Hacker News new | ask | show | jobs
by thaumaturgy 4353 days ago
I wouldn't mind seeing that; your data eclipses mine by about a lot.

Plotting your data on a world map would be kinda neat. D3.js is a good tool for that. Animate it over time for even more bonus points. :-)

Or, scrub your information from the data and post it for others to mess with.

I have several thousand entries for ssh, ssh-root, and spam abuse in my badhosts table.
2 comments
knyt 4353 days ago
I think that change over time could be pretty cool, especially if the host locations can be resolved down to the city or province. I'll check out D3.js.

I did a first take using Kartograph: https://int80k.com/ftb/

link
thaumaturgy 4353 days ago
Nice.

And I see now why you're not wanting to release the data: I thought this was data on your network. Good job grabbing that email address.

link
nick_riviera 4353 days ago
+1 for this. Grouping by ASN and netblock owner would be nice as well. I'm happy to shoot down entire ISPs.
link
knyt 4353 days ago
Do you know where maps between IP addresses and ASNs/netblocks might be available for download? I can't immediately find this on IANA's website or on those of the RIRs, and I think it'd be too much to grab from whois.
link
thaumaturgy 4353 days ago
Arin will allow you to download portions of their database for research purposes, but it requires an account and it looks like there's an approval process.

You wouldn't have to query every IP, you'd just have to query IPs not covered by a result range from a previous lookup.

I'd be willing to help on this; I have a whois module I wrote for another spam tool, I should be able to pretty easily adapt it for this.

link
alepper 4353 days ago
http://www.routeviews.org provides access to live and snapshot BGP data.
link