1. A method for generating a blacklist of network addresses, the method comprising: analyzing attack history data of a plurality of nodes of a computer network; computing a relevance ranking for a current attack source with respect to a first node of the computer network, the relevance ranking indicative of an attack history of the current attack source with respect to the first network node; propagating the relevance ranking to a second node of the computer network by applying a weight to the relevance ranking computed for the first network node, the weight indicative of a strength of an attack correlation relationship between the first network node and the second network node, the strength of the attack correlation relationship based on whether the attack history data includes data indicative of a previous attack on the first network node and the second network node, respectively, by a common attack source different than the current attack source; based at least partly on the propagated relevance ranking, adjusting a score of the current attack source on a list of attack sources; and generating a blacklist for the second network node by selecting one or more attack sources from the list of attack sources based on respective scores of the one or more selected attack sources.