Are there any relevant log files that would contain traces of this sort of attack?