[Dshield] Unusual log activity - any ideas?
Preston G. Simpson
preston.simpson at sfrlaw.com
Thu May 2 15:57:16 GMT 2002
On 1 May 2002, John Hardin wrote:
> Wasn't the Lion worm cross-platform? Or are my neurons firing randomly
A cursory google says that it's random neurons, unless you consider
different Linux distros to be different platforms. sadmin had some
multi-platform elements, though. The browser ID line in the logs says it's
Mozilla 5.0. I didn't think worms were spoofing that yet. Or are they?
More information about the list