Thu Mar 23 11:28:31 UTC 2023 update

feodo_badips.json

@@ -0,0 +1,45 @@
+{
+	"name": "feodo_badips",
+	"entries": 0,
+	"entries_min": 0,
+	"entries_max": 0,
+	"ips": 0,
+	"ips_min": 0,
+	"ips_max": 0,
+	"ipv": "ipv4",
+	"hash": "ip",
+	"frequency": 30,
+	"aggregation": 0,
+	"started": 1459111886000,
+	"updated": 1528330062000,
+	"processed": 1528330062000,
+	"checked": 1534149604000,
+	"clock_skew": 0,
+	"category": "malware",
+	"maintainer": "Abuse.ch",
+	"maintainer_url": "https://feodotracker.abuse.ch/",
+	"info": "<a href=\"https://feodotracker.abuse.ch\">Abuse.ch Feodo tracker BadIPs</a>  The Feodo Tracker Feodo BadIP Blocklist only contains IP addresses (IPv4)  used as C&C communication channel by the Feodo Trojan version B. These IP addresses are usually servers rented by cybercriminals directly and used for the exclusive purpose of hosting a Feodo C&C server. Hence you should expect no legit traffic to those IP addresses. The site highly recommends you to block/drop any traffic towards any Feodo C&C using the Feodo BadIP Blocklist. Please consider that this blocklist only contains IP addresses used by version B of the Feodo Trojan. C&C communication channels used by version A, version C and version D are not covered by this blocklist. ",
+	"source": "https://feodotracker.abuse.ch/blocklist/?download=badips",
+	"file": "feodo_badips.ipset",
+	"history": "feodo_badips_history.csv",
+	"geolite2": "",
+	"ipdeny": "",
+	"ip2location": "",
+	"ipip": "",
+	"comparison": "",
+	"file_local": "https://iplists.firehol.org/files/feodo_badips.ipset",
+	"commit_history": "https://github.com/firehol/blocklist-ipsets/commits/master/feodo_badips.ipset",
+	"license": "unknown",
+	"grade": "unknown",
+	"protection": "unknown",
+	"intended_use": "unknown",
+	"false_positives": "unknown",
+	"poisoning": "unknown",
+	"services": [ "unknown" ],
+	"errors": 0,
+	"version": 6,
+	"average_update": 14243,
+	"min_update": 32,
+	"max_update": 1136277,
+	"downloader": "geturl"
+}