--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management Release : - australia ft:locale : - pt-BR ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # View Text Feeds # View Text Feeds {#ariaid-title1} * Versão de lançamento: Australia * * Atualizado 12 de mar. de 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 min. de leitura View the text Feeds that are configured in the base system. ## Antes de Iniciar Role required: sn_sec_tisc.admin ## Procedimento 1. Navigate to WorkspacesThreat Intelligence Security Center. 2. Click on Integrations icon. 3. Select Text option. The following lists the configured text feeds within the base system.{#view-oob-text-format-feeds__table_vgh_jq3_pzb__entry__3} | Threat Feed | Description | URL | |-|-|-| | Haley's Brute Force IPs | Provides a list of attacking machine IP addresses during the last 2 years sorted by IP address | | | Blockrules Emergingthreats | Emerging Threat (ET) Intelligence provides actionable threat intel feeds to identify IPs involved in suspicious and malicious activity. | | | Nuug Pop3 Groper Web | List of hosts that have tried and failed to log on to the pop3 service at bsdly.net. | [https://home.nuug.no/%7Epeter/pop3gropers.txt](https://home.nuug.no/~peter/pop3gropers.txt) | | Tor Exit Nodes | Tor Exit Nodes can be used to detect traffic coming from the TOR network. | | | Talos Intelligence IP Blacklist | Talos was formed by combining SourceFire's Vulnerability Research Team, the Cisco Threat Research and Communications group, and the Cisco Secure Applications Group. The combined expertise is backed by a sophisticated infrastructure, and Cisco's unrivaled telemetry of data that spans across networks, endpoints, cloud environments, virtual systems, and daily web and email traffic. | | | SANS | ISC provides a free analysis and warning service to thousands of Internet users and organizations. | | | Snort | Snort is the foremost Open Source Intrusion Prevention System (IPS) in the world. Snort IPS uses a series of rules that help define malicious network activity. | | | CI army | The CINS Army list is a subset of the CINS Active Threat Intelligence ruleset, and consists of IP addresses that meet one of two basic criteria: 1) The IP's recent Rogue Packet score factor is very poor, or 2) The IP has tripped a designated number of 'trusted' alerts across a given number of their Sentinels deployed around the world. | | | Proofpoint | Raw IPs for the firewall block lists. These come from: Spam nets identified by Spamhaus (www.spamhaus.org), Top Attackers listed by DShield (www.dshield.org) and Abuse.ch | | | Blocklist Greensnow | GreenSnow is a team consisting of the best specialists in computer security, GreenSnow harvests a large number of IPs from different computers located around the world.GreenSnow is comparable with SpamHaus.org for attacks of any kind except for spam. | | | CI army | The CINS Army list is a subset of the CINS Active Threat Intelligence ruleset, and consists of IP addresses that meet one of two basic criteria: 1) The IP's recent Rogue Packet score factor is very poor, or 2) The IP has tripped a designated number of 'trusted' alerts across a given number of their Sentinels deployed around the world. | | | Blocklist | www.blocklist.de is a free and voluntary service provided by a Fraud/Abuse-specialist, whose servers are often attacked via SSH-, Mail-Login-, FTP-, Webserver- and other services. | | | Tor Exit Nodes | Tor Exit Nodes can be used to detect traffic coming from the TOR network. | | | Botscout BOT IPs | BotScout helps prevent automated web scripts, known as "bots", from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. | | | Dataplane VNC RFB | IP addresses identified as initiating VNC remote frame buffer sessions. | | | Dataplane TELNET login | IP addresses identified as attempting login via TELNET password authentication. | | | Dataplane SSH password authentication | IP addresses identified as attempting login via SSH password authentication. | | | Dataplane SSH client connection | IP addresses identified as performing SSH client protocol negotiations. | | | Blockrules Emergingthreats | Emerging Threat (ET) Intelligence provides actionable threat intel feeds to identify IPs involved in suspicious and malicious activity. | | | Dataplane SMTP greeting | IP addresses identified as SMTP clients issuing unsolicited HELO or EHLO commands. | | | Dataplane SIP query | IP addresses identified as sending SIP OPTIONS queries. | | | Dataplane IP protocol 41 | IP addresses identified as open IPv4 protocol 41 relay (i.e. IPv6 over IPv4). | | | Dataplane SIP invitation | IP addresses identified as sending SIP INVITE operations. | | | Dataplane DNS CH TXT version.bind | IP addresses identified as sending DNS CH TXT VERSION.BIND queries. | | | Dataplane DNS TCP | IP addresses identified as sending DNS over TCP port 53 queries. | | | Dataplane DNS recursion desired IN ANY | IP addresses identified as sending recursive DNS IN ANY queries. | | | Dataplane DNS recursion desired | IP addresses identified as sending recursive DNS queries. | | | Phishing Database from GitHub Active Phishing Links | Data source for fetching Active Phishing Links from Phishing Database available on Github. | | | Phishing Database from GitHub Active Domains | Data source for fetching Active Domains from Phishing Database available on Github. | | | Phishing Database from GitHub Active IPs | Data source for fetching Active IPs from Phishing Database available on Github. | | | Blocklist Bots | All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots. | | | Blocklist Apache Attacks | All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks. | | | Voip Blacklist By Scopserv | Retrieve list of blocklisted ips from the Voip Blacklist. | | | Threatview Domain Blocklist | Malicious Domains identified for phishing/serving malware/command and control. | | | Threatview MD5 Hash Blocklist | MD5 hashes of malicious files or associated with - malware, ransomware, hack tools, bots etc. | | | Threatview URL Blocklist | Malicious URL's serving malware, phishing, botnets and C2. | | | Threatview SHA File Hash Blocklist | SHA hashes of files known or linked with malware execution. | | | Threatview IP Blocklist | Malicious IP Blocklist for known Bad IP addresses. | | | Threatview C2 Hunt Feed | Infrastructure hosting Command and Control Servers found during Proactive Hunt by Threatview.io | | | Threatview OSINT Threat Feed | Malicious indicators of compromise gathered from OSINT Source - Twitter and Pastebin. | | [ ] {#view-oob-text-format-feeds__table_vgh_jq3_pzb} 4. Click Edit to edit the feed.