62 lines
1.6 KiB
Plaintext
62 lines
1.6 KiB
Plaintext
#
|
|
# atlas_fastflux_2d
|
|
#
|
|
# ipv4 hash:ip ipset
|
|
#
|
|
# [ATLAS Fastflux] (https://atlas.arbor.net/summary/fastflux)
|
|
# - Fast flux hosting is a technique where the nodes in a
|
|
# botnet are used as the endpoints in a website hosting
|
|
# scheme. The DNS records change frequently, often every few
|
|
# minutes, to point to new bots. The actual nodes themselves
|
|
# simply proxy the request back to the central hosting
|
|
# location. This gives the botnet a robust hosting
|
|
# infrastructure. Many different kinds of botnets use
|
|
# fastflux DNS techniques, for malware hosting, for illegal
|
|
# content hosting, for phishing site hosting, and other such
|
|
# activities. These hosts are likely to be infected with some
|
|
# form of malware.
|
|
#
|
|
# Maintainer : Arbor Networks
|
|
# Maintainer URL : https://atlas.arbor.net/
|
|
# List source URL : https://atlas.arbor.net/summary/fastflux.csv
|
|
# Source File Date: Mon Nov 21 00:51:53 UTC 2016
|
|
#
|
|
# Category : attacks
|
|
# Version : 206
|
|
#
|
|
# This File Date : Mon Nov 21 06:52:03 UTC 2016
|
|
# Update Frequency: 1 day
|
|
# Aggregation : 2 days
|
|
# Entries : 21 unique IPs
|
|
#
|
|
# Full list analysis, including geolocation map, history,
|
|
# retention policy, overlaps with other lists, etc.
|
|
# available at:
|
|
#
|
|
# http://iplists.firehol.org/?ipset=atlas_fastflux_2d
|
|
#
|
|
# Generated by FireHOL's update-ipsets.sh
|
|
# Processed with FireHOL's iprange
|
|
#
|
|
23.46.249.160
|
|
52.216.0.202
|
|
52.216.1.42
|
|
52.216.17.10
|
|
52.216.17.18
|
|
52.216.80.10
|
|
52.216.80.18
|
|
52.216.80.178
|
|
52.216.225.2
|
|
52.216.225.186
|
|
52.216.226.106
|
|
54.231.11.114
|
|
54.231.49.106
|
|
54.231.73.57
|
|
54.231.88.9
|
|
54.231.114.26
|
|
54.231.120.17
|
|
104.95.61.235
|
|
104.96.218.15
|
|
104.102.61.194
|
|
104.106.249.50
|