README

README.md

@@ -0,0 +1,26 @@
+# Malicious IP Detector
+
+This project generates a daily list of **malicious IP addresses** targeting our servers.  
+The list is built by aggregating and analyzing data from:
+
+- External blacklists
+- Honeypot logs
+- Internal heuristics and detection rules
+
+The resulting IP list helps us identify and block hostile traffic efficiently.
+
+## Features
+
+- Hourly generation of malicious IPs
+- Combines external and internal intelligence
+- Useful for automated firewall updates or threat analysis
+
+## Usage
+
+Output is written to a plain text file containing one IP address per line.
+The raw version is on https://git.1984.is/1984/attacks-today/raw/branch/main/malicious.txt
+It is generated every hour, and can be downloaded and used to set block rules in a firewall of choice.
+
+## Disclaimer
+
+This tool is intended for internal use. Accuracy depends on third-party lists and custom assumptions.