Re: CRIME SSH scanning

From: Jeff Bryner (jbryner1@private)
Date: Mon Nov 01 2004 - 11:30:55 PST


> Has anyone found anything more about the ssh scans that have been
> going on? 

If it's the same group that broke in to a honeypot I ran recently,
they're romanian, setup an IRC zombie, adore rootkit and scan for more
hosts. They never launched an attack from my honeypot since they
screwed up the rootkit install whiched hosed the box...




=====
Jeff
=====
President Bush has promised he's going to establish elections in Iraq,
he's going to rebuild the infrastructure and he's going to create jobs. 
And he said if it works there, he'll try it here.
--David Letterman



This archive was generated by hypermail 2.1.3 : Mon Nov 01 2004 - 12:29:34 PST