Binary Defense provides the Artillery Threat Intelligence Feed (ATIF), a list of known attacker IP addresses detected by their Artillery honeypot and monitoring platform.

Artillery is an open-source honeypot and endpoint monitoring tool that detects port scanning, brute force attacks, and other malicious activity. IPs in this feed have been observed actively attacking Artillery sensors.

Note: Per the maintainer's terms, this feed may not be used for commercial resale or in products that charge fees for such services. The raw IP data is not redistributed; it is downloaded and analyzed locally by update-ipsets.