• My other (as in old) page.
  • Logs for the Helkern/ Slammer/Sapphire MS-SQL worm launched January 25 2003, from the start of the attack to when I stopped logging the probes. First field is the time (timezone is CET) of the attack (including microseconds, they can be useful only for ordering purpose as the logging machine wasn't NTP synchronized), second field is the provenance (in src IP address.src port format).
  • Logs for the Blaster worm of August 2003. It starts in July so one can compare with "normal" scanning activity and ends August 22. First field is the time (timezone is CET) of the attack (including microseconds, they can be useful only for ordering purpose as the logging machine wasn't NTP synchronized), second field is the provenance (in src IP address.src port format).
  • My OpenBSD commit history charts.
  • My GPG public key. My old revoked key.
  • What do I look like (warning, huge picture).
  • My more bandwidth intensive site.