To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
Here are some.....Ive seen around 500 with similar Message ID's...........
================================================= <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> ================================================= On Wed, 2007-09-19 at 09:24 +1000, Matt Jonkman wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Can anyone verify they're seeing the same in other traps? > > Can anyone comment on any naturally occurring source or seed that'd > cause this repeating? > > If it's seen in more than one place I'll get together some snort sigs > for it. > > Matt > > PinkFreud wrote: > > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > > ---------- > > > > > > ------------------------------------------------------------------------ > > > > Actually, the pattern appears to be 01c7fa35$ > > > > > > On Tue, Sep 18, 2007 at 05:03:17PM -0400, Jonathan Yarden babbled thus: > >> To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > >> ---------- > >> I have a spamtrap getting 80-100k messages/day and noted a pattern that > >> repeats in the Message-ID field: > >> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> Message-ID: <[EMAIL PROTECTED]> > >> > >> Obviously in this subset, you can clearly see the pattern...01c7fa > >> > >> My question to the list is whether this pattern appears in some of the > >> Storm Botnet email others are getting. > >> -- > >> Jon > >> > >> Those who make peaceful revolution impossible will make violent > >> revolution inevitable. > >> -- John F. Kennedy > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > > All list and server information are public and available to law enforcement > > upon request. > > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets >
signature.asc
Description: This is a digitally signed message part
_______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
