Samstag, 25. Juli 2015


I found it very interesting that the majority of the IP addresses hitting my honeypot have a good reputation, although they trying sql injections, code execution, telnet attacks or email spamming.

So I played around with

 and set up my own blacklist. Currently it has 400 unique IP addresses seen in all sorts of attacks. I am not done with it, but it is available now. So if you have any questions or improvment ideas, well, just let me know.

and of course let me know if there is any issue.