new worm? or DDoS attack in progress

From: Jon Zobrist (jzobristat_private)
Date: Tue Jul 29 2003 - 14:56:50 PDT

Next message: mms: "Re: floods through our proxy"

Previous message: Frank Knobbe: "RE: Scan of TCP 552-554"
Next in thread: Birl: "Re: new worm? or DDoS attack in progress"
Reply: Birl: "Re: new worm? or DDoS attack in progress"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Seems more and more clients are picking up the pace, as our proxy is
getting more and more requests.
in thttpd's logs it looks like 


IPADDRESS - - [29/Jul/2003:15:47:38 -0600] "UNKNOWN  UNKNOWN" 400 0 ""
""

each client seems to be making between 1 and 5 requests/second


-- 
Jon Zobrist, CISSP
Contentwatch, inc.
jzobristat_private

application/pgp-signature attachment: This is a digitally signed message part

Next message: mms: "Re: floods through our proxy"
Previous message: Frank Knobbe: "RE: Scan of TCP 552-554"
Next in thread: Birl: "Re: new worm? or DDoS attack in progress"
Reply: Birl: "Re: new worm? or DDoS attack in progress"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jul 30 2003 - 08:03:03 PDT