The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.
active 2023-10-24 → 2025-12-15 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 784 days from 2023-10-24 to 2025-12-15. Pushes: 49 total, peak 6 in a day. Pull requests: 41 total, peak 7 in a day. Issues: 41 total, peak 6 in a day. Comments: 27 total, peak 7 in a day. Stars: 12 total, peak 1 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| verovaleros | 153 | 46 | 39 | 27 |
| jwackito | 5 | 3 | 2 | 0 |
Recent activity
Latest issues, pull requests and releases
- Issue#85verovaleros2024-11-20 09:17Can AIP allowlist an ip range (e.g.: /24)
- Issue#84verovaleros2024-11-17 10:12AIP needs to have a consistent output on the blocklists files
- Issue#83verovaleros2024-11-13 19:16_get_honeypot_ips() should check for duplicates
- Issue#82verovaleros2024-11-13 19:10_get_honeypot_ips operation start date emtpy values not handled
- Pull request#81verovaleros2024-11-13 18:25
- Issue#79verovaleros2024-11-13 12:44Very obscure way of using an .env file. We need to incorporate this into the main aip.
- Issue comment#66verovaleros2024-11-12 16:20Alpha(s) models report 'success' when no data is available
- Issue#66verovaleros2024-11-12 16:19Alpha(s) models report 'success' when no data is available
- Pull request#78verovaleros2024-11-12 16:19
- Pull request#78verovaleros2024-11-12 16:17
- Issue#77verovaleros2024-11-12 15:49Verify how Alpha7 is actually running ( is --start-date used?)
- Issue#68verovaleros2024-11-12 15:41Add an option for AIP to run all models between two dates
- Pull request#76verovaleros2024-11-12 15:40
- Issue#75verovaleros2024-11-12 15:02No option to rebuild attack cache
- Issue comment#68verovaleros2024-11-08 09:39Add an option for AIP to run all models between two dates
- Issue#73verovaleros2024-11-08 09:39Design scalable AIP arguments structure to support adding new features
- Pull request#74verovaleros2024-11-05 17:25
- Issue comment#68verovaleros2024-11-05 15:49Add an option for AIP to run all models between two dates
- Issue comment#73verovaleros2024-11-05 15:47Design scalable AIP arguments structure to support adding new features
- Issue comment#73verovaleros2024-11-05 15:42Design scalable AIP arguments structure to support adding new features
- Issue comment#73verovaleros2024-11-05 14:15Design scalable AIP arguments structure to support adding new features
- Issue comment#73verovaleros2024-11-05 14:13Design scalable AIP arguments structure to support adding new features
- Issue comment#73verovaleros2024-11-05 14:07Design scalable AIP arguments structure to support adding new features
- Issue#73verovaleros2024-11-05 14:05Design scalable AIP arguments structure to support adding new features
- Issue comment#68verovaleros2024-11-05 13:52Add an option for AIP to run all models between two dates
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 12 stars here means stars gained during the window, not the repo's star count.