Important
The Lists/ folder is the only actively maintained section.
BruteForce/, Malware/, Other/ are legacy and no longer updated. Please update any hardcoded URLs to use Lists/ instead.
This project has grown from counting Cowrie logs to a custom honeypot stack and log analyzer. Lists now include a .csv version with extended details. Terminology is now correct.
Threat feed collected from honeypots running across multiple locations. This repo is updated hourly and compressed periodically to keep the size small. Diffs, pull requests, etc are cleared.
| File | Info |
|---|---|
| Ads | Serves advertisements |
| DNS | Common DNS resolvers |
| Probes | Probed, but not full connect (5+ time) |
| Scanners | Internet scanning companies |
| Threats | Active threats - exploit attempts, compromised systems, malware droppers, etc |
| Threats_Unclassified | Seen, but not classified |
| Trackers | Used to track user activity |
| Tunnels | Proxies & VPNs |
