new worm? or DDoS attack in progress
From: Jon Zobrist (jzobrist_at_contentwatch.com)
Date: 07/29/03
- Previous message: Frank Knobbe: "RE: Scan of TCP 552-554"
- Next in thread: Birl: "Re: new worm? or DDoS attack in progress"
- Reply: Birl: "Re: new worm? or DDoS attack in progress"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: incidents <incidents@securityfocus.com> Date: 29 Jul 2003 15:56:50 -0600
Seems more and more clients are picking up the pace, as our proxy is
getting more and more requests.
in thttpd's logs it looks like
IPADDRESS - - [29/Jul/2003:15:47:38 -0600] "UNKNOWN UNKNOWN" 400 0 ""
""
each client seems to be making between 1 and 5 requests/second
-- Jon Zobrist, CISSP Contentwatch, inc. jzobrist@contentwatch.com
- application/pgp-signature attachment: This is a digitally signed message part
- Previous message: Frank Knobbe: "RE: Scan of TCP 552-554"
- Next in thread: Birl: "Re: new worm? or DDoS attack in progress"
- Reply: Birl: "Re: new worm? or DDoS attack in progress"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|