Home page logo
/

nanog logo nanog mailing list archives

Re: Sobig.f surprise attack today
From: Dan Hollis <goemon () anime net>
Date: Thu, 28 Aug 2003 12:54:54 -0700 (PDT)


On Thu, 28 Aug 2003, Owen DeLong wrote:
Alternatively, perhaps we could, instead, publish an INFECTED SYSTEMS 
blacklist
based on such connections to a honeypot.  Any system which made the correct
request could then have it's address published via BGP or DNS for ISPs and
the like to do as they wish.

an infected host dnsrbl doesnt sound like a bad idea...

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]