I can
comment on the dshield list.
I have
seen this before. I am checking one particular IP on my network that has a
very popular freehost on it. Checking the load balancer IP (connections
cannot be originated from this IP) -- it shows that there were 13 attacks
initiated from the IP, and 7 targets. Whatever their algorithm is, it
doesn't seem reliable enough for me to trust it if an IP that can not originate
connections is listed as an attacker (albeit small on their
list)
--Phil
|
Title: Message
- Bogon list or Dshield.org type list alsato
- Re: Bogon list or Dshield.org type list Phil Rosenthal
- Re: Bogon list or Dshield.org type list Johannes Ullrich
- Re: Bogon list or Dshield.org type l... Charles Sprickman
- Re: Bogon list or Dshield.org ty... John Palmer (NANOG Acct)
- Re: Bogon list or Dshield.o... Måns Nilsson
- RE: Dshield.org jnull
- Re: Dshield.org Johannes Ullrich
- RE: Dshield.org jnull
- RE: Bogon list or Dshield.org type list jnull
- RE: Bogon list or Dshield.org type list michael . dillon
- Re: Bogon list or Dshield.org type list Peter E. Fry