To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- I'd guess it's an iroffer or similiar, because otherwise it probably would have changed the nick upon reconnect.
Gadi Evron wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Brian Allen wrote: > >>A google search on these two hostnames, irc.darkdreamz.com and >>irc.isocore.biz, only turned up a few hits, but they seemed to be >>related to filesharing. How can I tell if this is a few students trying >>to get music, games, etc. or if these are bots connecting to a C&C? > > > Any such hit may often be a legitimate IRC server, or a very shaky one, > still used for chat. > > In this case: > > NICK [Niger]-029 > > NICK [Niger]-015 > > NICK [Niger]-017 > > NICK [N]-487 > > My best would be on a botnet, whether full-fleged or for xdcc. If you > want to be sure, one way is to see what else sits on those channels. > _______________________________________________ > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > All list and server information are public and available to law enforcement > upon request. > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
