<div class="gmail_quote">On 26 April 2010 09:59, Timo Schoeler <span dir="ltr"><<a href="mailto:timo.schoeler@riscworks.net">timo.schoeler@riscworks.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
When running tor, I see<br>
<br>
i) CPU cycles being eaten up by tor almost entirely;<br>
<br>
ii) my machine experiences things like those:<br>
<br>
One is a chinese dialup, the other ones are from a big German ISP<br>
(Deutsche Telekom AG). For me it really seems as there's some kind of<br>
botnet attack going on.<br>
<br>
Timo</blockquote><div><br></div><div>What makes you think that this is a botnet attack? What are the characteristics of a botnet attack, and how do these logs exhibit them? If there are only a few IP addresses, wouldn't that contraindicate botnet involvement?</div>
<div>On a loosely related note, it would generally be a good idea to mask IP addresses on public mailing lists.</div></div>