At 12:09 PM 12/1/2009, Mike Tancsa wrote: >http://isc.sans.org/trends.html >and >http://isc.sans.org/port.html > >Do not seem to show any increase. Do those stats account for the fact that the attackers may first be fingerprinting servers to see if they're running FreeBSD? --Brett