Compare commits
4 Commits
Author | SHA1 | Date |
---|---|---|
Raphaël Vinot | aa7741710e | |
Raphaël Vinot | 5faab0337b | |
Steve Clement | 36688e85c1 | |
dependabot[bot] | 998cd95370 |
|
@ -292,11 +292,11 @@
|
|||
},
|
||||
"jinja2": {
|
||||
"hashes": [
|
||||
"sha256:74320bb91f31270f9551d46522e33af46a80c3d619f4a4bf42b3164d30b5911f",
|
||||
"sha256:9fe95f19286cfefaa917656583d020be14e7859c6b0252588391e47db34527de"
|
||||
"sha256:03e47ad063331dd6a3f04a43eddca8a966a26ba0c5b7207a9a9e4e08f1b29419",
|
||||
"sha256:a6d58433de0ae800347cab1fa3043cebbabe8baa9d29e668f1c768cb87a333c6"
|
||||
],
|
||||
"index": "pypi",
|
||||
"version": "==2.10.3"
|
||||
"version": "==2.11.3"
|
||||
},
|
||||
"markupsafe": {
|
||||
"hashes": [
|
||||
|
@ -480,10 +480,10 @@
|
|||
},
|
||||
"soupsieve": {
|
||||
"hashes": [
|
||||
"sha256:407fa1e8eb3458d1b5614df51d9651a1180ea5fedf07feb46e45d7e25e6d6cdd",
|
||||
"sha256:d3a5ea5b350423f47d07639f74475afedad48cf41c0ad7a82ca13a3928af34f6"
|
||||
"sha256:052774848f448cf19c7e959adf5566904d525f33a3f8b6ba6f6f8f26ec7de0cc",
|
||||
"sha256:c2c1c2d44f158cdbddab7824a9af8c4f83c76b1e23e049479aa432feb6c4c23b"
|
||||
],
|
||||
"version": "==2.2"
|
||||
"version": "==2.2.1"
|
||||
},
|
||||
"typing-extensions": {
|
||||
"hashes": [
|
||||
|
|
|
@ -21,7 +21,7 @@ class ASNDescriptions():
|
|||
safe_create_dir(self.directory)
|
||||
self.archives = self.directory / 'archive'
|
||||
safe_create_dir(self.archives)
|
||||
self.url = 'http://www.cidr-report.org/as2.0/autnums.html'
|
||||
self.url = 'https://www.cidr-report.org/as2.0/autnums.html'
|
||||
|
||||
def __init_logger(self, loglevel):
|
||||
self.logger = logging.getLogger(f'{self.__class__.__name__}')
|
||||
|
|
|
@ -1,3 +1,3 @@
|
|||
{
|
||||
"ipasnhistory_url": "http://127.0.0.1:5176/"
|
||||
"ipasnhistory_url": "https://ipasnhistory.circl.lu/"
|
||||
}
|
||||
|
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bamital",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Bamital\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bamital_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bamital-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Bamital\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Banjori",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:banker=\"Banjori\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Banjori_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/banjori-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:banker=\"Banjori\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bebloh/URLZone",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Bebloh\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bebloh/URLZone_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bebloh-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Bebloh\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bedep",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Bedep\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Bedep_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/bedep-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Bedep\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Beebone",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Beebone\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Beebone_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/beebone-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Beebone\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Chinad",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Chinad_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/chinad-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Corebot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/corebot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Corebot\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Cryptolocker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"CryptoLocker\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Cryptolocker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/cl-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"CryptoLocker\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dircrypt",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"DirCrypt\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dircrypt_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dircrypt-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"DirCrypt\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dromedan",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dromedan_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dromedan-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dyre",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Dyre\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Dyre_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/dyre-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Dyre\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Fobber",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Fobber\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Fobber_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/fobber-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Fobber\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "G01",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "G01_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/g01-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Geodo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Geodo\"",
|
||||
"misp-galaxy:tool=\"Emotet\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Geodo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/geodo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Geodo\"",
|
||||
"misp-galaxy:tool=\"Emotet\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Gozi",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Gozi\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Gozi_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/gozi-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Gozi\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Hesperbot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:android=\"Hesperbot\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Hesperbot_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/hesperbot-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:android=\"Hesperbot\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Kraken",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Kraken\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Kraken_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/kraken-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Kraken\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Locky",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"Locky\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Locky_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/locky-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"Locky\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Madmax",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Madmax\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Madmax_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/madmax-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Madmax\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Matsnu",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Matsnu_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/matsnu-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Mirai",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Mirai\"",
|
||||
"misp-galaxy:tool=\"Mirai\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Mirai_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/mirai-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Mirai\"",
|
||||
"misp-galaxy:tool=\"Mirai\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Murofet",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Licat\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Murofet_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/murofet-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Licat\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Necurs",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Necurs\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Necurs_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/necurs-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Necurs\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Nymaim",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Nymaim\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Nymaim_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/nymaim-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Nymaim\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "P2P_GOZ",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "P2P_GOZ_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/p2pgoz-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,6 +0,0 @@
|
|||
{
|
||||
"url": "http://osint.bambenekconsulting.com/feeds//feeds/ptgoz-nsiplist.txt",
|
||||
"name": "PT_GOZ_/_New_GOZ",
|
||||
"vendor": "bambenekconsulting",
|
||||
"impact": 3
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "PT_GOZ_/_New_GOZ_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ptgoz-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Padcrypt",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"PadCrypt\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Padcrypt_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/padcrypt-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:ransomware=\"PadCrypt\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pandabanker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Panda Banker\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pandabanker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pandabanker-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Panda Banker\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Pizd",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Pizd_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pizd-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Proslikefan",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Proslikefan_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/proslikefan-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pushdo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Pushdo\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Pushdo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pushdo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:botnet=\"Pushdo\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Pykspa",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Pykspa_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/pykspa-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qadars",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Qadars\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qadars_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qadars-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Qadars\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qakbot",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Akbot\"",
|
||||
"misp-galaxy:banker=\"Qakbot\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Qakbot_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/qakbot-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Akbot\"",
|
||||
"misp-galaxy:banker=\"Qakbot\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramdo",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramdo_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramdo-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramnit",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ramnit\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ramnit_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ramnit-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ramnit\"",
|
||||
"misp-galaxy:botnet=\"Ramnit\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ranbyus",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ranbyus\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Ranbyus_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/ranbyus-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Ranbyus\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Shifu",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Shifu\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Shifu_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/shifu-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:tool=\"Shifu\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Simda",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Simda\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Simda_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/simda-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Simda\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sisron",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Sisron\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sisron_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sisron-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Sisron\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sphinx",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Zeus Sphinx\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Sphinx_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/sphinx-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"Zeus Sphinx\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Suppobox",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 1,
|
||||
"name": "Suppobox_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/suppobox-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"high\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Symmi",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tempedreve",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tempedreve_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tempedreve-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinba_/_TinyBanker",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Tinba\"",
|
||||
"misp-galaxy:banker=\"Tinba\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinba_/_TinyBanker_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinba-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Tinba\"",
|
||||
"misp-galaxy:banker=\"Tinba\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinynuke",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"TinyNuke\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Tinynuke_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tinynuke-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:banker=\"TinyNuke\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Tofsee",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Gheg\""
|
||||
]
|
||||
}
|
|
@ -1,11 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 3,
|
||||
"name": "Tofsee_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/tofsee-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"medium\"",
|
||||
"misp-galaxy:botnet=\"Gheg\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknowndropper",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknowndropper_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknowndropper-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknownjs",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,10 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Unknownjs_NS",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/unknownjs-nsiplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\""
|
||||
]
|
||||
}
|
|
@ -1,12 +0,0 @@
|
|||
{
|
||||
"vendor": "bambenekconsulting",
|
||||
"parser": ".parsers.bambenekconsulting",
|
||||
"impact": 5,
|
||||
"name": "Vawtrak",
|
||||
"url": "http://osint.bambenekconsulting.com/feeds/vawtrak-iplist.txt",
|
||||
"tags": [
|
||||
"false-positive:risk=\"low\"",
|
||||
"misp-galaxy:tool=\"Vawtrak\"",
|
||||
"misp-galaxy:banker=\"Vawtrak\""
|
||||
]
|
||||
}
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue