Zeus.Blocklist: Retrieves Zeus Blocklist (IP/FQDN/URL)

In hrbrmstr/netintel: Various network intelligence routines

Description

Retrieves Zeus Blocklist (IP/FQDN/URL)

Usage

Zeus.Blocklist(refresh = FALSE,
  domains_url = "https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist",
  ips_url = "https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist",
  urls_url = "https://zeustracker.abuse.ch/blocklist.php?download=compromised")

Arguments

refresh	refresh the database? (bool)
domains_url	Zeus domains blocklist URL (chr) - defaults to https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
ips_url	Zeus IP blocklist URL (chr) - defaults to https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist
urls_url	Zeus compromised URLs blocklist URL (chr) - defaults to https://zeustracker.abuse.ch/blocklist.php?download=compromised

Details

The Zeus blocklist refreshes regularly, but the onus is on the caller to force a refresh. First-time call will setup a cache directory & file in the user's home directory, download & generate the data frame then write the data frame out as an R object. Future calls will just re-read this data frame unless refresh == TRUE should the function refresh the database.

Value

List of three singe-column data frames, one for each blocklist

• domains - Zeus domains (column name: domain)

• ips - Zeus ips (column name: IP)

• urls - Zeus domains (column name: URL)

See Also

Zeus blocklist info - https://zeustracker.abuse.ch/blocklist.php

hrbrmstr/netintel documentation built on May 17, 2019, 5:11 p.m.