Post Xmas Pwnage

[Peter Hickman]

Jonathan Stowe wrote:
> You might be sharing a netblock with a particularly interesting target
> or a bunch of zombies ...
>
> /J\
>
>   
Hmm. NTL cable doesn't count as interesting and if were just zombies 
(which was my initial view - loads of Christmas present PCs connecting 
on the holiday) then other people should be seeing this. People who I 
have talked to don't seem to notice anything like the orders of 
magnitude jump that I have seen. But then again I expect that someone is 
keeping a list of machines that run a given service that then gets 
farmed out to the script kiddies. Like any mailing list it is probably 
not likely that it is vetted too closely.

Ah well, still no breach yet. A lot of the new addresses seem to be 
domestic ISPs in Portugal.

-- 
Peter Hickman.

Semantico, Lees House, 21-23 Dyke Road, Brighton BN1 3FE
t: 01273 722222
f: 01273 723232
e: peter.hickman at semantico.com
w: www.semantico.com