Interesting Attack.

["J. S. Townsley" <jst () INTEGRITY COM>]

Greetings All.

Forgive me for my tardyness in reporting this, but it's been a busy month.

I've attached a tarball of some logs from the 10th of November.  I believe
it's a DOS attack directed at every open port on my box.  I checked other
machines on my networks and didnt' see any similiar traffic.

This attack lasted until I gave them null static routes.  The thing that
is interesting is the sheer number of different hosts and ip's that were
involved.

IP's from all over the world really, including some schools.  The actual
log is over 4 meg, so i've attached just a portion of it, as well as a
list of _all_ source ip addresses.

--JST

Attachment: woot.tgz
Description: