| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| StarBlizzard Domains | Oct 13th, 2024 | Never | 156 | 0 | None | - |
| PotentialPaperCutExploitRelatedInfra | Apr 20th, 2023 | Never | 914 | 0 | None | - |
| OktaPhishing | Feb 10th, 2023 | Never | 480 | 0 | None | - |
| RISE_Resources | Feb 1st, 2023 | Never | 192 | 0 | None | - |
| Possible_IcedID_C2_Domains | Jan 18th, 2023 | Never | 169 | 0 | None | - |
| Skytalks2022_References | Aug 14th, 2022 | Never | 531 | 0 | None | - |
| MSHTML_Vuln_IOCs | Sep 8th, 2021 | Never | 3,176 | 0 | None | - |
| Pos_SVR_2021_Campaign | May 27th, 2021 | Never | 537 | 0 | None | - |
| pos_strongpity | Mar 15th, 2021 | Never | 382 | 0 | None | - |
| exchange_malicious_IPs | Mar 8th, 2021 | Never | 1,235 | 0 | None | - |
| CloudAtlas_Infrastructure | Feb 18th, 2021 | Never | 656 | 0 | None | - |
| unk_UA_Phishing_Campaign | Feb 16th, 2021 | Never | 397 | 0 | None | - |
| edu_pos_BEC | Feb 15th, 2021 | Never | 1,368 | 0 | None | - |
| gov-us Domains | Feb 10th, 2021 | Never | 1,216 | 0 | None | - |
| 28jan_BazarLoader_Infrastructure | Jan 28th, 2021 | Never | 636 | 0 | None | - |
| additional_possible_bazar | Jan 27th, 2021 | Never | 542 | 0 | None | - |
| possible_bazar_infrastructure | Jan 27th, 2021 | Never | 493 | 0 | None | - |
| possible_bazar_campaign | Jan 26th, 2021 | Never | 737 | 0 | None | - |
| Possible_Bazar_Infrastructure | Dec 21st, 2020 | Never | 2,556 | 0 | None | - |
| possible_bazar_linked | Dec 21st, 2020 | Never | 680 | 0 | None | - |
| sunburst_extended_pivoting | Dec 15th, 2020 | Never | 3,581 | 0 | None | - |
| avsvmcloud_pdns | Dec 13th, 2020 | Never | 6,996 | 0 | None | - |
| crybaby_terrorist_infrastructure | Dec 9th, 2020 | Never | 3,259 | 0 | None | - |
| europa_registrations | Dec 9th, 2020 | Never | 1,151 | 0 | None | - |
| jerrywilliams775 | Dec 8th, 2020 | Never | 340 | 0 | None | - |
| heyorwalata | Dec 8th, 2020 | Never | 409 | 0 | None | - |
| Possible_CobaltStrike_NetworkInfrastructure | Dec 6th, 2020 | Never | 2,867 | 0 | None | - |
| COVID_ColdChain_Related_Infrastructure | Dec 3rd, 2020 | Never | 694 | 0 | None | - |
| Possible_Kimsuky_Domains | Dec 2nd, 2020 | Never | 897 | 0 | None | - |
| QuakBot_DropperXLS_YARA | Dec 1st, 2020 | Never | 394 | 0 | None | - |
| Possible_QuakBot_Doc_SHA256 | Dec 1st, 2020 | Never | 940 | 0 | None | - |
| Late2020_Possible_Ryuk | Nov 25th, 2020 | Never | 599 | 0 | None | - |
| possilble_ryuk_related | Oct 29th, 2020 | Never | 599 | 0 | None | - |
| suspect_ryuk | Oct 28th, 2020 | Never | 3,581 | 0 | None | - |
| kimsuky_konkuk | Oct 28th, 2020 | Never | 970 | 0 | None | - |
| kimsuky_moar_leaseweb_ip | Oct 27th, 2020 | Never | 934 | 0 | None | - |
| kimsuky_leaseweb_ip | Oct 27th, 2020 | Never | 958 | 0 | None | - |
| kimsuky_daou_server | Oct 27th, 2020 | Never | 859 | 0 | None | - |
| kimsuky_sslport | Oct 27th, 2020 | Never | 933 | 0 | None | - |
| x33fcon_2020_resources | Sep 14th, 2020 | Never | 439 | 0 | None | - |
| TaiwanMediaSites | Aug 20th, 2020 | Never | 552 | 0 | None | - |
| Slowik_BHUSA_2020_Rejected | Jul 4th, 2020 | Never | 1,962 | 0 | None | - |
| Related_Registration_Items_Tied_To_US_Unrest | Jun 7th, 2020 | Never | 530 | 0 | None | - |
| EKANS_ProcessList_With_Description | Jan 28th, 2020 | Never | 1,224 | 0 | None | - |
| Microsoft_DPRK_Takedown | Dec 31st, 2019 | Never | 10,898 | 0 | None | - |
| THALLIUM/Kimsuky_Infrastructure | Dec 31st, 2019 | Never | 4,005 | 0 | None | - |
| ovh-related_items | Dec 19th, 2019 | Never | 1,724 | 0 | None | - |
| wellsfargo_spoofing | Oct 9th, 2019 | Never | 403 | 0 | None | - |
| alfidaa_forum | Jun 17th, 2019 | Never | 282 | 0 | None | - |
| magnallium_hta_fuzzing | Apr 9th, 2019 | Never | 451 | 0 | None | - |
| lockergoga_samples | Mar 27th, 2019 | Never | 1,181 | 0 | None | - |
| possible_shamoon_items | Dec 11th, 2018 | Never | 507 | 0 | None | - |
| odd_related_registrations | Sep 2nd, 2018 | Never | 1,444 | 0 | None | - |
| scammy_mcscamface | Jun 29th, 2018 | Never | 349 | 0 | None | - |
| linode_fun | Jun 28th, 2018 | Never | 328 | 0 | None | - |
| olympicdestroyer_redux | Jun 20th, 2018 | Never | 453 | 0 | None | - |
| njRAT_samples | Jun 14th, 2018 | Never | 264 | 0 | None | - |
| misc_phishing | Jun 13th, 2018 | Never | 338 | 0 | None | - |
| iran_military | May 12th, 2018 | Never | 358 | 0 | None | - |
| odd_israel_themed | May 12th, 2018 | Never | 387 | 0 | None | - |
| apple_spoofing | Apr 27th, 2018 | Never | 225 | 0 | None | - |
| amex_and_related | Mar 31st, 2018 | Never | 395 | 0 | None | - |
| otan_spoof | Mar 10th, 2018 | Never | 346 | 0 | None | - |
| canadian_financials | Feb 21st, 2018 | Never | 348 | 0 | None | - |
| olympicdestroyer_hashes | Feb 16th, 2018 | Never | 885 | 0 | None | - |
| Latin_Theme | Jan 22nd, 2018 | Never | 273 | 0 | None | - |
| weird_campaign | Jan 12th, 2018 | Never | 311 | 0 | None | - |
