certtools / intelmq-feeds-documentation

Cyber Threat Intelligence Feeds

Cyber Threat Intelligence Feeds (CTIFeeds)

@(Information Security)[resource, links, security]

**This page is outdated!! Please go to https://docs.intelmq.org instead !! **

[TOC]

---

IP Address

Abuse.ch - Feodo Botnet (O)

• IntelMQ - OK
• Open Source Intelligence

Abuse.ch - Palevo Worm (O)

• IntelMQ - OK
• Open Source Intelligence

Abuse.ch - Zeus Botnet (O)

• IntelMQ - OK
• Open Source Intelligence

Alien Vault - Reputation (O)

• IntelMQ - Parsing Error
• Open Source Intelligence

Arbor - Distributed SSH Brute Force Attacks (O)

• IntelMQ - Collecting Error
  • 403 Forbidden
• Closed Source Intelligence

Blocklist.de - Attacks on the Service Apache (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - REG-Bots, IRC-Bots or BadBots (Spamming) (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Brute-Force Website Logins (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Attacks on the Service FTP (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Attacks on the Service IMAP, SASL, POP3 (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - IRC Botnet (O)

• IntelMQ - OK
  • No Present Data
• Open Source Intelligence

Blocklist.de - Attacks on the Service Mail, Postfix (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Brute-Force SIP, VOIP or Asterisk-Server Logins Attacks (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Attacks on the Service SSH (O)

• IntelMQ - OK
• Open Source Intelligence

Blocklist.de - Strong IPs (O)

• IntelMQ - OK
• Open Source Intelligence

CINSscore.com - The CI Army List (O)

• IntelMQ - Collecting Error
  • Can not access the link via our IP.
• Open Source Intelligence

Team Cymru - Bogons IP List (O)

• IntelMQ - OK
• Open Source Intelligence

DShield - AS Report (O)

• IntelMQ - OK
• Open Source Intelligence

DShield - Top 20 Attacking Class C (O)

• IntelMQ - OK
• Open Source Intelligence

Danger.rulez.sk - Brute Force Attack (Firewall) (O)

• IntelMQ - OK
• Open Source Intelligence

Dragon Research Group - SSH Brute Force Attack (O)

• IntelMQ - OK
• Open Source Intelligence

Dragon Research Group - VNC Brute Force Attack (O)

• IntelMQ - OK
• Open Source Intelligence

Malc0de - Malware (O)

• IntelMQ - OK
• Open Source Intelligence

Malware Group - Unknown (O)

• IntelMQ - Collecting Error
  • Resource Not Available
• Open Source Intelligence

Malware Group - Proxy (O)

• IntelMQ - Collecting Error
  • Resource Not Available
• Open Source Intelligence

OpenBL.org - Abuse Reporting and Blacklisting (O)

• IntelMQ - OK
• Open Source Intelligence

Spamhaus - DROP (Don't Route Or Peer Lists) (O)

• IntelMQ - OK
• Open Source Intelligence

Taichung Blacklist - Malicious Activities (O)

• IntelMQ - OK
• Open Source Intelligence

Turris Greylist - Scanning Attack (O)

• IntelMQ - OK
• Open Source Intelligence

URLVir - Malware (O)

• IntelMQ - OK
• Open Source Intelligence

Autoshun shunlist - Malicious Activities (O)

• IntelMQ - Collecting Error
  • URL Changed
• Closed Source Intelligence

Spamhaus CERT Insight Portal - Botnet (O)

• IntelMQ - Collecting Error
  • No API Key
• Community Source Intelligence

Domain Name

Abuse.ch (Feodo Botnet) (O)

• IntelMQ - OK
  • No Present Data
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

Abuse.ch (Palevo Worm) (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Nothing to do

Abuse.ch (Zeus Botnet) (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

DShield - Suspicious Domains (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Nothing to do

Malwarebytes hpHosts - Malicious Activities (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

Malc0de - Malware (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

Malware Domains - Malware (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

Malware Group - Unknown (O)

• IntelMQ - Collecting Error
  • Resource Not Available
• Open Source Intelligence
• TBD
  • Nothing to do

URLVir - Malware (O)

• IntelMQ - OK
• Open Source Intelligence
• TBD
  • Add new collector, parser, etc.

DGArchive - Malware (O)

• IntelMQ - OK
• Community Source Intelligence
• TBD
  • Fix the collector

n6stomp - Malicious Activities (O)

• IntelMQ - Collecting Error
  • No API Key
• Community Source Intelligence
• TBD
  • Nothing to do

URL

CleanMX.de - Malware (O)

• IntelMQ - OK
• Open Source Intelligence

CleanMX.de - Phishing (O)

• IntelMQ - OK
• Open Source Intelligence

Security Research - Ponmocup Botnet (O)

• IntelMQ - OK
• Open Source Intelligence

Malware Domain List - Malware (O)

• IntelMQ - OK
• Open Source Intelligence

OpenPhish - Phishing (O)

• IntelMQ - OK
• Open Source Intelligence
• Missing 'Target' column

VXVault - Malware (O)

• IntelMQ - OK
• Open Source Intelligence

Alien Vault OTX - Malicious Activities (O)

• IntelMQ - OK
• Community Source Intelligence

Blueliv - Malicious Activities (O)

• IntelMQ - Collecting Error
  • URL Changed
• Community Source Intelligence

Bitsight - Malicious Activities (O)

• IntelMQ - Collecting Error
  • No API Key
• Closed Source Intelligence

Malware Patrol - Malware (O)

• IntelMQ - Parsing Error
• Closed Source Intelligence

PhishTank - Phishing (O)

• IntelMQ - OK
• Community Source Intelligence