[Dshield] SSH Clarifications

Pieter-Bas IJdens pbijdens at emea.mi4.org.uk
Fri Nov 9 09:45:28 GMT 2001


> The data we have so far does show some increase in scanning for the last
> day. However, in order to confirm that this is actually a worm, and not
> just a few kiddies playing with ssh, we need the actual worm code to prove
> that infected machines are probing themselve to find and infect other
> machines.



More information about the list mailing list