Outputs from sensors - black lists of IP/domains
2008-12-09 23:22:07Our sensors are collecting big count of IP/domains each day, so we decided public IP and domain periodicaly. These lists are free for use for creating dynamic black lists based on specific type of traffic, or for testing existence of unusual activities from variety of logs.
Black lists are generated 1x per day, from data saved in last five months.
Domains/IP spreading malware throught infected web sites:
http://www.honeynet.cz/bl/WMD.txt.gz
http://www.honeynet.cz/bl/WMIP.txt.gz
IP of RFI attackers:
http://www.honeynet.cz/bl/RFIIP.txt.gz
IP attacking old Windows:
http://www.honeynet.cz/bl/NEPIP.txt.gz
IP of SSH attackers:
http://www.honeynet.cz/bl/SSHIP.txt.gz
Domains of C&C/botnets:
http://www.honeynet.cz/bl/CNCD.txt.gz
IP of C&C/botnets:
http://www.honeynet.cz/bl/CNCIP.txt.gz
IP spamming web forums:
http://www.honeynet.cz/bl/WFSIP.txt.gz
Lists contains 118795 IP/domains in this time.
Back