curben
/
botnet-filter
mirror of https://gitlab.com/malware-filter/botnet-filter
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

style: table

This commit is contained in:
Ming Di Leom 2025-02-16 01:31:40 +00:00
parent 894b8c857d
commit efffbe59f8
No known key found for this signature in database
GPG Key ID: 32D3E28E96A695E8
1 changed files with 12 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
README.md
View File

@ -21,16 +21,16 @@ A blocklist of botnet IPs, based on the **Botnet C2 IOCs** of Abuse.ch [Feodo Tr
This blocklist is only useful as a last line of defence _after_ being infected. To avoid infection in the first place, consider using [urlhaus-filter](https://gitlab.com/malware-filter/urlhaus-filter).
| Client | mirror 1 | mirror 2 | mirror 3 | mirror 4 | mirror 5 | mirror 6 |
| ----------------------------------------------------------- | ---------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------ |
| uBlock Origin, [IP-based](#ip-based) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter.txt) | [link](https://malware-filter.pages.dev/botnet-filter.txt) | [link](https://botnet-filter.pages.dev/botnet-filter.txt) |
| [AdGuard Home](#domain-based-adguard-home) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-agh.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-agh.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-agh.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-agh.txt) | [link](https://malware-filter.pages.dev/botnet-filter-agh.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-agh.txt) |
| [AdGuard (browser extension)](#ip-based-adguard) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-ag.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-ag.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-ag.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-ag.txt) | [link](https://malware-filter.pages.dev/botnet-filter-ag.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-ag.txt) |
| [Vivaldi](#ip-based-vivaldi) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-vivaldi.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-vivaldi.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-vivaldi.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-vivaldi.txt) | [link](https://malware-filter.pages.dev/botnet-filter-vivaldi.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-vivaldi.txt) |
| [dnscrypt-proxy](#dnscrypt-proxy) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://malware-filter.pages.dev/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-dnscrypt-blocked-ips.txt) |
| [Snort2](#snort2), [Snort3](#snort3), [Suricata](#suricata) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-suricata.rules) | [link](https://curbengh.github.io/malware-filter/botnet-filter-suricata.rules) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-suricata.rules) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-suricata.rules) | [link](https://malware-filter.pages.dev/botnet-filter-suricata.rules) | [link](https://botnet-filter.pages.dev/botnet-filter-suricata.rules) |
| [Splunk](#splunk) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-splunk.csv) | [link](https://curbengh.github.io/malware-filter/botnet-filter-splunk.csv) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-splunk.csv) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-splunk.csv) | [link](https://malware-filter.pages.dev/botnet-filter-splunk.csv) | [link](https://botnet-filter.pages.dev/botnet-filter-splunk.csv) |
| [Apache](#htaccess) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-htaccess.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-htaccess.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-htaccess.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-htaccess.txt) | [link](https://malware-filter.pages.dev/botnet-filter-htaccess.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-htaccess.txt) |
| Client | mirror 1 | mirror 2 | mirror 3 | mirror 4 | mirror 5 | mirror 6 |
| --- | --- | --- | --- | --- | --- | --- |
| uBlock Origin, [IP-based](#ip-based) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter.txt) | [link](https://malware-filter.pages.dev/botnet-filter.txt) | [link](https://botnet-filter.pages.dev/botnet-filter.txt) |
| [AdGuard Home](#domain-based-adguard-home) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-agh.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-agh.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-agh.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-agh.txt) | [link](https://malware-filter.pages.dev/botnet-filter-agh.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-agh.txt) |
| [AdGuard (browser extension)](#ip-based-adguard) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-ag.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-ag.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-ag.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-ag.txt) | [link](https://malware-filter.pages.dev/botnet-filter-ag.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-ag.txt) |
| [Vivaldi](#ip-based-vivaldi) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-vivaldi.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-vivaldi.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-vivaldi.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-vivaldi.txt) | [link](https://malware-filter.pages.dev/botnet-filter-vivaldi.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-vivaldi.txt) |
| [dnscrypt-proxy](#dnscrypt-proxy) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://malware-filter.pages.dev/botnet-filter-dnscrypt-blocked-ips.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-dnscrypt-blocked-ips.txt) |
| [Snort2](#snort2), [Snort3](#snort3), [Suricata](#suricata) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-suricata.rules) | [link](https://curbengh.github.io/malware-filter/botnet-filter-suricata.rules) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-suricata.rules) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-suricata.rules) | [link](https://malware-filter.pages.dev/botnet-filter-suricata.rules) | [link](https://botnet-filter.pages.dev/botnet-filter-suricata.rules) |
| [Splunk](#splunk) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-splunk.csv) | [link](https://curbengh.github.io/malware-filter/botnet-filter-splunk.csv) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-splunk.csv) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-splunk.csv) | [link](https://malware-filter.pages.dev/botnet-filter-splunk.csv) | [link](https://botnet-filter.pages.dev/botnet-filter-splunk.csv) |
| [Apache](#htaccess) | [link](https://malware-filter.gitlab.io/malware-filter/botnet-filter-htaccess.txt) | [link](https://curbengh.github.io/malware-filter/botnet-filter-htaccess.txt) | [link](https://curbengh.github.io/botnet-filter/botnet-filter-htaccess.txt) | [link](https://malware-filter.gitlab.io/botnet-filter/botnet-filter-htaccess.txt) | [link](https://malware-filter.pages.dev/botnet-filter-htaccess.txt) | [link](https://botnet-filter.pages.dev/botnet-filter-htaccess.txt) |
For other programs, see [Compatibility](https://gitlab.com/malware-filter/malware-filter/wikis/compatibility) page in the wiki.
@ -38,7 +38,6 @@ Check out my other filters:
- [urlhaus-filter](https://gitlab.com/malware-filter/urlhaus-filter)
- [phishing-filter](https://gitlab.com/malware-filter/phishing-filter)
- [pup-filter](https://gitlab.com/malware-filter/pup-filter)
- [tracking-filter](https://gitlab.com/malware-filter/tracking-filter)
- [vn-badsite-filter](https://gitlab.com/malware-filter/vn-badsite-filter)
@ -125,8 +124,8 @@ Or use [malware-filter add-on](https://splunkbase.splunk.com/app/6970) to instal
Columns:
| ip | message | updated |
| ------- | -------------------------------- | -------------------- |
| ip | message | updated |
| --- | --- | --- |
| 1.2.3.4 | botnet-filter botnet IP detected | 2022-12-21T12:34:56Z |
## htaccess