Threat feed collected from honeypots running across multiple locations.
This repo is updated hourly and compressed periodically to keep the size small. Diffs, pull requests, etc are cleared.
| File | Info |
|---|---|
| Ads | Serves advertisements |
| DNS | Common DNS resolvers |
| Probes | Probed, but not full connect (5+ time) |
| Scanners | Internet scanning companies |
| Threats | Active threats - exploit attempts, compromised systems, droppers, etc |
| Threats_Unclassified | Seen, but not yet classified |
| Trackers | Used to track user activity |
| Tunnels | Proxies & VPNs |
