search

mlsecproject / combine

Tool to gather Threat Intelligence indicators from publicly available sources
https://www.mlsecproject.org/
GNU General Public License v3.0
654 stars 171 forks source link

Greensnow - WordPress login and XMLRPC attacks #153

Open szepeviktor opened 8 years ago

szepeviktor commented 8 years ago

Good morning!

I was struggling with a lot of notification emails from Fail2ban. After some research it turned out that my list of attackers is overlapping with these lists:

count of overlapping IP-s / blocklist
     10 dshield (HTTP API)
     12 greensnow (list)
     30 spamhaus (DNSBL)
     95 blocklist.de ("ALL" list)

So please consider including this list: https://greensnow.co/

szepeviktor commented 8 years ago

I've tested all of your lists (excluding the known ones) and none of them are matching my attackers.