[Dshield] Road Runner

Mitch Thompson mitchthompson at satx.rr.com
Thu Aug 23 11:02:38 GMT 2001


On Wednesday 22 August 2001 11:38 am, you wrote:
> My ISP is Road Runner, which owns the block 24.24.0.0 - 24.31.255.255.
>
> I received a letter from them yesterday saying that:
>
> "Fewer than 40 computers on our Road Runner network were infected by Code
> Red. Those users were notified" .....
>
> Is it possible to determine if this is consistent with the data reported to
> DSheild? I had the impression that there have been much more than 40 Road
> Runner customers infected, but I am not sure how to determine that.
>
They must be referring to the number of computers in YOUR city/area.

I have several hundred lines of firewall logs with 24.28.x.x as the source IP 
and 80 as the destination IP.  Even taking into account duplicates, there are 
still more than 40 in the past three days.




More information about the list mailing list