madrock

Honeypot Data Analysis

Derek — Mon, 03 Sep 2012 12:41:41 +0000

I’ve recently analysed a range of Honeypot data relating to about 3 months of malicious attempts against a number of Internet exposed ports and services The data has been sourced from a typical Australian Internet connection.

From the analysis, the traffic type and source countries were more or less as expected, although it was interesting to see the ratio of attacks received from each country.

I thought I would share some of the initial results (see the graphics below). Over the coming months I will share more of the analysis and detail.

General port scans and most of the spider/crawler traffic has been removed from the baseline data, so these results relate to actual malicious attempts – automated tools and manual techniques.

China and Hungary have been seen to contribute to the highest number of Internet attack attempts.

The top 10 countries who are attacking Australians:
1/ China – CN
2/ Hungary – HU
3/ United States – US
4/ Canada – CA
5/ Australia – AU
6/ India – IN
7/ Republic of Korea – KR
8/ Brazil – BR
9/ Russian Federation – RU
10 Puerto Rico – PR

Sala on King William

Derek — Sun, 26 Aug 2012 04:10:14 +0000

Just sitting at the pot drinking some wine…

Womad 2012

Derek — Sat, 10 Mar 2012 09:38:50 +0000

Great start to Womad 2012

The Finn family.

Adelaide City To Bay – 2011

Derek — Sat, 17 Sep 2011 22:59:52 +0000

Kerry and I have put our hands up again to go for the 12km stroll – City to Bay.

On Our Way.

Half Way.

Finished.

Now Kerry and I are recovering… The Pot on King William Rd…
My feet hurt.

The Great Ed Shiraz Challenge 2011

Derek — Sat, 02 Jul 2011 03:54:32 +0000

Kerry and I survived another day with 698 other passionate Shiraz drinkers and 150 winemakers at the 2011 Great Edinburgh Shiraz Challenge.

As usual, we attempted to try lots of different Shiraz styles and break the day up with our old favourites to reset the palette.

This amounted to us tasting about 41 wines over 4 hours.

Many of Kerry and my favourites hit the best of show this year.

http://www.edinburgh.com.au/cellars/shiraz-day-info

It was also great to catchup with Karel again from Lengs & Cooter who made it to 35 on the list this year.

It took a day to re-hydrate, but it was well worth it.

Our Flickr Pictures

Derek — Fri, 31 Dec 2010 13:30:32 +0000

Some pictures from our travels.

View on Flickr'/>

' width='75' height='75'>

« prev 1 2 3 4 5 6 ... 42 next »
(833 Photos)

Australian ISP 3g APN’s

Derek — Tue, 28 Dec 2010 01:38:46 +0000

These are the main 3G APN’s (Access Point Name) used in Australia.

ISP                                 APN                                Username/Password Required
Telstra                           telstra.internet           NO
BigPond                          telstra.bigpond           YES
Three (Prepaid)            3services                       NO
Three (Postpaid)          3netaccess                    NO
Vodafone (Prepaid)     vfprepaymbb                NO
Vodafone (Postpaid)   vfinternet.au                 NO
Optus (Prepaid)            preconnect            NO
Optus (Postpaid)          connect        NO
DODO                             WirelessBroadband NO
dodolns1                         NO
iburst                                NO APN                        YES User/password only
Primus                             primuslns1                    NO
Blink                                splns888a1                   SP Code is 888a1
Crazy John                     purtona.net                   NO
Internode                        Internode                       NO
Virgin Broadband        VirginBroadband       guest/guest

For New Zealand user only
ISP                                   APN                                        Dialed Number
Telecom                         internet.telecom.co.nz       *99#
Vodafone                      www.vodafone.net.nz         *99#
Telstra                            www.telstra.net.nz              *99#
SlingShot                       www.slingshot.net.nz       *99#
CallPlus                          www.callplus.net.nz          *99#

3G, HSDPA APN/Username/Password settings for many other Cellular networks

http://www.pinstack.com/carrier_sett…n_gateway.html
http://www.unlocks.co.uk/gprs_settings.php
http://www.modmyifone.com/wiki/index…69#T-Mobile_UK

Free content from Internode

Derek — Mon, 27 Dec 2010 09:04:29 +0000

We have just moved to Internode and have discovered the free content and streaming.

These are the services…

Website	Link
ABC iView (except ABC News 24)	http://www.abc.net.au/iview/
Broadband Streaming Radio	http://www.internode.on.net/radio/
Games On Net online games	http://games.on.net/
TiVo Software Updates, TiVo Electronic Program Guide, CASPA on-demand TV shows & Movies	http://www.internode.on.net/tivo/ http://www.tivo.com.au/
Fetch TV early adopter trial content Electronic Program Guide (EPG) content, Video on-demand and all linear streamed channels for FetchTV set top box users.	http://www.internode.on.net/fetchtv/ http://www.fetchtv.com.au/
Internode File Download Mirror	http://mirror.internode.on.net/
Major Geeks Mirror (+)	http://majorgeeks.mirror.internode.on.net
SourceForge Mirror (~)	http://www.sourceforge.net
Steam Content Servers (^)	http://www.steampowered.com/

http://www.internode.on.net/residential/entertainment/unmetered_content/

I’ll be using this page for the variaous media and streaming boxes we have.

This includes the Chumby

Website	Link
ABC iView (except ABC News 24)	http://www.abc.net.au/iview/
Broadband Streaming Radio	http://www.internode.on.net/radio/
Games On Net online games	http://games.on.net/
TiVo Software Updates, TiVo Electronic Program Guide, CASPA on-demand TV shows & Movies	http://www.internode.on.net/tivo/ http://www.tivo.com.au/
Fetch TV early adopter trial content Electronic Program Guide (EPG) content, Video on-demand and all linear streamed channels for FetchTV set top box users.	http://www.internode.on.net/fetchtv/ http://www.fetchtv.com.au/
Internode File Download Mirror	http://mirror.internode.on.net/
Major Geeks Mirror (+)	http://majorgeeks.mirror.internode.on.net
SourceForge Mirror (~)	http://www.sourceforge.net
Steam Content Servers (^)	http://www.steampowered.com/

Interesting results from social search engines

Derek — Thu, 09 Sep 2010 12:28:03 +0000

I went to a security presentation yesterday with one of the guys from work which summarised some of the cooler Blackhat and Defcon presentations from Las Vegas this year.

One of these presentations demonstrated the use of the open API’s available for some of the social media sites. The below list represents some of the search engine I’ve found that allow search words to be queried against publicly available information. I’ve found that these searches far exceed what is indexed on the social media site search option.

Search engines

Your Open Book

Google Buzz API Browser: explore what’s publicly visible through the Google Buzz API

Facebook API Browser: explore what’s publicly visible through the Facebook Graph API

Wink People Search

Showdan HQ – Computer search engine (looks for MAC address)

Panda Live Cam – Adelaide

Derek — Tue, 31 Aug 2010 11:55:32 +0000

The Adelaide Zoo Giant Pandas

Wang Wang (“Net Net”)

Born: 31/08/05 at Wolong Giant Panda Research Centre, China

Personality: He is a very laid-back and placid boy. Like all Giant Pandas, he loves to snooze but can usually roused by a fresh stalk of bamboo.

Wang Wang’s Family Tree

Funi (“Lucky Girl”)

Born: 23/08/06 at Wolong Giant Panda Research Centre, China

Personality: She is very active and playful and often makes excited mewing vocalisations at feeding time. She is also very intelligent, curious and loves to explore.

Funi’s Family Tree

Live Panda Cams

Checkout the latest addition to the Adelaide Zoo. You will need Quicktime to see the live Cams.

Funi

http://pandacam.adam.com.au/pandacam1.sdp

Wang Wang

http://pandacam.adam.com.au/pandacam2.sdp

Download Quicktime here if you need it.

Thanks to Adam Internet for providing the feeds.