North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RBL for bots?

  • From: Drew Weaver
  • Date: Thu Feb 15 11:23:59 2007

    Has anyone created an RBL, much like (possibly) the BOGON list which includes the IP addresses of hosts which seem to be "infected" and are attempting to brute-force SSH/HTTP, etc?
 
It would be fairly easy to setup a dozen or more honeypots and examine the logs in order to create an initial list.
 
Anyone know of anything like this?
 
-Drew