
120 ◾ Malicious Bots
while True:
try:
res = dig(name, server)
if res and res not in iplist:
iplist.append(res)
server = res
else:
server = sys.argv[1]
except KeyboardInterrupt: break
print iplist
if __name__ == ‘__main__’:
main()
To use the script, type the following command: ./stormwalk.py domain IP. With
minor modifications it is easy for a researcher to quickly return lookup results for
hundreds of servers.
C
onstant UDP traffic seen from Storm worm–infected computers is designed
to discover and connect Storm worm–infected computers by the Storm worm itself.
e blacklist section of the peers.i ...