feeds.cfg

[_default]
impact = low
confidence = low
type = inbound
campaign = combine

[zeustracker]
impact = medium
confidence = high
campaign = zeustracker
reference = https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist
source = ZeusTrackerIPs
type = botnet

[sans]
impact = medium
confidence = medium
campaign = sans
reference = https://isc.sans.edu/ipsascii.html
source = Sans_ISC
type = inbound

[nothink_malware_dns]
impact = medium
confidence = medium
campaign = nothink
reference = http://www.nothink.org/blacklist/blacklist_malware_dns.txt
source = nothink.org
type = malware_dns

[alienvault]
impact = low
confidence = low
campaign = alienvault
reference = http://reputation.alienvault.com/reputation.data
source = alienvault.com
type = outbound

[malwaredomainslist]
impact = low
confidence = low
campaign = malwaredomainslist
reference = file://updates.csv
source = malwaredomainslist.com
type = outbound