Various lists to be used with an IP blocker.

Most of these come from several HoneyPots (Cowrie). The logs are uploaded to a main system, examined, and then automatically uploaded every hourly. The repo is compressed every 25 commits, to reduce the overall size. Logs, diff, etc. do not stay with the repo because of this.

This repo was created: 5/13/2021. https://api.github.com/repos/ShadowWhisperer/IPs


Brute Foce

Extreme    100+ connects  
High       20+ connects, but less than 100  
Medium     5+ connects, but less than 20  
Low        Less than 5 connects  

Malware

Browser         Browser Hijackers, Malvertising, Fake Alerts, etc  
Hosting         IPs used to download malware after system takeover
Hackers         Executed commands on my honeypot, after a successful connection  

Other

Ads             Used to show you advertisements
DNS             Common DNS resolvers
Scanners        Scans your IP for open ports / vulnerabilities
Trackers        Used to track what you do
Tunnel          Proxies, and VPNs