On Fri, 05 Aug 2011 12:29:02 +0000, Walter Hurry wrote: > More out of curiosity than paranoia, I have carried out a small > geographical analysis of rejected "intrusion attempts" at my home router > (this consists of dropped TCP packets and ICMP (ping) requests).
Interesting stats, indeed... > Over the last seven months or so, there have been a total of 2318. By > country of originating IP address, the top 5 are: > > China | 483 > United Kingdom | 455 > Russian Federation | 167 > Germany | 74 > Spain | 68 Hey, I'm there (Spain) :-P My e-mail and web server stats also put China as the top source for dictionary/bots attacks. > I am curious as to why the United Kingdom should figure so highly. It is > my own location, which is undoubtedly relevant, but I don't really > understand the reason. The Internet is global, so why should such a high > proportion of these unsolicited packets originate from my own domicile? (...) Well, true is that UK has very good connections, infrastructure and cheap prices -I recently rented a hosting service in there- so for someone who needs to control a set of malware bots its definitely a "good" country -I mean, technically speaking- from where to operate (if you're located in Europe). Besides, is the third country per Internet users in Europe: http://www.internetworldstats.com/stats4.htm#europe I'd say that UK, The Netherlands and Germany are neuralgic nodes for ISP inter-connections making them a very attractive target for both legal and not so legal business... P.S. Your message was formatted okay. Greetings, -- Camaleón -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/pan.2011.08.05.14.34...@gmail.com
