logoalt Hacker News

djkurlander • yesterday at 3:36 PM • 4 replies • view on HN

I run an open source honeypot that collects these botnet scans and produces blocklists.

Blocklist download and configuration: https://knock-knock.net/blocklist

Honeypot dashboard, where you can see attempted attacks in realtime: http://knock-knock.net

API: http://knock-knock.net/api

Replies

Bender • yesterday at 7:16 PM

Cool site. I was curious and dropped your 100k list into a reverse DNS lookup site [1]. They may still have some of the records cached. I recognized quite a few of the scanner nodes and some other usual suspects.

[1] - https://adver.tools/reverse-dns-lookup/

➕ show 1 reply
skinfaxi • yesterday at 6:45 PM

This looks cool, where can I find the source?

➕ show 1 reply
codegeek • yesterday at 7:15 PM

Thank you for sharing. I will take a look.