RabidMonkey.org

You can find statistics on the malware collected by this honeypot here. Statistics include analysis by multiple antivirus scanners and executable profiling. Write me if you want a copy of binaries.

About
The data for this site is harvested from multiple Amun honeypots hosted primarily on residential DSL connections. If you would like to contribute to the project then contact me.

Links
RevIP.info: Information about an IP, it's network and domains hosted on that IP
SpamEatingMonkey.com: Realtime blacklist

Downloads
rabidmonkey.hdb: Our ClamAV signature updated multiple times per hour
rabidmonkey.xml.gz: Complete dump of the database in XML format
ips.txt: List of all IPs that have ever attacked one of the honeypots

The contents of this website are provided AS IS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. License is granted to use this information for educational and research purposes only so don't do bad things.

Honeypot summary report

last update: 2012-04-23 16:05:05 (2.54736s)
Total attacks (last 24 hours) : 1895

#	ip address	country
Top 5 source attackers (last 24 hours)
1530	118.174.4.100	Thailand
156	188.241.228.132	Romania
74	182.18.153.235	India
37	188.241.232.130	Romania
32	188.241.241.46	Romania

#	port	dshield link
Top 5 destination ports (last 24 hours)
1578	135	port details
244	139	port details
22	1900	port details
22	9999	port details
22	143	port details

#	vulnerability
Top 5 vulnerabilities (last 24 hours)
1579	dcom
243	netbiosname
22	maxdb
22	arc
22	lotus_domino

#	target
Top 5 exploit targets (last 24 hours)
1875	None
2	tftp://188.237.61.163:69/host.exe
2	bind://188.241.113.20:1130/
1	tftp://188.231.129.177:69/host.exe
1	tftp://74.160.80.176:69/host.exe

#	country	flag
Top attackers countries (last 30 days)
4987	United States
4826	Romania
2924	India
1576	Thailand
610	Germany