It's speading nicely.

[xbud]

'Nicely' probably isn't a prefered word but you all know what I mean.   Here are some numbers. --------- Snip ------------- [EMAIL PROTECTED]:~$ cat /var/log/boa/access_log | grep /default.ida | cut -f1-4 -d ' ' bla.bla.bla.bla - - [19/Jul/2001:16:18:23 bla.bla.bla.bla - - [19/Jul/2001:16:48:16 bla.bla.bla.bla - - [19/Jul/2001:16:48:33 bla.bla.bla.bla - - [19/Jul/2001:18:00:43 bla.bla.bla.bla - - [19/Jul/2001:19:04:32 bla.bla.bla.bla - - [19/Jul/2001:19:04:40 bla.bla.bla.bla - - [19/Jul/2001:19:34:29 bla.bla.bla.bla - - [19/Jul/2001:19:40:50 bla.bla.bla.bla - - [19/Jul/2001:20:24:06 bla.bla.bla.bla - - [19/Jul/2001:20:42:16 bla.bla.bla.bla - - [19/Jul/2001:20:44:54 bla.bla.bla.bla - - [19/Jul/2001:20:48:27 bla.bla.bla.bla - - [19/Jul/2001:21:26:38 bla.bla.bla.bla - - [19/Jul/2001:21:52:57 bla.bla.bla.bla - - [19/Jul/2001:22:02:56 bla.bla.bla.bla - - [19/Jul/2001:22:58:22 bla.bla.bla.bla - - [19/Jul/2001:23:16:19 bla.bla.bla.bla - - [19/Jul/2001:23:30:11 bla.bla.bla.bla3 - - [19/Jul/2001:23:50:31 [EMAIL PROTECTED]:~$ cat /var/log/boa/access_log | grep /default.ida | cut -f1-4 -d ' ' | wc -l     19 [EMAIL PROTECTED]:~$ ----------- Snip --------- I cut the actual attack out cause it gets lengthy  and the IPs are blocked for obvious reasons, I also noticed none of the IP's were duplicates.   Note all of them are in one day time span... =)   I contacted as many of the Company's I could using their IP block.   - xbud