CR worm infection attempts

Wayne Conrad plug-discuss@lists.PLUG.phoenix.az.us
5 Aug 2001 14:44:37 -0700


On Sun, 05 August 2001, "J.Francois" wrote:
> I got tired of counting and just started putting the info into my IDS page.
> That way I can send complaints and point them to a URL so I don't have to 
> keep recreating the same data each time.

Are you putting the IP's up too?  Every one of the CRII infected boxes is rooted...  I wonder about the goodness of publishing a list of known rooted boxes.
    Wayne