[PLUG] Tracking bugtraq
Jon Jacob
jon at manymoons.net
Sun Sep 15 18:32:20 UTC 2002
So, I just read that the bugtraq worm has effected 3,500 machines to
far:
http://msn-cnet.com.com/2100-1001-957988.html?type=pt&part=msn&tag=cdf&form=base&subj=cn_fd
I am wondering how I would find out where the worm came from. I see
that I have an entry for 9/12 in my ssl_request_log file:
[12/Sep/2002:19:48:55 -0700] 213.35.129.34 SSLv2 RC4-MD5 "-" -
Is this revealing or just a conincedence?
More information about the PLUG
mailing list