[PLUG] Tracking bugtraq

Jon Jacob jon at manymoons.net
Sun Sep 15 18:32:20 UTC 2002


So, I just read that the bugtraq worm has effected 3,500 machines to
far:

http://msn-cnet.com.com/2100-1001-957988.html?type=pt&part=msn&tag=cdf&form=base&subj=cn_fd

I am wondering how I would find out where the worm came from.  I see
that I have an entry for 9/12 in my ssl_request_log file:


[12/Sep/2002:19:48:55 -0700] 213.35.129.34 SSLv2 RC4-MD5 "-" -

Is this revealing or just a conincedence?





More information about the PLUG mailing list