[botnets] CC Communication

2006-04-05 Thread Mary Henthorn
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- I'm a senior technology analyst and a graduate computer science student. I'm particularly interested in finding ways to discover botnets that are using anything other than IRC as a CC protocol by observing the enterprise

[botnets] possible botnet? channel #asn2 at dynamic1084.amdwebhost.com:6667

2006-04-05 Thread Jamie Riden
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- I'm not an IRC guy, but I imagine this is not a good thing? cheers, Jamie nepenthes-721e2a9c2fa4efd12f80672a87fb977b-asn2.exe : [SANDBOX] contains a security risk - W32/Spybot.gen3 (Signature: W32/Spybot.AHRJ) [ General

Re: [botnets] botnets Digest, Vol 2, Issue 1

2006-04-05 Thread Deborah Gage
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- From: [EMAIL PROTECTED] Reply-To: botnets@whitestar.linuxbox.org To: botnets@whitestar.linuxbox.org Subject: botnets Digest, Vol 2, Issue 1 Date: Sun, 02 Apr 2006 04:24:38 -0500 Send botnets mailing list submissions to

[botnets] Botnets book

2006-04-05 Thread Richard (Rick) Wanner
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Jess Kitchen reference a botnets book in the email below, the details were a little off. It is actually... Internet Denial of Service: Attack and Defense Mechanisms By Jelena Mirkovic, Sven Dietrich, David Dittrich, Peter

[botnets] Botnets

2006-04-05 Thread Jeremy Linden
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] --Server: irc.rizon.net Channel: #warezfr (warez bot network) Server: irc.webchat.org Channels: #jabalalnaser, #amlhmshesreere, # Server: a.k.reipmav.net Channels: #barb1can Server: l0n3ly.reipmav.net Channels: #t3rr0r,

Re: [botnets] CC Communication

2006-04-05 Thread Georg Wicherski
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Hi Mary, one of the key protocols to observe here is DNS, I would say. All CC protocols except for P2P protocols usually rely on DNS to resolve the address of the CC server(s). Additionally, you should observe anomalities in

Re: [botnets] another irc client

2006-04-05 Thread PinkFreud
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- On Wed, Apr 05, 2006 at 06:55:33AM -0500, [EMAIL PROTECTED] babbled thus: I just don;t have time to look at it right now, so here is the link to another botnet irc client: http://210.3.4.193/cmd.txt -- defacer Indeed.

[botnets] Web-Based Bots

2006-04-05 Thread Ken Dunham
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] -- Hi, I'm going to do a little research on web-based bots to date. Does anyone have any examples of web-based bots, where they are controlled, where stats are provide, etc, to an HTTP solution rather than an IRC solution?