Name / Title | Added | Expires | Hits | Comments | Syntax | |
---|---|---|---|---|---|---|
C2 IPs of Raccoon v2 | Jul 28th, 2022 | Never | 3,219 | 0 | None | - |
PrivateLoader main component strings | Apr 21st, 2022 | Never | 4,704 | 0 | None | - |
PrivateLoader loader component strings | Apr 21st, 2022 | Never | 1,947 | 0 | None | - |
PrivateLoader campaign 27 | Apr 21st, 2022 | Never | 1,864 | 0 | None | - |
Kaseya REvil Configuration | Jul 6th, 2021 | Never | 1,154 | 0 | JSON | - |
List of C&C domains of REvil | Jul 6th, 2021 | Never | 3,135 | 0 | None | - |
ZLoader Indicators | Jan 29th, 2021 | Never | 3,314 | 0 | None | - |
Qakbot Indicators | Jan 29th, 2021 | Never | 3,334 | 0 | None | - |
Dridex Indicators | Jan 29th, 2021 | Never | 3,480 | 0 | None | - |
Trickbot Indicators | Jan 29th, 2021 | Never | 3,183 | 0 | None | - |
Emotet Indicators | Jan 29th, 2021 | Never | 3,210 | 0 | None | - |
List of threat names to block the exploitation attempts made with FireEye Red Team Tools | Dec 10th, 2020 | Never | 5,748 | 0 | None | - |
SEO poisoning indicators | Oct 17th, 2018 | Never | 16,811 | 0 | None | - |
MageCart compromised domains | Sep 28th, 2018 | Never | 17,905 | 0 | None | - |
RuMMS v2.0 hashes | Jun 5th, 2018 | Never | 17,935 | 0 | None | - |
SpyNote RAT payload MD5s | Jan 24th, 2017 | Never | 19,972 | 0 | None | - |
Magento compromised sites | Sep 23rd, 2016 | Never | 21,300 | 0 | None | - |
Tech Support scam compromised sites | Sep 23rd, 2016 | Never | 21,038 | 0 | None | - |
Hits by FQDN | Jan 19th, 2016 | Never | 22,225 | 0 | None | - |
Unique iframe Trampoline URLs | Jan 19th, 2016 | Never | 23,118 | 0 | None | - |
Necurs Callback IPs | Jan 11th, 2016 | Never | 20,238 | 0 | None | - |
Neutrino Landing Pages | Jan 11th, 2016 | Never | 21,059 | 0 | None | - |
Neutrino Infected Sites | Jan 11th, 2016 | Never | 20,470 | 0 | None | - |
Nuclear Landing Page Domains 2015-09-23 | Sep 23rd, 2015 | Never | 21,241 | 0 | None | - |
Nuclear Compromised/Redirect Hostnames 2015-09-23 | Sep 23rd, 2015 | Never | 21,904 | 0 | None | - |
Nuclear Landing Page Host IPs 2015-09-23 | Sep 23rd, 2015 | Never | 20,149 | 0 | None | - |
20150820 Neutrino Domains & URLs | Aug 20th, 2015 | Never | 21,425 | 0 | None | - |
Compromised WordPress | Jun 4th, 2015 | Never | 20,316 | 0 | None | - |
Blue_Botnet UAS List | May 19th, 2015 | Never | 20,851 | 0 | None | - |
Blue_Botnet blog list | May 19th, 2015 | Never | 20,019 | 0 | None | - |
Blue_Botnet proxy IP:PORT | May 19th, 2015 | Never | 119,732 | 0 | None | - |
20150403 Angler Domain Shadowing - full domains | Apr 3rd, 2015 | Never | 22,139 | 0 | None | - |
20150403 Angler Domain Shadowing - Primary domains | Apr 3rd, 2015 | Never | 20,810 | 0 | None | - |