Threat Intelligence Honeypot Data Collector

This threat intelligence project collects data from honeypots designed to monitor and log unauthorized access attempts. The system aggregates failed login attempts for RDP (Remote Desktop Protocol), SSH (Secure Shell), and Firewall services from various IP addresses worldwide. This data helps in identifying potential threats, blocking malicious IPs, and enhancing security postures.

Data Files

The project generates and maintains text files containing lists of IP addresses associated with failed login attempts. These files are updated regularly and can be downloaded or viewed below:

• RDP_List - External Deny List for RDP failed login attempts

• SSH_List - External Deny List for SSH failed login attempts

• Firewall_List - External Deny List for Firewall failed login attempts

Note: These files will be populated and added to this page as data is collected from the honeypots.