[Dshield] In case you needed a reason to get a firewall
mcneillb at linklogger.com
Wed Jun 9 01:10:11 GMT 2004
Sasser had a weighted IP generation algorithm, so traffic at another
location would have the same type of sources (ie local to it's netblock).
Its just not a Shaw thing but is pretty well universal across the internet
unless of course your ISP filters traffic.
----- Original Message -----
From: "Clement Dupuis" <cdupuis at cccure.org>
To: "'General DShield Discussion List'" <list at lists.dshield.org>
Sent: Tuesday, June 08, 2004 6:18 PM
Subject: RE: [Dshield] In case you needed a reason to get a firewall
> It seems that most of the traffic is coming strictly from your cable
> subscribers in the 68.144. range.
> It seems to be the wild wild west with Shaw cable.
> > -----Original Message-----
> > From: list-bounces at lists.dshield.org [mailto:list-
> > bounces at lists.dshield.org] On Behalf Of Blake McNeill
> > Sent: Tuesday, June 08, 2004 5:53 PM
> > To: General DShield Discussion List
> > Subject: [Dshield] In case you needed a reason to get a firewall
> > I put together a brief overview of the internet traffic that I saw at my
> > home at http://www.linklogger.com/May2004.htm for May. For example I
> > logged
> > over 150,000 scans, three worm outbreaks (Sasser, Bobax and Korgo)
> > this period. Given I don't run any services or anything on this account
> > (couple of passive honey pots sometimes), this report could be
> > representative of the average malware traffic on the internet (my ISP
> > doesn't filter ports).
> > If you don't have a firewall protecting you, what is protecting you?
> > Blake
> > _______________________________________________
> > list mailing list
> > list at lists.dshield.org
> > To change your subscription options (or unsubscribe), see:
> > http://www.dshield.org/mailman/listinfo/list
> list mailing list
> list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
More information about the list