[nycbug-talk] new bruteforcing. . .

[George Rosamond]

I noticed this happening to some of our boxes last night while tailing 
some logs:

http://isc.sans.org/diary.html?storyid=3529

Anyone else notice this going on?

It's not really groundbreaking, but the fact that it's in a distributed 
model is somewhat new for ssh and mysql bruteforce zombies.

Nmaps for OSs are sketchy of course, but seems like mostly Linux  boxes. 
. . which is somewhat groundbreaking.

George