From 5697f22223e2415d926721adbfba0491a653cdea Mon Sep 17 00:00:00 2001 From: Attacks Date: Fri, 8 Aug 2025 09:27:46 +0000 Subject: [PATCH] README --- README.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/README.md b/README.md index e69de29b..2f1de3a1 100644 --- a/README.md +++ b/README.md @@ -0,0 +1,26 @@ +# Malicious IP Detector + +This project generates a daily list of **malicious IP addresses** targeting our servers. +The list is built by aggregating and analyzing data from: + +- External blacklists +- Honeypot logs +- Internal heuristics and detection rules + +The resulting IP list helps us identify and block hostile traffic efficiently. + +## Features + +- Hourly generation of malicious IPs +- Combines external and internal intelligence +- Useful for automated firewall updates or threat analysis + +## Usage + +Output is written to a plain text file containing one IP address per line. +The raw version is on https://git.1984.is/1984/attacks-today/raw/branch/main/malicious.txt +It is generated every hour, and can be downloaded and used to set block rules in a firewall of choice. + +## Disclaimer + +This tool is intended for internal use. Accuracy depends on third-party lists and custom assumptions.