds.py b/bgpranking/config/modules/bambenekconsulting_feeds.py index 4c8e1de..bc2f03d 100644 --- a/bgpranking/config/modules/bambenekconsulting_feeds.py +++ b/bgpranking/config/modules/bambenekconsulting_feeds.py @@ -28,14 +28,17 @@ def get_paths(): root = 'http://osint.bambenekconsulting.com' r = requests.get(f'{root}/feeds/') soup = BeautifulSoup(r.text, 'html.parser') - to_return = [] for entry in soup.find_all('p'): + config = {'vendor': 'bambenekconsulting', 'parser': '.parsers.bambenekconsulting'} if 'FP Risk: Low' in str(entry): tags = ['false-positive:risk="low"'] + config['impact'] = 5 if 'FP Risk: Medium' in str(entry): tags = ['false-positive:risk="medium"'] + config['impact'] = 3 if 'FP Risk: High' in str(entry): tags = ['false-positive:risk="high"'] + config['impact'] = 1 name = entry.b.string tags += find_tags(name) if name: @@ -44,16 +47,14 @@ def get_paths(): path = link.get('href') if link.get('href').endswith('nsiplist.txt'): name = f'{name}_NS' - to_return.append((name, f'{root}{path}', tags)) - return to_return + config['name'] = name.replace(' ', '_') + config['url'] = f'{root}{path}' + config['tags'] = tags + yield config -def make_config(entry): - name = entry[0].replace(' ', '_') - config = {'url': entry[1], 'name': name, 'vendor': 'bambenekconsulting', - 'impact': 3, 'parser': '.parsers.bambenekconsulting'} - config['tags'] = entry[2] - filename = re.sub('[^0-9a-zA-Z]+', '_', name) +def make_config(config): + filename = re.sub('[^0-9a-zA-Z]+', '_', config['name']) with open(f'bambenekconsulting_{filename}.json', 'w') as f: json.dump(config, f, indent=2)