Bug 14664 - Threatfox IPS list now needs API/Subscription code.
Summary: Threatfox IPS list now needs API/Subscription code.
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: - Unknown - - Unknown -
Assignee: Assigned to nobody - feel free to grab it and work on it
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-10-26 10:47 UTC by Adam Gibbons
Modified: 2026-10-29 22:46 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Adam Gibbons 2026-10-26 10:47:21 UTC 
As of 21/10/2026 Abuse.ch needs a API key to download their lists.

News link:
https://www.linkedin.com/posts/abuse-ch_authenticate-steadyplatform-steadysignal-activity-7518660733203832832-ohAX

This includes ThreatFox which will not receive updates unless v2 of their URL is used. Feodo Tracker seems to not need this. But as of right now the Feodo Tracker only contains 5 entries anyway.
Comment 1 Michael Tremer 2026-10-29 22:46:32 UTC 
The ThreatFox ruleset source requires the Auth-Key now (commit ed825bc835, "ruleset-sources: Require an Auth-Key for ThreatFox downloads"), and it is not offered without it. Closing this as fixed.