nanog mailing list archives

RBL for bots?

From: "Drew Weaver" <drew.weaver () thenap com>
Date: Thu, 15 Feb 2007 11:30:34 -0500

    Has anyone created an RBL, much like (possibly) the BOGON list which
includes the IP addresses of hosts which seem to be "infected" and are
attempting to brute-force SSH/HTTP, etc?
 
It would be fairly easy to setup a dozen or more honeypots and examine
the logs in order to create an initial list.
 
Anyone know of anything like this?
 
-Drew

Current thread:

RBL for bots? Drew Weaver (Feb 15)
- Re: RBL for bots? Valdis . Kletnieks (Feb 15)
  - Re: RBL for bots? Joel Jaeggli (Feb 15)
    - Re: RBL for bots? Valdis . Kletnieks (Feb 15)
  - Re: RBL for bots? Gadi Evron (Feb 15)
    - Re: RBL for bots? Valdis . Kletnieks (Feb 15)
    - botnets: web servers, end-systems and Vint Cerf Gadi Evron (Feb 15)
    - Re: botnets: web servers, end-systems and Vint Cerf Peter Moody (Feb 15)
    - Re: botnets: web servers, end-systems and Vint Cerf Gadi Evron (Feb 15)
    - Re: botnets: web servers, end-systems and Vint Cerf Rich Kulawiec (Feb 16)
    - rDNS naming David Barak (Feb 20)

(Thread continues...)