[Dshield] Unusual log activity - any ideas?

Preston G. Simpson preston.simpson at sfrlaw.com
Thu May 2 15:57:16 GMT 2002


On 1 May 2002, John Hardin wrote:

> Wasn't the Lion worm cross-platform? Or are my neurons firing randomly 
> again? 

	A cursory google says that it's random neurons, unless you consider
different Linux distros to be different platforms. sadmin had some
multi-platform elements, though. The browser ID line in the logs says it's
Mozilla 5.0. I didn't think worms were spoofing that yet. Or are they?




More information about the list mailing list