🌐 IPs (187,392)
All attacker IPs observed. Daily files too.
All feeds
Static files, HTTP GET, no auth. Updated hourly by a Python pipeline fed from our Cowrie honeypot.
🔗 Domains & URLs (20)
URLs extracted from attacker commands.
🔐 Hashes (71)
SHA256 of payloads dropped on the honeypot.
⚡ Commands (447)
Unique attacker shell commands.
🛡️ Suricata rules
IDS rules auto-generated daily from the IP feed.
📝 Cowrie logs
Sanitised raw JSON event logs per day.
📊 Summary
Pre-computed counters and trends in one JSON file.