Re: another rootkit - one more file (fwd)

[John Oliver <joliver () connectnet com>]

Fernando Cardoso wrote:

> The IP ranges (all the 200.* are from Brazilian ISPs) and the lack of
> further information seems to confirm the origin of the kit. I'm sure this is
> some "private" Hax0r tool from one of the many Brazilian groups you can find
> on alldas.de archives.

200.0.0.0/8 is South America in general, not Brazil only... :-)

-- 
John Oliver, System Administrator        http://www.allegiancetele.com
ConnectNet, an Allegiance Telecom company    http://www.connectnet.com
6370 Lusk Blvd. Ste F103                                (858) 638-2020
San Diego, CA. 92121                               FAX: (858) 623-1505