threat-intelligence auto-update

This commit is contained in:
Zelo72 2021-10-24 18:06:36 +02:00
parent 2d9ee31af6
commit d546aa9bf0
2 changed files with 2961 additions and 2872 deletions

File diff suppressed because it is too large Load Diff

View File

@ -24,11 +24,11 @@ Initialize ...
# Download and convert Sourcelists ...
Nr | Count | Format | Source | Status | File | URL/File
1 | 6447 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 409 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
1 | 6467 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 404 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
3 | 8884 | hosts | http | online | unchanged | https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt
4 | 3496 | hosts | http | online | unchanged | https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/hosts_browser
5 | 33682 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
5 | 33700 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
6 | 550 | hosts | http | online | unchanged | https://paulgb.github.io/BarbBlock/blacklists/hosts-file.txt
7 | 5997 | hosts | http | online | unchanged | https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt
8 | 2204 | hosts | http | online | unchanged | https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts
@ -41,26 +41,26 @@ Initialize ...
15 | 1072 | hosts | http | online | unchanged | https://raw.githubusercontent.com/metamask/eth-phishing-detect/master/src/hosts.txt
16 | 1386 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Badd-Boyz-Hosts/master/hosts
17 | 13465 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/hosts
18 | 4431 | hosts | http | online | changed | https://threatfox.abuse.ch/downloads/hostfile
18 | 4431 | hosts | http | online | unchanged | https://threatfox.abuse.ch/downloads/hostfile
19 | 883 | adblock | http | online | unchanged | https://raw.githubusercontent.com/piperun/iploggerfilter/master/filterlist
20 | 914 | domains | http | online | changed | https://azorult-tracker.net/api/list/domain?format=plain
21 | 122584 | domains | http | online | unchanged | https://blocklist.cyberthreatcoalition.org/vetted/domain.txt
22 | 549 | domains | http | online | unchanged | https://feeds.alphasoc.net/ryuk.txt
23 | 9233 | domains | http | online | unchanged | https://gitlab.com/KevinThomas0/cryptoscamdb-lists/-/raw/master/cryptoscamdb-blocklist.txt
24 | 361 | domains | http | online | unchanged | https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
25 | 33682 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
26 | 73301 | domains | http | online | unchanged | https://joewein.net/dl/bl/dom-bl-base.txt
27 | 772 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl.txt
28 | 1999 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_covid_domains.txt
29 | 1997 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_malicious_domains.txt
25 | 33700 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
26 | 73297 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl-base.txt
27 | 771 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl.txt
28 | 1999 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_covid_domains.txt
29 | 1994 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_malicious_domains.txt
30 | 397 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_ransomware_feeds.txt
31 | 2245 | domains | http | online | unchanged | https://orca.pet/notonmyshift/domains.txt
32 | 44 | domains | http | online | unchanged | https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
33 | 44812 | domains | http | online | unchanged | https://phishing.army/download/phishing_army_blocklist.txt
34 | 54454 | domains | http | online | unchanged | https://phishing.army/download/phishing_army_blocklist_extended.txt
33 | 44769 | domains | http | online | unchanged | https://phishing.army/download/phishing_army_blocklist.txt
34 | 54395 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist_extended.txt
35 | 1406 | domains | http | online | unchanged | https://raw.githubusercontent.com/AmnestyTech/investigations/master/2021-07-18_nso/domains.txt
36 | 27 | domains | http | online | unchanged | https://raw.githubusercontent.com/DRSDavidSoft/additional-hosts/master/domains/blacklist/fake-domains.txt
37 | 35464 | domains | http | online | unchanged | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
37 | 33709 | domains | http | online | changed | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
38 | 675 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Cryptocurrency
39 | 22769 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
40 | 179 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Risk
@ -71,10 +71,10 @@ Initialize ...
45 | 434 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/CryptBot/domains.txt
46 | 137 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/IcedID/domains.txt
47 | 644 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/TA551/domains.txt
48 | 3247 | domains | http | online | unchanged | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
48 | 3287 | domains | http | online | changed | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
49 | 2079 | domains | http | online | unchanged | https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt
50 | 71289 | domains | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt
51 | 350 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
51 | 537 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
52 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_5000_domain.txt
53 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_germany.txt
54 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.8_domains.txt
@ -100,22 +100,22 @@ Initialize ...
74 | 500 | domains | http | online | unchanged | https://rescure.me/rescure_domain_blacklist.txt
75 | 77 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.domain.raw
76 | 29 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.hostname.raw
77 | 35080 | domains | http | online | changed | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
78 | 101690 | domains | http | online | changed | https://www.usom.gov.tr/url-list.txt
77 | 35080 | domains | http | online | unchanged | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
78 | 101690 | domains | http | OFFLINE | unchanged | USE LOCAL COPY: usom.gov.tr_url-list.txt
79 | 29 | domains | local | online | unchanged | black.list.threat-intelligence
# Build threat-intelligence Domainlist ...
Stats threat-intelligence:
** Source (raw): 1190973
== Source (unique): 862550 (-328423)
-- White: 861778 (-772)
-- White(*): 860130 (-1648)
-- Dead: 369818 (-490312)
** Source (raw): 1189386
== Source (unique): 862229 (-327157)
-- White: 861456 (-773)
-- White(*): 859792 (-1664)
-- Dead: 370005 (-489787)
369818 unique Domains - Version 2021.1024.120118
MD5 Domains RAW: 35bf1f1d9e5087348c6f55072adf746f
370005 unique Domains - Version 2021.1024.180124
MD5 Domains RAW: 94e01b763c49eabd5daa86595bc9ec01
# Convert threat-intelligence to Hostlist ...
@ -141,10 +141,10 @@ Prepare domain list for compiling ... done.
]
}
Start compiling threat-intelligence.adblock.raw
Original length is 349575
Length after applying transformations is 349575
The list was compressed from 349578 to 321299
Final length of the list is 321305
Original length is 349787
Length after applying transformations is 349787
The list was compressed from 349790 to 321388
Final length of the list is 321394
Writing output to /media/nas/git/rpi/pihole/blocklists/build/threat-intelligence/out/threat-intelligence.adblock
Finished compiling