I can
comment on the dshield list.
I have
seen this before. I am checking one particular IP on my network that has a
very popular freehost on it. Checking the load balancer IP (connections
cannot be originated from this IP) -- it shows that there were 13 attacks
initiated from the IP, and 7 targets. Whatever their algorithm is, it
doesn't seem reliable enough for me to trust it if an IP that can not originate
connections is listed as an attacker (albeit small on their
list)
--Phil
Im wondering how many of you use Bogon Lists and
http://www.dshield.org/top10.html type
lists on your routers? Im curious to know if you are an ISP with
customers or backbone provider or someone else? I have a feeling not
many people use these on routers? Im wondering why or why
not?
Ive never used them on my routers although
I work for a new isp/cable provider. Im thinking it would make my users
happy to use them though.
alsato