never seen something quite like this before: W32/Nimda http://www.securityfocus.com/ http://slashdot.org/article.pl?sid=01/09/18/151203&mode=thread seamus.madduck.net (woody, 2.4.9) (dual 1.3GHz, 1Gb RAM, 34Mbit connection) got a total of 9563776 (that's almost 10 mio.) attacks in the last 4 hours from almost 23000 different IPs, averaging at around 650/sec. peak is right now at 2800 attacks/sec, Snort logs growing at 90Mb/min. system load was 1.7 :-> and i shut down apache for the night, reducing the load to 0.13. two reports of class B networks disconnected because of 100Mbit networks being 100% clogged. two more reports on disconnected class C networks. wow! martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck -- humpty was pushed.
Attachment:
pgpoAY7pyj0Zf.pgp
Description: PGP signature