Samstag, 25. Juli 2015

Announcement: dnsbl.sendmespam-ids.info

I found it very interesting that the majority of the IP addresses hitting my honeypot have a good reputation, although they trying sql injections, code execution, telnet attacks or email spamming.

So I played around with

 and set up my own blacklist. Currently it has 400 unique IP addresses seen in all sorts of attacks. I am not done with it, but it is available now. So if you have any questions or improvment ideas, well, just let me know.

 dnsbl.sendmespam-ids.info

and of course let me know if there is any issue.