[unisog] DDoS IRC bots

Bill McCarty bmccarty at apu.edu
Fri Mar 7 03:07:32 GMT 2003


--On Thursday, March 06, 2003 9:33 PM -0500 Chris Gundersen
<cgunders at utk.edu> wrote:

> Might want to look at this worm (W32.HLLW.Lioten) as a possible culprit:
> 
> http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lioten.h
> tml
> 
> I'd particularly be interested in whether or not your target machines
> have IP  addresses in that (strangely limited) range described in the
> write-up.

No, the compromised host is outside the set of possible IP addresses for
this worm. Thanks just the same for the pointer!
 
---------------------------------------------------
Bill McCarty, Ph.D.
Associate Professor of Web & Information Technology
School of Business and Management 
Azusa Pacific University



More information about the unisog mailing list