misp-warninglists/lists/whats-my-ip/list.json

248 lines
5.0 KiB
JSON

{
"description": "Event contains one or more entries of known 'what's my ip' domains",
"list": [
"2ip.ru",
"2ip.tools",
"aboutmyip.com",
"api.ipify.org",
"api.myip.com",
"api.wipmania.com",
"bearsmyip.com",
"bot.whatismyipaddress.com",
"check-my-ip.net",
"checkip-waw.dyndns.com",
"checkip.amazonaws.com",
"checkip.dns.he.net",
"checkip.dyndns.com",
"checkip.dyndns.es",
"checkip.dyndns.org",
"checkip.narak.com",
"checkmyip.com",
"cmyip.com",
"cmyip.net",
"crymyip.com",
"curlmyip.com",
"curlmyip.net",
"dawhois.com",
"db-ip.com",
"dnswatch.info",
"dpool.sina.com.cn",
"e-localizaip.com",
"extreme-ip-lookup.com",
"findmyip.org",
"findmyipaddress.com",
"formyip.com",
"freegeoip.app",
"freegeoip.live",
"geodatatool.com",
"geoip.co.uk",
"geoip.vmn.net",
"geoiptool.com",
"get-myip.com",
"getmyip.org",
"hostip.info",
"icanhazip.com",
"ident.me",
"ifcfg.me",
"ifconfig.co",
"ifconfig.me",
"ilmioip.it",
"indirizzo-ip.com",
"inet-ip.info",
"ip-1.com",
"ip-addr.es",
"ip-address.cc",
"ip-address.ru",
"ip-adress.com",
"ip-adress.eu",
"ip-api.com",
"ip-check.info",
"ip-detect.net",
"ip-info.ff.avast.com",
"ip-info.org",
"ip-info.xyz",
"ip-ping.ru",
"ip-score.com",
"ip-secrets.com",
"ip-who-is.com",
"ip-whois.net",
"ip.amulex.com",
"ip.anysrc.net",
"ip.cctv.pk",
"ip.chinaz.com",
"ip.cn",
"ip.my-proxy.com",
"ip.taobao.com",
"ip.tool.la",
"ip.tyk.nu",
"ip.webmasterhome.cn",
"ip138.com",
"ip2location.com",
"ip2nation.com",
"ip4.me",
"ipaddress.com",
"ipaddress.org",
"ipaddresscheck.com",
"ipapi.co",
"ipchecker.info",
"ipchicken.com",
"ipecho.net",
"ipify.org",
"ipinfo.info",
"ipinfo.io",
"ipinfodb.com",
"ipleak.net",
"iplocation.net",
"iplogger.org",
"iplogger.ru",
"ipmonkey.com",
"iptrackeronline.com",
"ipv4bot.whatismyipaddress.com",
"ipv6-test.com",
"ipv6bot.whatismyipaddress.com",
"keliweb.it",
"l2.io",
"localizaip.com.br",
"meip.eu",
"meuip.net.br",
"mio-ip.it",
"mioip.biz",
"mioip.ch",
"mioip.info",
"mioip.it",
"mioip.org",
"mioip.win",
"mon-ip.com",
"my-ip-address.net",
"mycamip.com",
"myexternalip.com",
"myglobalip.com",
"myip.am",
"myip.by",
"myip.cc",
"myip.cf",
"myip.ch",
"myip.cn",
"myip.co.il",
"myip.co.nz",
"myip.com.br",
"myip.com.tw",
"myip.com.ua",
"myip.cz",
"myip.dk",
"myip.dnsdynamic.org",
"myip.dnsomatic.com",
"myip.dramor.net",
"myip.easylife.tw",
"myip.es",
"myip.eu",
"myip.fi",
"myip.gr",
"myip.heltech.se",
"myip.ht",
"myip.info",
"myip.io",
"myip.is",
"myip.israel.net",
"myip.jacware.com",
"myip.knet.ca",
"myip.kz",
"myip.ma",
"myip.ms",
"myip.mudfish.net",
"myip.mysau.com.au",
"myip.net",
"myip.nl",
"myip.nmonitoring.com",
"myip.northstate.net",
"myip.nu",
"myip.opendns.com",
"myip.ozymo.com",
"myip.report",
"myip.rs.sr",
"myip.ru",
"myip.sdu.dk",
"myip.se",
"myip.shorty.org",
"myip.surfeasy.com",
"myip.telespex.com",
"myip.tk",
"myip.tw",
"myip.ua.edu",
"myip.uconn.edu",
"myip.v6shell.org",
"myip.zone",
"myipaddress.com",
"myipinfo.net",
"myipnow.com",
"myipnumber.com",
"myiponline.com",
"mylocation.org",
"readip.info",
"sfml-dev.org",
"shmyip.com",
"show-ip.com",
"show-my-ip.de",
"showip.net",
"showipinfo.net",
"showmemyip.com",
"showmyip.co.uk",
"showmyip.com",
"showmyip.com.ar",
"showmyip.gr",
"showmyipaddress.com",
"showmyipaddress.eu",
"showmyipnow.com",
"smart-ip.net",
"tell-my-ip.com",
"tracemyip.com",
"tracemyip.org",
"trackip.net",
"tunnelbear.com",
"ultratools.com",
"utrace.de",
"v4.ident.me",
"v6.ident.me",
"vermiip.es",
"vinflag.com",
"whatismybrowser.com",
"whatismyip.akamai.com",
"whatismyip.ca",
"whatismyip.com",
"whatismyip.com.br",
"whatismyip.everdot.org",
"whatismyip.li",
"whatismyip.net",
"whatismyip.org",
"whatismyipaddress.com",
"whatismypublicip.com",
"whatmyip.us",
"whats-my-ip-address.org",
"whatsmyip.ie",
"whatsmyip.net",
"whatsmyip.org",
"whatsmyip.us",
"whatsmyipaddress.com",
"whatsmyipaddress.net",
"whereisip.net",
"whoer.net",
"wtfismyip.com",
"www.ip.cn",
"xmyip.com",
"yougetsignal.com",
"youip.net",
"your-ip-address.com",
"yourip.us"
],
"matching_attributes": [
"domain",
"hostname",
"domain|ip",
"uri",
"url"
],
"name": "List of known domains to know external IP",
"type": "hostname",
"version": 8
}