MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity
628 Commits
3 Branches
46 Tags
764 MiB
Commit Graph

379 Commits (63dd0c6cbe2cb484981bfec105d5faa250b8f986)

Author SHA1 Message Date
Alexandre Dulaunoy 63dd0c6cbe
Merge pull request #197 from drewm27/main 
Two more sinkholes from bitsight.com that are in use
 2021-12-02 20:07:30 +01:00
Drew Middlesworth 59d9617a4c Two more sinkholes from bitsight.com that are in use 2021-12-02 09:28:09 -08:00
Daniele Cantarini ea4105b5ee
incorrect regex update 
As described in issue #195 the regex "/((?:\\+|00)61)?1(3|8)00975707|08|09|10|11/g" should be corrected in "/((?:\\+|00)61)?1(3|8)00975707(08|09|10|11)/g"
 2021-11-30 10:36:19 +01:00
Alexandre Dulaunoy 3637925e8f
chg: [warning-lists] updated 2021-11-19 10:58:42 +01:00
Alexandre Dulaunoy fad9f6d675
Merge pull request #194 from drewm27/main 
Additional sinkholes found for shadowserver and looking up neighbor IP ranges for sinkhole DNS names
 2021-11-18 15:31:50 +01:00
Drew Middlesworth 7b26dc4489 sinkhole.fitsec.com revese DNS 2021-11-17 13:54:58 -08:00
Drew Middlesworth 77de13eac0 Reverse lookup of this IP shows sinkhole.hyas.com. 2021-11-17 13:50:10 -08:00
Drew Middlesworth c65df599a3 This range all has reverse DNS lookup info pointing to sinkholed.by.zinkhole.org. 2021-11-17 13:46:58 -08:00
Drew Middlesworth 48465b733e Combine cert.pl range, a significant number of these IPs revese lookup to sinkhole.cert.pl. 2021-11-17 13:42:33 -08:00
Drew Middlesworth 09f0c14794 5 of the hosts in this range are also shadowserver sinkholes according to their reverse DNS 2021-11-17 12:56:17 -08:00
Drew Middlesworth b50769586d Reverse looking up all these addresses in this range mention sinkhole 2021-11-17 12:50:05 -08:00
Drew Middlesworth 69460b61d1 Added sinkhole used for abuseat.org and spamhaus 2021-11-17 09:50:30 -08:00
Alexandre Dulaunoy ea53651d3d
chg: [warning-lists] updated 2021-10-28 11:45:21 +02:00
Drew Middlesworth 48e49f6f99 Fix order 2021-10-27 15:09:36 -07:00
Drew Middlesworth 3e81a6e376 New sinkholes detected from work with riskrecon.com and other security sites. Running curl on any of these IPs pretty well shows they are sinkholes 2021-10-27 10:45:45 -07:00
Alexandre Dulaunoy 27fb7a6a44
chg: [lists] updated 2021-10-05 15:37:06 +02:00
Alexandre Dulaunoy 477531af06
chg: [lists] updated 2021-09-30 14:19:26 +02:00
Alexandre Dulaunoy 35b1be4789
chg: [warning-lists] updated 2021-09-23 11:10:27 +02:00
Alexandre Dulaunoy 5b792f577f
chg: [warning-lists] updated to the latest version 2021-09-17 15:27:37 +02:00
Jakub Onderka 5687ebf976 new: Include dnscrypt-resolvers IP addresses to public-dns lists 2021-09-15 11:44:51 +02:00
Alexandre Dulaunoy 037ad1a8fa
chg: [warning-lists] updated to the latest version 2021-08-30 16:00:10 +02:00
Alexandre Dulaunoy e0cfdf97b9
chg: [warning-lists] updated 2021-08-17 15:17:57 +02:00
Alexandre Dulaunoy ab5ea4ab14
chg: [warning-lists] updated 2021-07-31 09:51:18 +02:00
Alexandre Dulaunoy 9aa99012c7
chg: [warning-lists] updated 2021-07-19 22:51:39 +02:00
Alexandre Dulaunoy 0dac22e317
chg: [warning-lists] updated to the latest version 2021-07-13 09:23:11 +02:00
Alexandre Dulaunoy 9ca0e09801
fix: [public-dns] 9.9.9.9 added 2021-07-01 17:35:15 +02:00
Alexandre Dulaunoy bc7ad438a5
chg: [warning-lists] updated 2021-06-30 16:16:16 +02:00
Alexandre Dulaunoy a219c925ec
chg: [dynamic-dns] jq all the things 2021-06-29 11:44:03 +02:00
Alexandre Dulaunoy 20018b2d34
Merge branch 'patch-2' of https://github.com/ekamioka/misp-warninglists into ekamioka-patch-2 2021-06-29 11:43:14 +02:00
Jakub Onderka 00d5e40ac1 new: List of known SMTP receiving IP addresses 2021-06-14 23:26:44 +02:00
Jakub Onderka e7401c9cbe new: List of known SMTP sending IP ranges 2021-06-14 23:09:39 +02:00
Alexandre Dulaunoy 6a454c984b
chg: [update] update of all the warning-lists 2021-06-14 11:03:34 +02:00
Jakub Onderka 6c9eff2dcc new: Generator for Akamai 2021-06-13 15:48:55 +02:00
Jakub Onderka 98f7390e88 chg: [cidr] Consolidate CIDR networks 2021-06-13 14:54:48 +02:00
Alexandre Dulaunoy 0c8d517366
Merge pull request #188 from JakubOnderka/office365-cn 
chg: [microsoft-office365-cn] Update to latest version
 2021-06-13 07:36:08 +02:00
Jakub Onderka 7dfdb1dbaf chg: [microsoft-office365-cn] Update to latest version 2021-06-12 18:38:05 +02:00
ekamioka d7fa29e35a
add more dynamic DNS domains 2021-06-12 11:30:39 -03:00
Jakub Onderka d66a51e537 new: [crl] Genreate domains and IPs directly from Mozilla intermediate list 2021-06-12 11:28:13 +02:00
Jakub Onderka f0f7b08c15 new: [apple] IP ranges assigned to Apple 2021-06-10 18:05:01 +02:00
Jakub Onderka 8f2691535b fix: [mozilla-IntermediateCA] Typo 2021-06-10 17:57:35 +02:00
Jakub Onderka 7290956691 chg: [ovh-cluster] Change list typo to cidr 2021-06-10 17:37:35 +02:00
Jakub Onderka c9320d8ca9 new: [google-gmail-sending-ips] Add generator and update to latest version 2021-06-10 16:26:26 +02:00
Jakub Onderka 14ee657daf new: [google-gcp] Add generator and update to latest version 2021-06-10 16:07:29 +02:00
Jakub Onderka a6c3455944 new: [azure] List for Azure China, Germany and US Gov cloud 2021-06-10 11:15:32 +02:00
Jakub Onderka cdd8adc772 fix: [google-gmail-sending-ips] typo 2021-06-10 10:39:14 +02:00
Jakub Onderka 104bf6883f new: [second-level-tlds] Add generator and update to latest version 2021-06-10 10:36:57 +02:00
Jakub Onderka 66a92ab133 fix: [stackpath] List was empty 2021-06-10 10:13:12 +02:00
Jakub Onderka aee9919ac4 fix: [moz] Moz is not Mozilla 2021-06-10 10:02:20 +02:00
Jakub Onderka 18abc2bf9c chg: [rfc] Normalize RFC lists description 2021-06-10 09:59:04 +02:00
Jakub Onderka 8a2c3dc760 fix: [publicdns] IP addresses should be cidr 2021-06-10 09:59:04 +02:00