Thu Mar 23 11:28:31 UTC 2023 update

dyndns_ponmocup.json

@@ -0,0 +1,45 @@
+{
+	"name": "dyndns_ponmocup",
+	"entries": 48,
+	"entries_min": 42,
+	"entries_max": 61,
+	"ips": 48,
+	"ips_min": 42,
+	"ips_max": 61,
+	"ipv": "ipv4",
+	"hash": "ip",
+	"frequency": 1440,
+	"aggregation": 0,
+	"started": 1454099576000,
+	"updated": 1679513321000,
+	"processed": 1679514005000,
+	"checked": 1679513321000,
+	"clock_skew": 0,
+	"category": "malware",
+	"maintainer": "DynDNS.org",
+	"maintainer_url": "http://security-research.dyndns.org/pub/malware-feeds/",
+	"info": "<a href=\"http://security-research.dyndns.org/pub/malware-feeds/\">DynDNS.org</a>  Ponmocup. The malware powering the botnet has been around since 2006 and it’s known under various names, including Ponmocup, Vundo, Virtumonde, Milicenso and Swisyn. It has been used for ad fraud, data theft and downloading additional threats to infected systems. Ponmocup is one of the largest currently active and, with nine consecutive years, also one of the longest running, but it is rarely noticed as the operators take care to keep it operating under the radar. ",
+	"source": "http://security-research.dyndns.org/pub/malware-feeds/ponmocup-infected-domains-shadowserver.csv",
+	"file": "dyndns_ponmocup.ipset",
+	"history": "dyndns_ponmocup_history.csv",
+	"geolite2": "dyndns_ponmocup_geolite2_country.json",
+	"ipdeny": "dyndns_ponmocup_ipdeny_country.json",
+	"ip2location": "dyndns_ponmocup_ip2location_country.json",
+	"ipip": "dyndns_ponmocup_ipip_country.json",
+	"comparison": "dyndns_ponmocup_comparison.json",
+	"file_local": "https://iplists.firehol.org/files/dyndns_ponmocup.ipset",
+	"commit_history": "https://github.com/firehol/blocklist-ipsets/commits/master/dyndns_ponmocup.ipset",
+	"license": "unknown",
+	"grade": "unknown",
+	"protection": "unknown",
+	"intended_use": "unknown",
+	"false_positives": "unknown",
+	"poisoning": "unknown",
+	"services": [ "unknown" ],
+	"errors": 0,
+	"version": 1652,
+	"average_update": 1448,
+	"min_update": 720,
+	"max_update": 2884,
+	"downloader": "geturl"
+}