-
Notifications
You must be signed in to change notification settings - Fork 5
/
blocklists-volexity.txt
565 lines (531 loc) · 21.5 KB
/
blocklists-volexity.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
## hosts-blocklists
## domains-ips-hashes
## blocklists-volexity
## https://www.volexity.com/blog/
## https://github.com/volexity/threat-intel
# https://www.volexity.com/blog/2024/11/15/brazenbamboo-weaponizes-forticlient-vulnerability-to-steal-vpn-credentials-via-deepdata/
27.124.37.30
27.124.37.59
27.124.37.64
38.55.97.178
43.248.136.110
43.248.136.215
43.248.136.241
45.125.34.126
45.155.220.79
45.155.220.194
47.236.30.141
47.238.153.120
47.238.155.170
49.232.185.137
58.221.58.240
103.27.108.152
103.27.108.205
103.27.108.207
103.27.109.28
103.27.109.217
103.27.110.159
103.43.17.99
103.43.18.22
103.43.18.95
103.43.19.64
103.43.19.245
118.195.234.243
119.147.213.48
121.201.109.98
124.156.48.83
154.91.196.185
202.43.239.13
203.83.9.60
203.83.9.62
222.219.183.84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# https://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/
59.188.69.231
103.96.130.107
122.10.89.110
122.10.90.20
152.32.159.8
049e8677406de5f0061f3960f9655b5f
2a6c10a34fa1e2a38673f4ca20c303a1
4c8a326899272d2fe30e818181f6f67f
6abf9a7926415dc00bcb482456cc9467
25e4eef79ad4126d5dc5567949848070
4958ede3b968ad464c983054479bf4d2
acfc69c743b733dd80c1d551ae01172b
ce5fdde7db4ee41808f9c7d121311f78
ee28b3137d65d74c0234eea35fa536af
038bc60a0bf004e9a7cbc3a3cf814613e61ba7cc
37ee872f05a0273446dc7e2539b9dbf9bf7d80b4
66346b3d841dc56a387f48b4dfba96083c37ec2e
68853cafd395edd08cd38ab6100c58e291a3a3d7
84875b2cf9f8c778ff1462ef478918b4ac964afe
bb030c405f33557bc5441165a0f8bf9a6d5a82a6
c68e86985a4cb2f69e16fb943723af63833859b3
d14431e79dc109d7aad91a5411d406c99ffc524c
e8e4a3fa69173a46cdb60c53877c7ad557accc51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# https://www.volexity.com/blog/2024/06/13/disgomoji-malware-used-to-target-indian-government/
account.emailnic.online
accounts.emailnic.online
adfs.clawsindia.in
admincoord.in
app.clawsindia.in
apsdelhicantt.in
autoconfig.clawsindia.in
awesindia.online
awesscholarship.in
blog.clawsindia.in
certdehli.in
clawsindia.in
cloud.publicinfo.in
coordsec2.in
cpanel.clawsindia.in
defenseinsight.in
dev.clawsindia.in
dev.nic-tech.in
email.apsdelhicantt.in
email.coordsec2.in
email.emailnic-tech.email
email.emailnic.online
email.estbsec.in
email.gov.in.estbsec.in
email.gov.in.parichay.online
email.parichay.online
email.publicinfo.in
emailnic-tech.email
emailnic.online
epar-online.in
epar.emailnic-tech.email
estbsec.in
esttsec.in
ftp.clawsindia.in
ftp.publicinfo.in
gate.clawsindia.in
help.clawsindia.in
imap.clawsindia.in
infosec2.in
insight.defenseinsight.in
intranet.clawsindia.in
lists.clawsindia.in
localhost.clawsindia.in
login.emailnic.online
m.clawsindia.in
m.emailnic.online
mail6.clawsindia.in
mail.clawsindia.in
mail.defenseinsight.in
mailgate.clawsindia.in
mailrelay.clawsindia.in
mbox.clawsindia.in
mx0.clawsindia.in
mx4.clawsindia.in
mx10.clawsindia.in
nic-tech.in
ns1.clawsindia.in
old.clawsindia.in
ordai.quest
outlook.emailnic.online
parichay.online
pcda.admincoord.in
play.emailnic.online
pop3.clawsindia.in
pop.clawsindia.in
portal.clawsindia.in
publicinfo.in
secy-org.in
shop.clawsindia.in
smtp.mail.clawsindia.in
sql.clawsindia.in
test.clawsindia.in
webdisk.clawsindia.in
webdisk.defenseinsight.in
webdisk.estbsec.in
webmail.clawsindia.in
whm.clawsindia.in
ww12.epar-online.in
3.111.168.95
15.206.164.242
18.61.80.151
65.1.148.138
179.43.175.111
01c34ccd7ca7c5cdf88272d8c9071004
04a3f16c76f2e6d9eba34dd132fc8c27
2bf596603c432fa46b494dc3edd2d30f
2c06e31bc2969df108697061325b2e8a
2d4a5050c7ea6c83665807df151e067e
3ce8dfb3f1bff805cb6b85a9e950b3a2
3d4e5dbf9b7a6e7336a354b71d4d1a8b
8bf9cf1363e404a9ad3e0fa9e53057cb
9f24f757b151a1d81f714075fe7d33d4
9f3359ae571c247a8be28c0684678304
13ee4bd10f05ee0499e18de68b3ea4d5
20b4eb5787faa00474f7d27c0fea1e4b
49cbbf586ba1480599be02915e5a8b34
50fe93394528a0ede52f9eec6c1bf505
55c90ff429e4fd72034922383aa31078
56cb95b63162d0dfceb30100ded1131a
56cc70b66be99e01d354ba2aaf88041e
60fc5dc410b7482566a74d03549d8246
95e17125be0b0f4a4ea1b3d01cc73238
199c855998aedb0ce46e8d34c05eb0cb
501a6d48fd8f80a134cf71db3804cf95
777cbc972609d26fe6597a442cdf4589
898bfd3df2ccd9508e0bfab672f5f61a
9821c180f81512f1b72c46e462fc759a
52992eb3a59d7acb736cf9b607337d62
237961bbba6d4aa2e0fae720d4ece439
635864ff270cf8e366a7747fb5996766
9012904377e6934797c8689b8c9268c6
a9182c812c7f7d3e505677a57c8a353b
b4983913d49a2a49545ebe59cd27a7d1
c9969ece7bb47efac4b3b04cdc1538e5
cd7067d58e2319ebc8ed0ecd6b61b2b6
d5f2e3fafbb0701dc0f1adccc7141e63
da745b60b5ef5b4881c6bc4b7a48d784
db0676733eb4ee2c490bdc4fe488b40f
de115e15a6689cf32519c3a046a78626
e0102071722a87f119b12434ae651b48
e6667ab32fbda86a2d2a72ed7e52b146
ee8d767069faf558886f1163a92e4009
f5d8664cbf4a9e154d4a888e4384cb1d
f14e778f4d22df275c817ac3014873dc
f68b17f1261aaa4460d759d95124fbd4
f2501e8b57486c427579eeda20b729fd
fbcd468dcd05cd1bf2ee25f16d09c227
fc61b985d8c590860f397d943131bfb5
0d4111ab5471c7f5b909bff336ba8cd66f9d8630
038ae7e6e6708cb58db96512515177d84b71e8c2
1c8cfa8f36897b6b1179dc4bce49b0e2f86e1a4e
2c99e7e8a8a2965a6581729ec5b254f1b2bbda4b
2dfe824d0298201e0efb30f16b3ce8a409ffe006
3dff44bede709295fffd3ae3e9599f6ab8197af4
4e2b14b18f5d68ce3dada1061526b03eafcd50b8
5b7b0b0d7d59e616b0cf75a25ad67dfca89495c4
5dd201fa53cb5c76103579785a3d220d578dd12a
6f3f3c533a2b9031362d88bb7414bf332c93dc9d
8c969dbe0fe30244802cda1c8e33b04040831466
25dc7c1237e5076c80fb867fb11d058387e1d154
31a1b6e836684c6d7b5d8f7a099dbe090282cbb0
34cefe42aa8347c39a04eaca5a464fa35d6f1e62
40e4b466e41b440ff62d9ef35f7034fd157ca625
465ef9d21e73493e9d531378756f91917f9567f4
513b4b604d198f44041ed494ee8c7a7f94ac5038
749a8d081e075b921436d07e323964da88bff609
765b17c1e2e1ab3d2fbdba3ccffcdcc4bd750102
789b41ddcee0166349cc106044932c76bfcb8cc0
892d434f3f59b3b8bd4ca500218a75d39c13ee5b
1443e58a298458c30ab91b37c0335bdadbacd756
7515a93da10b7d3f4619a38cc3f1a1bd25ddb847
7679f0e499edc2079a812cca945841c3680256d5
9244a07ce8f961317ba49e497009e55889f1d50d
616661c324a8dfb836bd88a3c1325dc79e030ddd
630530b11cbde6de840d7326152c1cb6bae06e0a
88949119f88b15722a2b75ca84db7a6bfc822948
af137c7d1481e45217abd24a96f8aa2b416d294c
b8fd89cf6e9aae16321553a2e632e31b2cf2f057
bcadcb345fc65a9c3d7c78566ad72a77c6076a11
bfdd02fa593d3858399da6bf591aeb10b2d1da40
c1a80dd5be2de92a5a32d81a9fc146d4fd52ddb6
c1c3454ed5bf32f22c855b19618bcd16e6549df8
c45e1cc5cd0c98388ec71221278950f9b1257ed8
c1916403a6ad05fed4da5fb53ce743b6ce49e0cb
caa130a8e3f5ca0a7f33de4b2b26e0e25dd10775
d0aff8489c02230d4c0935e21125f81895bf6cde
d6855190e00276cad29a31573f819558256abe7f
dab2f50307c86544719ae5f72d386ac8bc4d01e3
e1bdb995998ab338fc596777a78121fc49f002b5
e19c23d82d7e7e8e45b1d830ddc7ddb85087c4cc
e76c3f3a7158c16c28176053286dcb88ac646dbf
e5182d13d66c3efaa7676510581d622f98471895
fc5ccb2b0a0b536ccb9687c67cc4ce735b866635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# https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
nhdata.s3-us-west-2.amazonaws.com
23.242.208.175
66.235.168.222
71.9.135.100
89.187.187.69
137.118.185.101
144.172.79.92
172.233.228.93
198.58.109.149
3de2a4392b8715bad070b2ae12243f166ead37830f7c6d24e778985927f9caac
35a5f8ac03b0e3865b3177892420cb34233c55240f452f00f9004e274a85703c
96dbec24ac64e7dd5fef6e2c26214c8fe5be3486d5c92d21d5dcb4f6c4e365b9
161fd76c83e557269bee39a57baa2ccbbac679f59d9adff1e1b73b0f4bb277a6
448fbd7b3389fe2aa421de224d065cea7064de0869a036610e5363c931df5b7c
755f5b8bd67d226f24329dc960f59e11cb5735b930b4ed30b2df77572efb32e8
adba167a9df482aa991faaa0e0cde1182fb9acfbb0dc8d19148ce634608bab87
c1a0d380bf55070496b9420b970dfc5c2c4ad0a598083b9077493e8b8035f1e9
e315907415eb8cfcf3b6a4cd6602b392a3fe8ee0f79a2d51a81a928dbce950f8
fe07ca449e99827265ca95f9f56ec6543a4c5b712ed50038a9a153199e95a0b7
# https://www.volexity.com/blog/2024/02/13/charmingcypress-innovating-persistence/
beginningofgraylife.ddns.net
cloud-document-edit.onrender.com
cloud-meeting-online.onrender.com
coral-polydactyl-dragonfruit.glitch.me
defaultbluemarker.info
east-healthy-dress.glitch.me
editorservices.onrender.com
ndrrftqrlblfecpupppp.supabase.co
panel.rasaanah-iiis.org
panel.rasaaneh-iiis.org
prism-west-candy.glitch.me
rasaanah-iiis.org
rasaaneh-iiis.org
rasaneh-iiis.org
tgtoolsservice.onrender.com
view-document-online.onrender.com
wulpfsrqupnuqorhexiw.supabase.co
yellowparallelworld.ddns.net
144.217.117.74
149.28.133.236
185.36.189.81
2a6c530a0f9a556fce5e9ca5e4c72fc0
2edea0927601ef443fc31f9e9f8e7a77
3fbf3ce1a9b452421970810bd6b6b37a
4b1620523670f271a49420e8eea80f59
4d75ed2a0a1016734a561295a49acb83
5fc8668f9c516c2b08f34675380e2a57
9b6c308f106e72394a89fac083de9934
78e4975dc56e62226f4c56850efb452b
406e1402dd2e39bfba8b7e903aab41a3
481c2bff3198bc3f0a357d4c23bf6c8a
859a9e523c3308c120e82068829fab84
1009e5b3884fffc9926a2e97ccdf8408
7756b32f21777074937ee223e4c70e9c
43141e85e7c36e31b52b22ab94d5e574
266305f34477b679e171375e12e6880f
541992d309adb62a6ae30724f356e5fd
853687659483d215309941dae391a68f
a517bcb4d8c24dfe750110a91252c26c
a2729e8e105b76808da741263fc394be
ac4e5a1df9c2ec889be088159e28ddb1
ae67cd9c37127821e7768801dda7e8fb
bd41c99df6945650727f871c6ed3f95b
c3fe93fc9133c0bc4b441798b9bcf151
c79d85d0b9175cb86ce032543fe6b0d5
dd8466a7b634cc316585e23c39b389d4
e9c8ced8a36d560a7e01bc818c1c0113
e851147f1d5dc5236ed2085cd5e513e7
01966af573124d90608167a5d544ac59b6c994ea
09b527ddb848d7697f34ab34c2bce30da6f24238
1f974d7634103536e524a41a79046785ca7ae3d6
1f16544eb41f4b5146cee457504b8b13d10a91e1
2a2610344bf8db66b1e13302e54e4ef77712aada
3a002ae6855d551cf29f0c11db8c484261197214
4da8f471528cc588133b93b7dc6520f8772153d6
5b5a226b906bf83c4f6ef49189f4bde560398edb
5bdec05bdca8176ae67054a3a7dc8c5ef0ac8deb
5cccda13b5e6ff30ccf263ad7b5c6ace18bd3c90
6a9c095728702b47b7a3a9b4f6d57ea5884df50e
15ef775adbddd1f9515860f322fcfdb1f81fbb49
16f58fdb4443a963cea36de8c8500539e28d053d
27b38cf6667936c74ed758434196d2ac9d14deae
87f36a0279b31a4a2f9b1123674e3dea130f1554
89ae0407ee20cbdd12f52dbc535fedd4fdd36ae1
195e939e0ae70453c0817ebca8049e51bbd4a825
969aef62b09ac68e4cd526fecc91e87f883afc58
729346dfdd2203a9943119bac03419d63554c4b8
25005352eff725afc93214cac14f0aa8e58ca409
607137996a8dc4d449185586ecfbe886e120e6b1
ad4bb732e76ed609c227d6c16691b0ee50f1c692
c3fd8ed68c0ad2a97d76fc4430447581414e7a7e
cdce8a3e723c376fc87be4d769d37092e6591972
cfd7079a9b268d84b856dc668edbb9ab9ef35312
e2ec9b77e3feb0c8f30f314ed15da2bbcde25ddc
e3e7343054bec2926d09153ad5c24036dca626d7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# https://www.volexity.com/blog/2024/01/18/ivanti-connect-secure-vpn-exploitation-new-observations/
abode-dashboard-media.s3.ap-south-1.amazonaws.com
archivevalley-media.s3.amazonaws.com
auto.c3pool.org
blaze-uk.s3.amazonaws.com
blooming.s3.amazonaws.com
book4timepublic.s3.amazonaws.com
shapefiles.fews.net.s3.amazonaws.com
192.252.183.116
030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0
4cba272d83f6ff353eb05e117a1057699200a996d483ca56fa189e9eaa6bb56c
6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01
39ead6055306739ab969a3531bde2050f556b05e500894b3cda120178f2773be
45c9578bbceb2ce2b0f10133d2f3f708e78c8b7eb3c52ad69d686e822f9aa65f
47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04
73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6
76121de43d2ded66b42ce138988631be7ee228e9f0ed7da70fec83ea8e2a5fbe
76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f
816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17
a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960
c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026
c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28
d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0
e7da21fca8f27b9d19ec90d83b4d794e5a449578eef40e53db84f718d22493a8
e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2
ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815
# https://www.volexity.com/blog/2024/01/10/active-exploitation-of-two-zero-day-vulnerabilities-in-ivanti-connect-secure-vpn/
gpoaccess.com
symantke.com
webb-institute.com
47.207.9.89
50.213.208.89
50.215.39.49
50.243.177.161
64.24.179.210
71.127.149.194
73.128.178.221
75.145.224.109
75.145.243.85
98.160.48.170
173.53.43.7
173.220.106.166
206.189.208.156
8bc8f4da98ee05c9d403d2cb76097818de0b524d90bea8ed846615e42cb031d2
9d901f1a494ffa98d967ee6ee30a46402c12a807ce425d5f51252eb69941d988
26cbb54b1feb75fe008e36285334d747428f80aacdb57badf294e597f3e9430d
e192932d834292478c9b1032543c53edfc2b252fdf7e27e4c438f4b249544eeb