threat-intelligence auto-update

This commit is contained in:
Zelo72 2021-11-08 00:09:01 +01:00
parent ba09f06398
commit 37123e0fd6
2 changed files with 3004 additions and 3015 deletions

File diff suppressed because it is too large Load Diff

View File

@ -34,16 +34,16 @@ Initialize ...
# Download and convert Sourcelists ...
Nr | Count | Format | Source | Status | File | URL/File
1 | 7105 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 416 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
3 | 10894 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt
1 | 7186 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 413 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
3 | 10844 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt
4 | 3496 | hosts | http | online | unchanged | https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/hosts_browser
5 | 35007 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
5 | 35033 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
6 | 550 | hosts | http | online | unchanged | https://paulgb.github.io/BarbBlock/blacklists/hosts-file.txt
7 | 6025 | hosts | http | online | unchanged | https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt
8 | 2204 | hosts | http | online | unchanged | https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts
9 | 59 | hosts | http | online | unchanged | https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts
10 | 45 | hosts | http | online | changed | https://raw.githubusercontent.com/davidonzo/Threat-Intel/master/lists/latestdomains.piHole.txt
10 | 45 | hosts | http | online | unchanged | https://raw.githubusercontent.com/davidonzo/Threat-Intel/master/lists/latestdomains.piHole.txt
11 | 1031 | hosts | http | online | unchanged | https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt
12 | 8624 | hosts | http | online | unchanged | https://raw.githubusercontent.com/guardicore/labs_campaigns/master/Autodiscover/autodiscover-tlds.txt
13 | 695 | hosts | http | online | unchanged | https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
@ -51,7 +51,7 @@ Initialize ...
15 | 1072 | hosts | http | online | unchanged | https://raw.githubusercontent.com/metamask/eth-phishing-detect/master/src/hosts.txt
16 | 1386 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Badd-Boyz-Hosts/master/hosts
17 | 13465 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/hosts
18 | 1271 | hosts | http | online | changed | https://urlhaus.abuse.ch/downloads/hostfile/
18 | 1292 | hosts | http | online | changed | https://urlhaus.abuse.ch/downloads/hostfile/
19 | 4554 | hosts | http | online | changed | https://threatfox.abuse.ch/downloads/hostfile
20 | 883 | adblock | http | online | unchanged | https://raw.githubusercontent.com/piperun/iploggerfilter/master/filterlist
21 | 917 | domains | http | online | changed | https://azorult-tracker.net/api/list/domain?format=plain
@ -59,33 +59,33 @@ Initialize ...
23 | 549 | domains | http | online | unchanged | https://feeds.alphasoc.net/ryuk.txt
24 | 9233 | domains | http | online | unchanged | https://gitlab.com/KevinThomas0/cryptoscamdb-lists/-/raw/master/cryptoscamdb-blocklist.txt
25 | 355 | domains | http | online | unchanged | https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
26 | 35007 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
27 | 73971 | domains | http | online | unchanged | https://joewein.net/dl/bl/dom-bl-base.txt
28 | 1226 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl.txt
29 | 1999 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_covid_domains.txt
30 | 1999 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_malicious_domains.txt
26 | 35033 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
27 | 73769 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl-base.txt
28 | 1181 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl.txt
29 | 2000 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_covid_domains.txt
30 | 1998 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_malicious_domains.txt
31 | 397 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_ransomware_feeds.txt
32 | 2245 | domains | http | online | unchanged | https://orca.pet/notonmyshift/domains.txt
33 | 45 | domains | http | online | changed | https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
34 | 47431 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist.txt
35 | 57502 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist_extended.txt
33 | 45 | domains | http | online | unchanged | https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
34 | 47769 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist.txt
35 | 57806 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist_extended.txt
36 | 1406 | domains | http | online | unchanged | https://raw.githubusercontent.com/AmnestyTech/investigations/master/2021-07-18_nso/domains.txt
37 | 27 | domains | http | online | unchanged | https://raw.githubusercontent.com/DRSDavidSoft/additional-hosts/master/domains/blacklist/fake-domains.txt
38 | 34833 | domains | http | online | unchanged | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
38 | 34198 | domains | http | online | changed | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
39 | 675 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Cryptocurrency
40 | 24589 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
40 | 24611 | domains | http | online | changed | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
41 | 179 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Risk
42 | 3960 | domains | http | online | unchanged | https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/NoFormatting/MD-ID-Fork.txt
43 | 18459 | domains | http | online | unchanged | https://raw.githubusercontent.com/cbuijs/shallalist/master/spyware/domains
44 | 13908 | domains | http | online | unchanged | https://raw.githubusercontent.com/cbuijs/ut1/master/cryptojacking/domains
45 | 168661 | domains | http | online | unchanged | https://raw.githubusercontent.com/cbuijs/ut1/master/malware/domains
45 | 168661 | domains | http | online | changed | https://raw.githubusercontent.com/cbuijs/ut1/master/malware/domains
46 | 434 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/CryptBot/domains.txt
47 | 137 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/IcedID/domains.txt
48 | 657 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/TA551/domains.txt
49 | 3827 | domains | http | online | unchanged | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
49 | 3830 | domains | http | online | changed | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
50 | 2079 | domains | http | online | unchanged | https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt
51 | 71288 | domains | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt
52 | 672 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
52 | 1133 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
53 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_5000_domain.txt
54 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_germany.txt
55 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.8_domains.txt
@ -111,8 +111,8 @@ Initialize ...
75 | 500 | domains | http | online | unchanged | https://rescure.me/rescure_domain_blacklist.txt
76 | 508 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.domain.raw
77 | 90 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.hostname.raw
78 | 35158 | domains | http | online | unchanged | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
79 | 102915 | domains | http | online | changed | https://www.usom.gov.tr/url-list.txt
78 | 35165 | domains | http | online | changed | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
79 | 102979 | domains | http | online | changed | https://www.usom.gov.tr/url-list.txt
80 | 56177 | domains | http | online | unchanged | https://airvpn.org/api/dns_lists/?code=air_malware&block=0.0.0.0&style=domains
81 | 11527 | domains | http | online | unchanged | https://airvpn.org/api/dns_lists/?code=air_cryptojacking&block=0.0.0.0&style=domains
82 | 139 | domains | local | online | unchanged | black.list.threat-intelligence
@ -121,15 +121,15 @@ Initialize ...
Stats threat-intelligence:
** Source (raw): 1276371
== Source (unique): 872257 (-404114)
-- Exclude: 872252 (-5)
-- White: 871480 (-772)
-- White(*): 865615 (-5865)
-- Dead: 367892 (-497723)
** Source (raw): 1276789
== Source (unique): 872765 (-404024)
-- Exclude: 872760 (-5)
-- White: 871984 (-776)
-- White(*): 866110 (-5874)
-- Dead: 368618 (-497492)
367892 unique Domains - Version 2021.1107.120147
MD5 Domains RAW: e955c42a9e3c0377b7704e6179ecc94e
368618 unique Domains - Version 2021.1108.000248
MD5 Domains RAW: 3d84c2cedc47a39048024e43d8c54c64
# Convert threat-intelligence to Hostlist ...
@ -152,10 +152,10 @@ Prepare domain list for compiling ... done.
]
}
Start compiling threat-intelligence.adblock.raw
Original length is 348710
Length after applying transformations is 348710
The list was compressed from 348713 to 319380
Final length of the list is 319386
Original length is 349443
Length after applying transformations is 349443
The list was compressed from 349446 to 319369
Final length of the list is 319375
Writing output to /media/nas/git/rpi/pihole/blocklists/build/threat-intelligence/out/threat-intelligence.adblock
Finished compiling