To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Brian Allen wrote: > A google search on these two hostnames, irc.darkdreamz.com and > irc.isocore.biz, only turned up a few hits, but they seemed to be > related to filesharing. How can I tell if this is a few students trying > to get music, games, etc. or if these are bots connecting to a C&C?
Any such hit may often be a legitimate IRC server, or a very shaky one, still used for chat. In this case: > NICK [Niger]-029 > NICK [Niger]-015 > NICK [Niger]-017 > NICK [N]-487 My best would be on a botnet, whether full-fleged or for xdcc. If you want to be sure, one way is to see what else sits on those channels. _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
