MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity
473 Commits
3 Branches
47 Tags
764 MiB
Commit Graph

275 Commits (bcbb62d73435411a2fef40a522e9e0bfa8739215)

Author SHA1 Message Date
Sascha Rommelfangen b6e5123609
duplicate removed 2020-03-27 04:04:02 +01:00
Sascha Rommelfangen c3cdd6b274
added info-coronavirus.be 2020-03-26 16:05:09 +01:00
Andras Iklody 93ee083d72
update to the covid list 2020-03-26 14:27:59 +01:00
Christophe Vandeplas 035a6c8406 chg: [covid] added Portugal and Belgium 2020-03-26 10:59:18 +01:00
iglocska 00b6fafdff
new: added covid warninglist 2020-03-26 05:59:12 +01:00
Alexandre Dulaunoy 192d112728
chg: [tranco] updated to the latest version 2020-03-05 13:33:15 +01:00
iglocska c501dc5e71
new: added common warninglists 2020-02-26 10:52:09 +01:00
Alexandre Dulaunoy 659264240a
chg: [office365] updated to the latest version 2020-02-10 11:24:09 +01:00
Alexandre Dulaunoy b5a1b192bf
chg: [cloudflare] updated to the latest version 2020-02-10 11:20:16 +01:00
Alexandre Dulaunoy e504b9aaa7
chg: [aws] updated 2020-02-10 11:19:06 +01:00
GlennHD 467c1b0a95
Create list.json 2020-02-03 01:04:53 -06:00
Bart ff12879d94
Update list.json 
Adds localizaip domains.
 2020-02-02 21:10:42 +01:00
Houston e1859dca76
Added domain cutt.ly 2020-02-01 22:18:30 -06:00
StefanKelm 10b1ed7187
Update list.json 
merky.de
 2020-01-31 14:34:30 +01:00
David J f97ffb4ab9
Added windowsupdate.com domain 
I received false positives and detections for this domain. Thought it should added.
 2020-01-23 11:00:22 -06:00
Bart 7b1fb4719e
Update list.json 
Adds ipv6-test
 2020-01-21 19:19:41 +01:00
David André e5a5ac576b
Added domains using Azuredns-prd.info as Nameserver 
azuredns-prd.info is verified as being Microsoft owned and operated for some Azure related domains
 2020-01-13 12:31:43 +01:00
Trey Darley 20add1b22a add Tranco warning list (https://tranco-list.eu/) 2020-01-10 15:28:29 +01:00
Bart edcd8244a8
Update list.json 
Bump version number, add/edit domains.
 2020-01-09 21:40:28 +01:00
Bart 8a7c21452c
Update list.json 
Add Extreme IP.
 2020-01-06 19:36:34 +01:00
Alexandre Dulaunoy 260171d89b
chg: [cloudflare] updated 2019-12-12 07:47:39 +01:00
Alexandre Dulaunoy da9fb56f7e
Merge branch 'master' of github.com:MISP/misp-warninglists 2019-12-12 07:46:13 +01:00
Alexandre Dulaunoy 6351521254
chg: [office365] IP addresses and domains updated 2019-12-12 07:45:48 +01:00
Ԝеѕ 1e654dca9d
add sinkhole IP 
https://dns.google.com/query?name=sinkhole.dynu.net
https://dns.google.com/query?name=a.sinkhole.yourtrap.com&type=A&dnssec=true
 2019-11-12 16:15:51 -05:00
Bart cca1f833ad
Add domain 2019-11-10 22:46:40 +01:00
Bart 5758200902
Add sndbox 2019-11-08 20:20:25 +01:00
Ԝеѕ 3789dbf107
Add additional Sinkhole IPs 
https://github.com/brakmic/Sinkholes/pull/10/files 
https://github.com/brakmic/Sinkholes/pull/12/files 
https://github.com/grettir/malware-sinkholes/pull/2/files
 2019-11-08 01:43:53 -05:00
Alex Williams 8bae4eaec9
Fixed typo in akamai list description 2019-11-04 16:35:20 +00:00
Bart 5aba6bb296
Update list.json 
Add some systems.
 2019-10-31 19:52:16 +01:00
Jean-Louis Huynen cb3be69184
chg: [wikimedia] jq all the things 2019-09-12 11:12:32 +02:00
Jean-Louis Huynen 622bd3510e
add: [wikimedia] adds a warning list for wikimedia infrastructure. 2019-09-12 11:09:16 +02:00
Daniel Roethlisberger bb322b46e1 Remove erroneous space character and bump version 2019-08-09 10:39:22 +02:00
Alexandre Dulaunoy 554360add3
chg: [university_domains] updated to the latest version 2019-07-25 08:14:07 +02:00
Alexandre Dulaunoy f7255b53a8
chg: [disposable] updated to the latest version 2019-07-24 21:48:15 +02:00
Alexandre Dulaunoy 81e52bd18f
chg: [vpn] IP addresses updated 2019-07-24 21:45:59 +02:00
Alexandre Dulaunoy b5d4ba91a5
chg: [mozilla] CA list updated 2019-07-24 21:42:55 +02:00
elhoim 1183e52389 Added list for Googlebot crawler IP ranges 2019-07-24 17:37:35 +02:00
elhoim 4b5c9d6dd4 Added list with Google gmail sending IPs 2019-07-24 17:36:13 +02:00
elhoim d22c6902b3 Added list and tool to generate list for cloudflare IP ranges. 2019-07-24 17:35:39 +02:00
github-pba eacd74ec67 Name change ING, new bank Mainzer Volksbank 2019-07-19 11:33:28 +02:00
Alexandre Dulaunoy 2b571d2af3
chg: [empty-hashes] empty ssdeep hashes added 2019-05-24 10:13:53 +02:00
Alexandre Dulaunoy a05fbf3480
chg: [dax30] updated and fixed 2019-05-09 10:23:41 +02:00
cgi1 57d0f89e1d
Update list.json 
Adding BMW
 2019-05-08 11:59:22 +02:00
cgi1 4b0913a361 dax30 inital version 2019-05-08 11:54:53 +02:00
Alexandre Dulaunoy 4d8ce3986f
Merge pull request #106 from SteveClement/tools 
fix: [alexa] The generator wants to decode things ;)
 2019-04-24 15:38:25 +02:00
Steve Clement 5d9e43bd82 chg: [moz500] Fix actual list. 2019-04-24 14:44:39 +09:00
Steve Clement 14a675a70a fix: [moz500] Fix the confusion about Moz.com and Mozilla.com 2019-04-24 14:42:41 +09:00
Steve Clement a5a3567733 chg: [alexa] Updated with the script in tools 2019-04-24 10:55:44 +09:00
Steve Clement 190312cf0f chg: [moz500] Added Pages too. Updated list 2019-04-24 10:36:22 +09:00
Steve Clement f41f976ce6 chg: [moz500] Added info how to regenerate, added provisional urls/files 
to topPages.
 2019-04-24 10:23:40 +09:00
Steve Clement 9e0b2ebc75 new: [list] Added Mozilla Top 500 domains 2019-04-24 09:45:56 +09:00
Alexandre Dulaunoy f24f97fe87
chg: [security-provider-blogpost] version updated 2019-04-21 16:27:25 +02:00
Olivier BERT 65a32242ae Removed pastebin.com, as it is not a security provider. 
It is often used by malware to download configuration or payloads.
 2019-04-15 13:31:15 +02:00
Dario Lombardo 910db07435
Remove wrong line from vpn-ipv4. 2019-04-11 10:14:29 +02:00
zMathieu edaea7c3a6
Transform URL to domains for few entries 
Remove / or http for some domains.
 2019-04-08 15:45:26 +02:00
Vincent Brillault af7e5a188c
CAs: Fix final new line in json 2019-03-29 16:57:54 +01:00
Vincent Brillault d4e749c3e6
CAs: Fix json indentation (2 spaces, not 4) 2019-03-29 16:55:34 +01:00
Vincent Brillault a1c0e83bd4
Add warning lists based on Mozilla's trusted CA and Intermediates 2019-03-29 16:23:22 +01:00
Raphaël Vinot db8313a531 fix: Flienames of new warning lists 2019-03-25 11:34:15 +01:00
Alexandre Dulaunoy 48a5e32d50
new: [disposal-email] added 2019-03-24 12:02:30 +01:00
Alexandre Dulaunoy 5ed5403157
new: [VPN] lists of common VPN IPv4 and IPv6 addresses added 
Source of the IPv4/IPv6 is https://github.com/ejrv/VPNs
 2019-03-24 11:17:59 +01:00
Liviu Valsan d0941e0418 Make sure that matching attributes are consistent for lists that include domains 2019-03-15 11:21:35 +01:00
Faber ea0968bd5e updated office 365 file names, changed string to substring, and changed lists.json to list.json 2019-03-11 20:56:19 -04:00
Alexandre Dulaunoy 97a951de82
chg: [o365 ip] title of the warning list changed 2019-03-10 09:30:03 +01:00
Alexandre Dulaunoy 6e97b8bf8a
chg: [o365] separate Microsoft Office 365 lists (hostname and IP addresses) 2019-03-10 09:27:12 +01:00
Alexandre Dulaunoy 37bf8ca5f2
chg: [o365] jq all the things 2019-03-10 09:13:37 +01:00
Alexandre Dulaunoy 0cc3ad9d82
Merge branch 'master' of https://github.com/kx499/misp-warninglists into kx499-master 2019-03-10 09:13:03 +01:00
Faber 91d77374ff updated MS O365 script to handle json and updated list.json 2019-03-09 19:43:13 -05:00
Alexandre Dulaunoy 5db8316e93
chg: [alexa] updated to the latest version (seems to be back) 2019-03-09 17:25:02 +01:00
Alexandre Dulaunoy cf4819fb48
chg: [cisco/umbrella top list] updated to the latest version 2019-03-09 17:23:13 +01:00
Alexandre Dulaunoy 64139ec29f
chg: [amazon-aws] updated to the latest version available 2019-03-09 17:18:57 +01:00
Alexandre Dulaunoy 882580e90c
chg: [akamai] jq everything 2019-03-09 17:10:07 +01:00
Faber b6fed81a87 adding akamai warning list 2019-03-09 10:56:15 -05:00
Alexandre Dulaunoy d24febd23c
Merge pull request #93 from ater49/master 
Adding university domains warninglist
 2019-03-01 22:43:14 +01:00
ater49 8fb2126255 Correction of duplicate 2019-03-01 22:28:35 +01:00
ater49 2e776cec5d Adding university domains warninglist from issue #38 2019-03-01 18:47:05 +01:00
Alexandre Dulaunoy 68f97da4d9
Merge pull request #91 from ater49/master 
Adding CRL Whistelist (Issue #83)
 2019-03-01 13:05:49 +01:00
ater49 78b88a0b43 Modifying type from string to substring 2019-03-01 12:59:32 +01:00
ater49 9301f73b71 Modifying version number to int 2019-03-01 12:53:57 +01:00
ater49 f3bf7a634d Correction for non-unique values in json 2019-03-01 12:24:56 +01:00
ater49 7bca524be2 Adding CRL Whistelist (Issue #83) 2019-03-01 09:40:32 +01:00
Alexandre Dulaunoy 8b7f943dd2
Merge pull request #90 from ater49/master 
Adding cape.contextis.com in sandbox warninglist
 2019-02-28 20:38:59 +01:00
ater49 7254758919 JQing all the things 2019-02-27 08:19:20 +01:00
ater49 6f3989cb17 Adding "cape.contextis.com" to sandbox warninglists. 2019-02-27 08:17:27 +01:00
Andras Iklody 21c3f2cd98
Merge pull request #89 from robertnixon2003/master 
Updated Cisco warninglist
 2018-12-17 18:54:01 +01:00
Robert Nixon 427e224914
Added type 2018-12-17 11:06:30 -05:00
Robert Nixon e7ee0fef51
Fixed with jq all the things 2018-12-17 10:58:03 -05:00
Robert Nixon b34c832fcb
Add files via upload 2018-12-17 10:54:23 -05:00
Robert Nixon 409047475a
Update list.json 2018-12-17 10:52:13 -05:00
Robert Nixon 371f1bf6d4
Create list.json 2018-12-17 10:50:52 -05:00
Robert Nixon 92cdd668ab
Delete list.json 2018-12-17 10:49:15 -05:00
Bjoern Mainz e3ff169a27
added the shortener of the german state rlp 
added the shortener of the german state rhineland-palatinate (rlp)
 2018-11-19 16:04:09 +01:00
StefanKelm 9b238dc531
more german bank sites 2018-11-16 14:30:04 +01:00
Alexandre Dulaunoy 9f034b34cb
chg: [public-dns-v6] cloudflare dns added 2018-11-14 20:57:16 +01:00
Alexandre Dulaunoy b06e087893
chg: [public-dns-v4] cloudflare recursive dns added 2018-11-14 20:55:57 +01:00
Alexandre Dulaunoy 3027a8a049
chg: [amazon-aws] updated to the recent version 2018-11-09 08:11:05 +01:00
Matteo Lodi e4e919b584 fixed value in ovh-cluster and added new url shortener 2018-11-07 10:59:31 +01:00
Liviu Valsan f308245af8 Removing imgur.com from the list of known security providers/vendors blog domains 2018-11-06 13:53:23 +01:00
Alexandre Dulaunoy 0bd8f8d161
Merge pull request #82 from robertnixon2003/master 
Updated Cisco Top 1000 List
 2018-10-12 16:40:11 +02:00
Robert Nixon 593ed90418
Updated list "version": 20181012 2018-10-12 10:03:21 -04:00