{"id":21905099,"url":"https://github.com/emberstack/threat-feed","last_synced_at":"2025-04-15T23:21:59.028Z","repository":{"id":37622540,"uuid":"430235004","full_name":"emberstack/threat-feed","owner":"emberstack","description":"Repository for curated threat feeds","archived":false,"fork":false,"pushed_at":"2024-11-20T00:50:38.000Z","size":60616,"stargazers_count":24,"open_issues_count":8,"forks_count":3,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-11-20T01:30:48.676Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/emberstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-11-20T23:57:29.000Z","updated_at":"2024-11-20T00:50:42.000Z","dependencies_parsed_at":"2023-12-27T01:31:31.673Z","dependency_job_id":"ba3f996a-5a52-4632-878a-1c53d97a5219","html_url":"https://github.com/emberstack/threat-feed","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/emberstack%2Fthreat-feed","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/emberstack%2Fthreat-feed/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/emberstack%2Fthreat-feed/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/emberstack%2Fthreat-feed/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/emberstack","download_url":"https://codeload.github.com/emberstack/threat-feed/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":226949244,"owners_count":17708023,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-28T16:29:18.218Z","updated_at":"2024-11-28T16:29:18.758Z","avatar_url":"https://github.com/emberstack.png","language":"C#","readme":"# Threat Feed\nThis repository contains a multi-format feed of threat sources (Advertising, Malware, Phishing, etc.) that can be imported in applications or appliances to filter or block traffic.\n\n[![Pipeline](https://github.com/emberstack/threat-feed/actions/workflows/pipeline.yaml/badge.svg)](https://github.com/emberstack/threat-feed/actions/workflows/pipeline.yaml)\n[![license](https://img.shields.io/github/license/emberstack/threat-feed.svg?style=flat-square)](LICENSE)\n\n## Support\nIf you need help, want to ask a question or submit and idea, please join the [Discussions](https://github.com/emberstack/threat-feed/discussions) on GitHub.\nIf you have a bug please feel free to open an [Issue](https://github.com/emberstack/threat-feed/issues) on GitHub.  \n\n## Deployment\n\nUpdated lists can be found in the `Feed` directory and are grouped by format and category.\n\nCurrent formats:\n- `List` - Simple list of threat sources. Compatible with applications that can import lists with one item per line. (Example: FortiOS)\n- `HostsFile` (`Work in progress`) - Hosts file containing DNS mappings for threats to a non-routable meta-address (`0.0.0.0`)\n\nCategories are dynamic (for example `Advertising` - for Ad blockers), but there is also a `Generic` category which includes all threats.\n\nYou can download these files from GitHub directly or use a raw link to have applications download the latest version periodically (link format is https://raw.githubusercontent.com/emberstack/threat-feed/main/Feed/ `\u003cformat\u003e` / `\u003cfile\u003e`).\n\nFor example, to import the latest Generic (unified list of all categories) into FortiOS, use https://raw.githubusercontent.com/emberstack/threat-feed/main/Feed/List/ThreatFeed.Domains.Generic.txt\n\n## Threat Sources\n\nThe sources for the feeds are either externally stable lists (lists that are maintained or generally accepted as containing little or no false data) and the curated lists provided by the EmberStack team or contributors.\n\n\n\nWe give credit and our respect to all parties involved in providing and maintaining external sources of threats.\n\nYou can view the sources in (`src/ES.ThreatFeed/threat-feeds.json`).\nBelow is a list of sources and a description for each:\n| Source                               | Type and Category                                | Description                                             |\n| ------------------------------------ | ------------------------------------------------ | ------------------------------------------------------- |\n| Steven Black's Hosts File            | Type: Domain threats. Categories: `Advertising`  | Source Home: https://github.com/StevenBlack/hosts \u003cbr/\u003e This reputable source is used in a lot of applications, including `Pi-hole`. |\n| EmberStack's collections            | Type: Domain threats. Categories: `Advertising`  | Source Home: https://github.com/emberstack/threat-feed \u003cbr/\u003e This collection of threats is manually curated by the ES team and validated against multiple threat mitigating systems. |\n| AdAway default blocklist            | Type: Domain threats. Categories: `Advertising`  | Source Home: https://github.com/AdAway/adaway.github.io/ |\n| The Firebog            | Type: Domain threats. Categories: `Advertising`  | Source Home: https://firebog.net/ |\n| Ad filter list by Disconnect            | Type: Domain threats. Categories: `Advertising`  | Source Home: https://disconnect.me/ |\n\n### Update Frequency\n\nAll feeds are updated at least once a day (the nightly build), if there are changes either to the external sources or ES's collections.\nIf you're using these feeds from applications that automatically update based on URL, we suggest setting an update interval of one hour.\n\n## Contributing\n\nIf you wish to contribute to this repository, please let us know in the [Discussions](https://github.com/emberstack/threat-feed/discussions) tab on GitHub what your idea is, before opening an issue. We're still working on establishing a good `Contributing Guide`.","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Femberstack%2Fthreat-feed","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Femberstack%2Fthreat-feed","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Femberstack%2Fthreat-feed/lists"}