Re: another rootkit - one more file (fwd)

From: John Oliver (joliverat_private)
Date: Mon Jun 04 2001 - 09:37:55 PDT

Next message: Golden_Eternity: "RE: Unusual TCP port 53 scan"

Previous message: Glenn Forbes Fleming Larratt: "ICMP code 3 type 2 scans?"
In reply to: Fernando Cardoso: "RE: another rootkit - one more file (fwd)"
Next in thread: Alvin Oga: "Re: another rootkit - one more file (fwd)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Fernando Cardoso wrote:

> The IP ranges (all the 200.* are from Brazilian ISPs) and the lack of
> further information seems to confirm the origin of the kit. I'm sure this is
> some "private" Hax0r tool from one of the many Brazilian groups you can find
> on alldas.de archives.

200.0.0.0/8 is South America in general, not Brazil only... :-)

-- 
John Oliver, System Administrator        http://www.allegiancetele.com
ConnectNet, an Allegiance Telecom company    http://www.connectnet.com
6370 Lusk Blvd. Ste F103                                (858) 638-2020
San Diego, CA. 92121                               FAX: (858) 623-1505

Next message: Golden_Eternity: "RE: Unusual TCP port 53 scan"
Previous message: Glenn Forbes Fleming Larratt: "ICMP code 3 type 2 scans?"
In reply to: Fernando Cardoso: "RE: another rootkit - one more file (fwd)"
Next in thread: Alvin Oga: "Re: another rootkit - one more file (fwd)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jun 04 2001 - 11:54:31 PDT