DSHIELD Logs (05/01/2005 to 09/02/2009)

DSHIELD.ORG is research effort funded by SANS Institute as part of its Internet Storm Center. DSHIELD’s objectives include detection and analysis of new attacks and vulnerabilities, notification to ISPs of exploited systems, publishing blacklists of worst offenders and feedback to submitters to improve fire- wall and IDS configurations. The data is comprised of logs submitted by over 1700 networks and including 5 full Class B networks, over 45 full Class C networks and many smaller subnetworks. This data set includes DSHIELD logs collected daily between 2005 and 2007 and 2008 - 2010. The logs provide a condensed summary obtained from various firewall and IDS platforms included BlackIce Defender, CISCO PIX Firewalls, ZoneAlarm, Linux IPchains, Portsentry and Snort.