[Dshield] fightback listing

Johannes B. Ullrich jullrich at euclidian.com
Mon Dec 12 23:38:21 GMT 2005


In order to have fightback triggered, three different users need to
report the same IP address within 30 minutes. Which one of the 3 users
is used is kind of random. The status page will show you how many
fightback messages we sent over the last 24 hrs. .



ajg wrote:

>I have been adding data to dshield for about one month.
>
>eg:    Day: 2005-11-20
>Userid: xxxxxxxxx
>
>For 2005-11-20 you submitted 134 packets from 88 sources hitting 1 targets.
>
>The last entry into fightback was 2004 - nothing since.  What's happening? Is fightback working?
>
>Thanks
>
>ajg
>This message was sent via the web forum at
>http://forum.dshield.org
>
>_________________________________________
>Using .Net? Need to know more about .Net Security?
>http://isc.sans.org/banner_count.php?dest=dotnet
>
>_______________________________________________
>send all posts to list at lists.dshield.org
>To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>
>  
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
Url : http://www.dshield.org/pipermail/list/attachments/20051212/549e1e7d/signature.bin


More information about the list mailing list