2 Jan
2009
2 Jan
'09
8:23 p.m.
From reports in the CBL database, it appears they have enjoyed some DOS traffic yesterday, and I'm currently enjoying a little 40k+ botnet attack (small botnet beats large one when you host the victim IP). Anyone have any good resources on the breakdowns of the current known botnets and their traffic patterns? This one appears to use random IP protocol numbers, and extremely small packets. IP 255 and ICMP type 70 seem popular on this one, but I see a lot of randomness. Feel free to reply offlist if you have some good resources. Jack Bates