CRIME recent large tcp syn attacks on Inet

From: Jim Binkley (jrb@private)
Date: Mon Apr 12 2004 - 07:59:58 PDT

  • Next message: George Heuston: "FW: CRIME announcement: IDS/IPS Panel Discussion next week" 

    Has anyone on the crime list seen recent large TCP syn
attacks coming from many hosts, where many is on the order of thousands of ip src?

PSU has seen a number of these in the last few weeks.  I suspect
they are distributed zombie attacks ... of many TCP syn scanners looking
for exploitable holes.

				Jim Binkley
				jrb@private

    This archive was generated by hypermail 2b30 : Mon Apr 12 2004 - 08:41:21 PDT