[Dshield] In case you needed a reason to get a firewall

Blake McNeill mcneillb at linklogger.com
Wed Jun 9 01:10:11 GMT 2004


Sasser had a weighted IP generation algorithm, so traffic at another
location would have the same type of sources (ie local to it's netblock).
Its just not a Shaw thing but is pretty well universal across the internet
unless of course your ISP filters traffic.

Blake


----- Original Message ----- 
From: "Clement Dupuis" <cdupuis at cccure.org>
To: "'General DShield Discussion List'" <list at lists.dshield.org>
Sent: Tuesday, June 08, 2004 6:18 PM
Subject: RE: [Dshield] In case you needed a reason to get a firewall


> It seems that most of the traffic is coming strictly from your cable
> subscribers in the 68.144. range.
>
> It seems to be the wild wild west with Shaw cable.
>
> Clement
>
>
> > -----Original Message-----
> > From: list-bounces at lists.dshield.org [mailto:list-
> > bounces at lists.dshield.org] On Behalf Of Blake McNeill
> > Sent: Tuesday, June 08, 2004 5:53 PM
> > To: General DShield Discussion List
> > Subject: [Dshield] In case you needed a reason to get a firewall
> >
> > I put together a brief overview of the internet traffic that I saw at my
> > home at http://www.linklogger.com/May2004.htm for May.  For example I
> > logged
> > over 150,000 scans, three worm outbreaks (Sasser, Bobax and Korgo)
during
> > this period.  Given I don't run any services or anything on this account
> > (couple of passive honey pots sometimes), this report could be
> > representative of the average malware traffic on the internet (my ISP
> > doesn't filter ports).
> >
> >
> >
> > If you don't have a firewall protecting you, what is protecting you?
> >
> >
> >
> > Blake
> >
> > _______________________________________________
> > list mailing list
> > list at lists.dshield.org
> > To change your subscription options (or unsubscribe), see:
> > http://www.dshield.org/mailman/listinfo/list
>
>
> _______________________________________________
> list mailing list
> list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list