Name / Title | Added | Expires | Hits | Comments | Syntax | |
---|---|---|---|---|---|---|
C2 IPs of Raccoon v2 | Jul 28th, 2022 | Never | 4,701 | 0 | None | - |
PrivateLoader main component strings | Apr 21st, 2022 | Never | 8,491 | 1 | None | - |
PrivateLoader loader component strings | Apr 21st, 2022 | Never | 3,118 | 0 | None | - |
PrivateLoader campaign 27 | Apr 21st, 2022 | Never | 3,056 | 0 | None | - |
Kaseya REvil Configuration | Jul 6th, 2021 | Never | 2,584 | 0 | JSON | - |
List of C&C domains of REvil | Jul 6th, 2021 | Never | 4,426 | 0 | None | - |
ZLoader Indicators | Jan 29th, 2021 | Never | 4,207 | 0 | None | - |
Qakbot Indicators | Jan 29th, 2021 | Never | 4,189 | 0 | None | - |
Dridex Indicators | Jan 29th, 2021 | Never | 4,342 | 0 | None | - |
Trickbot Indicators | Jan 29th, 2021 | Never | 3,991 | 0 | None | - |
Emotet Indicators | Jan 29th, 2021 | Never | 4,022 | 0 | None | - |
List of threat names to block the exploitation attempts made with FireEye Red Team Tools | Dec 10th, 2020 | Never | 7,467 | 0 | None | - |
SEO poisoning indicators | Oct 17th, 2018 | Never | 18,047 | 0 | None | - |
MageCart compromised domains | Sep 28th, 2018 | Never | 19,280 | 0 | None | - |
RuMMS v2.0 hashes | Jun 5th, 2018 | Never | 19,103 | 0 | None | - |
SpyNote RAT payload MD5s | Jan 24th, 2017 | Never | 20,993 | 0 | None | - |
Magento compromised sites | Sep 23rd, 2016 | Never | 22,347 | 0 | None | - |
Tech Support scam compromised sites | Sep 23rd, 2016 | Never | 22,056 | 0 | None | - |
Hits by FQDN | Jan 19th, 2016 | Never | 23,485 | 0 | None | - |
Unique iframe Trampoline URLs | Jan 19th, 2016 | Never | 24,419 | 0 | None | - |
Necurs Callback IPs | Jan 11th, 2016 | Never | 21,284 | 0 | None | - |
Neutrino Landing Pages | Jan 11th, 2016 | Never | 22,159 | 0 | None | - |
Neutrino Infected Sites | Jan 11th, 2016 | Never | 21,289 | 0 | None | - |
Nuclear Landing Page Domains 2015-09-23 | Sep 23rd, 2015 | Never | 22,260 | 0 | None | - |
Nuclear Compromised/Redirect Hostnames 2015-09-23 | Sep 23rd, 2015 | Never | 23,345 | 0 | None | - |
Nuclear Landing Page Host IPs 2015-09-23 | Sep 23rd, 2015 | Never | 21,023 | 0 | None | - |
20150820 Neutrino Domains & URLs | Aug 20th, 2015 | Never | 22,360 | 0 | None | - |
Compromised WordPress | Jun 4th, 2015 | Never | 21,299 | 0 | None | - |
Blue_Botnet UAS List | May 19th, 2015 | Never | 22,103 | 0 | None | - |
Blue_Botnet blog list | May 19th, 2015 | Never | 21,348 | 0 | None | - |
Blue_Botnet proxy IP:PORT | May 19th, 2015 | Never | 143,429 | 0 | None | - |
20150403 Angler Domain Shadowing - full domains | Apr 3rd, 2015 | Never | 23,095 | 0 | None | - |
20150403 Angler Domain Shadowing - Primary domains | Apr 3rd, 2015 | Never | 21,716 | 0 | None | - |