Skip to content

Geekmaster-General/IOCs

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

79 Commits
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_destination.csv
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_destination.csv
 
 
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_ip.csv
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_ip.csv
 
 
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_origin.csv
2022-Nov-28_excessive_brute_force_burst_prev_96hrs_origin.csv
 
 
APT40_IOC_domains.csv
APT40_IOC_domains.csv
 
 
APT40_IOC_hashes.csv
APT40_IOC_hashes.csv
 
 
AbuseIBPD Link
AbuseIBPD Link
 
 
BackdoorDiplomacyAPTIOCDomain.csv
BackdoorDiplomacyAPTIOCDomain.csv
 
 
BackdoorDiplomacyAPTIOCHash.csv
BackdoorDiplomacyAPTIOCHash.csv
 
 
BackdoorDiplomacyAPTIPIOC.csv
BackdoorDiplomacyAPTIPIOC.csv
 
 
Big Head Ransomware IOCs
Big Head Ransomware IOCs
 
 
Block nanopool.csv
Block nanopool.csv
 
 
CalypsoAPTIOCDomain.csv
CalypsoAPTIOCDomain.csv
 
 
CalypsoAPTIOCHash.csv
CalypsoAPTIOCHash.csv
 
 
CalypsoAPTIPIOC.csv
CalypsoAPTIPIOC.csv
 
 
ContiRansomwareIPIOC.csv
ContiRansomwareIPIOC.csv
 
 
CrackonoshIOCHash.csv
CrackonoshIOCHash.csv
 
 
DocuSign IOCs
DocuSign IOCs
 
 
EMOTET IOC Hashes.csv
EMOTET IOC Hashes.csv
 
 
EMOTET IP IOCs.csv
EMOTET IP IOCs.csv
 
 
EMOTET URL IOCs.csv
EMOTET URL IOCs.csv
 
 
Emotet IOCs - Complete.txt
Emotet IOCs - Complete.txt
 
 
EmotetRevived20201IOCHash.csv
EmotetRevived20201IOCHash.csv
 
 
EmotetRevived2021IPIOC-2.csv
EmotetRevived2021IPIOC-2.csv
 
 
EmotetRevived2021IPIOC.csv
EmotetRevived2021IPIOC.csv
 
 
FacefishAPTIOCHash.csv
FacefishAPTIOCHash.csv
 
 
FacefishAPTIPIOC.csv
FacefishAPTIPIOC.csv
 
 
FancyBearIOCSkinnyBoyDomain.csv
FancyBearIOCSkinnyBoyDomain.csv
 
 
FancyBearIOCSkinnyBoyHashes.csv
FancyBearIOCSkinnyBoyHashes.csv
 
 
FancyBearIOCSkinnyBoyIP.csv
FancyBearIOCSkinnyBoyIP.csv
 
 
FerociousKittenAPTIOCDomain.csv
FerociousKittenAPTIOCDomain.csv
 
 
FerociousKittenAPTIOCHash.csv
FerociousKittenAPTIOCHash.csv
 
 
Greacon IOCs
Greacon IOCs
 
 
HiveRansomwareIOCIP.csv
HiveRansomwareIOCIP.csv
 
 
IPIOCs.csv
IPIOCs.csv
 
 
IranianAPTIOCHash.csv
IranianAPTIOCHash.csv
 
 
IranianAPTIPIOC.csv
IranianAPTIPIOC.csv
 
 
KimsukyAPTIOCDomain.csv
KimsukyAPTIOCDomain.csv
 
 
KimsukyAPTIPIOC.csv
KimsukyAPTIPIOC.csv
 
 
LockBit URL IOCs.csv
LockBit URL IOCs.csv
 
 
LockBit2IPIOC.csv
LockBit2IPIOC.csv
 
 
MAZE Malware IP IOCs.csv
MAZE Malware IP IOCs.csv
 
 
Malicious Bulgaria Phishing Site
Malicious Bulgaria Phishing Site
 
 
MustangPandaHashIOC.csv
MustangPandaHashIOC.csv
 
 
MustangPandaIPIOC.csv
MustangPandaIPIOC.csv
 
 
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to US Critical Infrastructure
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to US Critical Infrastructure
 
 
Phishing Email IOCs
Phishing Email IOCs
 
 
PrometheusRansomwareIOCHash.csv
PrometheusRansomwareIOCHash.csv
 
 
README.md
README.md
 
 
RanzyIOCHash.csv
RanzyIOCHash.csv
 
 
Redeemer Ransomware IOC's.txt
Redeemer Ransomware IOC's.txt
 
 
Russian C2 servers from Vulkan Files Leak
Russian C2 servers from Vulkan Files Leak
 
 
SSH Brute Force Attack IOCs.csv
SSH Brute Force Attack IOCs.csv
 
 
STOPRansomwareIOCHash.csv
STOPRansomwareIOCHash.csv
 
 
STOPRansomwareIOCURL.csv
STOPRansomwareIOCURL.csv
 
 
SharpPandaAPTIOCHash.csv
SharpPandaAPTIOCHash.csv
 
 
SharpPandaAPTIPIOC.csv
SharpPandaAPTIPIOC.csv
 
 
SidecopyAPTIOCDomain.csv
SidecopyAPTIOCDomain.csv
 
 
SidecopyAPTIOCHash.csv
SidecopyAPTIOCHash.csv
 
 
SidecopyAPTIPIOC.csv
SidecopyAPTIPIOC.csv
 
 
Tycoon2FA_URL_IOC.csv
Tycoon2FA_URL_IOC.csv
 
 
Volt_Typhoon_SHA256_TI.csv
Volt_Typhoon_SHA256_TI.csv
 
 
ipblocklist.xlsx
ipblocklist.xlsx
 
 

Repository files navigation

IOCs

This is for storing the IOCs I collect during my usual day-to-day security activities, and from OSINT research.

All information is public.

All sensitive information has already been redacted.

I will update this data regularly.

IP's already reported to AbuseIPDB.

The formatted CSV files are ready for upload into Microsoft Defender for Endpoint Custom Indicators lists.

About

Storage for the IOCs I collect

Topics

threat-hunting threat-intelligence ransomware-resources phishing-sites indicators-of-compromise advanced-persistent-threat-data malware-resources

Resources

Readme
Activity

Stars

8 stars

Watchers

1 watching

Forks

1 fork
Report repository