{ "name": "feodo_badips", "entries": 0, "entries_min": 0, "entries_max": 0, "ips": 0, "ips_min": 0, "ips_max": 0, "ipv": "ipv4", "hash": "ip", "frequency": 30, "aggregation": 0, "started": 1459111886000, "updated": 1528330062000, "processed": 1528330062000, "checked": 1534149604000, "clock_skew": 0, "category": "malware", "maintainer": "Abuse.ch", "maintainer_url": "https://feodotracker.abuse.ch/", "info": "Abuse.ch Feodo tracker BadIPs The Feodo Tracker Feodo BadIP Blocklist only contains IP addresses (IPv4) used as C&C communication channel by the Feodo Trojan version B. These IP addresses are usually servers rented by cybercriminals directly and used for the exclusive purpose of hosting a Feodo C&C server. Hence you should expect no legit traffic to those IP addresses. The site highly recommends you to block/drop any traffic towards any Feodo C&C using the Feodo BadIP Blocklist. Please consider that this blocklist only contains IP addresses used by version B of the Feodo Trojan. C&C communication channels used by version A, version C and version D are not covered by this blocklist. ", "source": "https://feodotracker.abuse.ch/blocklist/?download=badips", "file": "feodo_badips.ipset", "history": "feodo_badips_history.csv", "geolite2": "", "ipdeny": "", "ip2location": "", "ipip": "", "comparison": "", "file_local": "https://iplists.firehol.org/files/feodo_badips.ipset", "commit_history": "https://github.com/firehol/blocklist-ipsets/commits/master/feodo_badips.ipset", "license": "unknown", "grade": "unknown", "protection": "unknown", "intended_use": "unknown", "false_positives": "unknown", "poisoning": "unknown", "services": [ "unknown" ], "errors": 0, "version": 6, "average_update": 14243, "min_update": 32, "max_update": 1136277, "downloader": "geturl" }