threat-intelligence auto-update

This commit is contained in:
Zelo72 2022-01-27 04:10:59 +01:00
parent 6337edbfea
commit c8e9be5fbb
2 changed files with 3025 additions and 2259 deletions

View File

@ -32,48 +32,48 @@ Initialize ...
# Download and convert Sourcelists ...
Nr | Count | Format | Source | Status | File | URL/File
1 | 3046 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 397 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
3 | 8648 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt
1 | 3096 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/phishing-filter-hosts.txt
2 | 399 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/pup-filter-hosts.txt
3 | 8608 | hosts | http | online | changed | https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt
4 | 3496 | hosts | http | online | unchanged | https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/hosts_browser
5 | 44272 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
5 | 44538 | hosts | http | online | changed | https://hole.cert.pl/domains/domains_hosts.txt
6 | 550 | hosts | http | online | unchanged | https://paulgb.github.io/BarbBlock/blacklists/hosts-file.txt
7 | 6387 | hosts | http | online | unchanged | https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt
8 | 2202 | hosts | http | online | unchanged | https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts
9 | 57 | hosts | http | online | unchanged | https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts
10 | 1115 | hosts | http | online | changed | https://raw.githubusercontent.com/davidonzo/Threat-Intel/master/lists/latestdomains.piHole.txt
11 | 945 | hosts | http | online | changed | https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt
10 | 1115 | hosts | http | online | unchanged | https://raw.githubusercontent.com/davidonzo/Threat-Intel/master/lists/latestdomains.piHole.txt
11 | 945 | hosts | http | online | unchanged | https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt
12 | 8624 | hosts | http | online | unchanged | https://raw.githubusercontent.com/guardicore/labs_campaigns/master/Autodiscover/autodiscover-tlds.txt
13 | 696 | hosts | http | online | unchanged | https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
14 | 4015 | hosts | http | online | unchanged | https://raw.githubusercontent.com/infinitytec/blocklists/master/scams-and-phishing.txt
15 | 1071 | hosts | http | online | unchanged | https://raw.githubusercontent.com/metamask/eth-phishing-detect/master/src/hosts.txt
16 | 1386 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Badd-Boyz-Hosts/master/hosts
17 | 13464 | hosts | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/hosts
18 | 3227 | hosts | http | online | changed | https://threatfox.abuse.ch/downloads/hostfile
19 | 1285 | hosts | http | online | changed | https://urlhaus.abuse.ch/downloads/hostfile/
18 | 3222 | hosts | http | online | changed | https://threatfox.abuse.ch/downloads/hostfile
19 | 1284 | hosts | http | online | changed | https://urlhaus.abuse.ch/downloads/hostfile/
20 | 883 | adblock | http | online | unchanged | https://raw.githubusercontent.com/piperun/iploggerfilter/master/filterlist
21 | 11769 | domains | http | online | unchanged | https://airvpn.org/api/dns_lists/?code=air_cryptojacking&block=0.0.0.0&style=domains
22 | 54555 | domains | http | online | unchanged | https://airvpn.org/api/dns_lists/?code=air_malware&block=0.0.0.0&style=domains
22 | 55013 | domains | http | online | changed | https://airvpn.org/api/dns_lists/?code=air_malware&block=0.0.0.0&style=domains
23 | 932 | domains | http | online | changed | https://azorult-tracker.net/api/list/domain?format=plain
24 | 898 | domains | http | online | unchanged | https://cert-agid.gov.it/download/log4shell-iocs-raw-domain.txt
25 | 9313 | domains | http | online | unchanged | https://gitlab.com/KevinThomas0/cryptoscamdb-lists/-/raw/master/cryptoscamdb-blocklist.txt
26 | 325 | domains | http | online | unchanged | https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
27 | 44282 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
28 | 74417 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl-base.txt
27 | 44538 | domains | http | online | changed | https://hole.cert.pl/domains/domains.txt
28 | 74390 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl-base.txt
29 | 823 | domains | http | online | changed | https://joewein.net/dl/bl/dom-bl.txt
30 | 2000 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_covid_domains.txt
31 | 2000 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_malicious_domains.txt
31 | 1997 | domains | http | online | changed | https://kriskintel.com/feeds/ktip_malicious_domains.txt
32 | 397 | domains | http | online | unchanged | https://kriskintel.com/feeds/ktip_ransomware_feeds.txt
33 | 2260 | domains | http | online | unchanged | https://orca.pet/notonmyshift/domains.txt
34 | 1115 | domains | http | online | changed | https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
35 | 52437 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist.txt
36 | 54726 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist_extended.txt
34 | 1115 | domains | http | online | unchanged | https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
35 | 52983 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist.txt
36 | 55286 | domains | http | online | changed | https://phishing.army/download/phishing_army_blocklist_extended.txt
37 | 1406 | domains | http | online | unchanged | https://raw.githubusercontent.com/AmnestyTech/investigations/master/2021-07-18_nso/domains.txt
38 | 323 | domains | http | online | unchanged | https://raw.githubusercontent.com/AmnestyTech/investigations/master/2021-12-16_cytrox/domains.txt
39 | 28 | domains | http | online | unchanged | https://raw.githubusercontent.com/DRSDavidSoft/additional-hosts/master/domains/blacklist/fake-domains.txt
40 | 43364 | domains | http | online | unchanged | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
40 | 43876 | domains | http | online | changed | https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADomains.txt
41 | 697 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Cryptocurrency
42 | 28784 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
42 | 28808 | domains | http | online | changed | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
43 | 147 | domains | http | online | unchanged | https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Risk
44 | 3960 | domains | http | online | unchanged | https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/NoFormatting/MD-ID-Fork.txt
45 | 18459 | domains | http | online | unchanged | https://raw.githubusercontent.com/cbuijs/shallalist/master/spyware/domains
@ -83,17 +83,17 @@ Initialize ...
49 | 514 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/CryptBot/domains.txt
50 | 137 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/IcedID/domains.txt
51 | 753 | domains | http | online | unchanged | https://raw.githubusercontent.com/hpthreatresearch/iocs/main/TA551/domains.txt
52 | 6957 | domains | http | online | unchanged | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
52 | 6960 | domains | http | online | changed | https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt
53 | 2100 | domains | http | online | unchanged | https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt
54 | 71282 | domains | http | online | unchanged | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt
55 | 279 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
55 | 253 | domains | http | online | changed | https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-NEW-today.txt
56 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_5000_domain.txt
57 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.7_germany.txt
58 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.8_domains.txt
59 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v3.9_italy.txt
60 | 10000 | domains | http | online | unchanged | https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/v4.0_uk.txt
61 | 2705 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-amnenstytech.txt
62 | 706 | domains | http | online | changed | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-certagid.txt
62 | 706 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-certagid.txt
63 | 390 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-certego.txt
64 | 1055 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-citizenlabs.txt
65 | 1810 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-csirt.txt
@ -109,27 +109,27 @@ Initialize ...
75 | 512 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-unit42-playbook.txt
76 | 23232 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-unit42-silverterrier.txt
77 | 3831 | domains | http | online | unchanged | https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-zscaler.txt
78 | 164318 | domains | http | online | unchanged | https://raw.githubusercontent.com/stamparm/aux/master/maltrail-malware-domains.txt
79 | 17219 | domains | http | online | unchanged | https://raw.githubusercontent.com/stamparm/blackbook/master/blackbook.txt
78 | 164358 | domains | http | online | changed | https://raw.githubusercontent.com/stamparm/aux/master/maltrail-malware-domains.txt
79 | 17220 | domains | http | online | changed | https://raw.githubusercontent.com/stamparm/blackbook/master/blackbook.txt
80 | 500 | domains | http | online | unchanged | https://rescure.me/rescure_domain_blacklist.txt
81 | 549 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.domain.raw
82 | 173 | domains | http | online | unchanged | https://www.botvrij.eu/data/ioclist.hostname.raw
83 | 36863 | domains | http | online | changed | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
84 | 112724 | domains | http | online | changed | https://www.usom.gov.tr/url-list.txt
83 | 36863 | domains | http | online | unchanged | https://www.stopforumspam.com/downloads/toxic_domains_whole.txt
84 | 112724 | domains | http | OFFLINE | unchanged | USE LOCAL COPY: usom.gov.tr_url-list.txt
85 | 635 | domains | local | online | unchanged | black.list.threat-intelligence
# Build threat-intelligence Domainlist ...
Stats threat-intelligence:
** Source (raw): 1213483
== Source (unique): 889692 (-323791)
-- White: 887632 (-2060)
-- White(*): 881309 (-6323)
-- Dead: 376324 (-504985)
** Source (raw): 1216099
== Source (unique): 890498 (-325601)
-- White: 888434 (-2064)
-- White(*): 882066 (-6368)
-- Dead: 377090 (-504976)
376324 unique Domains - Version 2022.0126.102100
MD5 Domains RAW: 3b019618d84457511df3fa21f498827f
377090 unique Domains - Version 2022.0127.040221
MD5 Domains RAW: a34a75e081fffd769ef7733445b82e26
# Convert threat-intelligence to Hostlist ...
@ -152,10 +152,10 @@ Prepare domain list for compiling ... done.
]
}
Start compiling threat-intelligence.adblock.raw
Original length is 354854
Length after applying transformations is 354854
The list was compressed from 354857 to 335601
Final length of the list is 335607
Original length is 355403
Length after applying transformations is 355403
The list was compressed from 355406 to 336142
Final length of the list is 336148
Writing output to /media/nas/git/rpi/pihole/blocklists/build/threat-intelligence/out/threat-intelligence.adblock
Finished compiling

File diff suppressed because it is too large Load Diff