attacks-today/README.md

Malicious IP Detector

This project generates a daily list of malicious IP addresses targeting our servers.
The list is built by aggregating and analyzing data from:

• External blacklists
• Honeypot logs
• Internal heuristics and detection rules

The resulting IP list helps us identify and block hostile traffic efficiently.

Features

• Hourly generation of malicious IPs
• Combines external and internal intelligence
• Useful for automated firewall updates or threat analysis

Usage

Output is written to a plain text file containing one IP address per line. The raw version is on https://git.1984.is/1984/attacks-today/raw/branch/main/malicious.txt It is generated every hour, and can be downloaded and used to set block rules in a firewall of choice.

Disclaimer

This tool is intended for internal use. Accuracy depends on third-party lists and custom assumptions.