To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Many thanks guys-- sunnet alert just sent down re Awstats.  I'll compare
and let you know.  Looks like we were an early "recipient".

Larry Kettlewell
Chief Information Security Officer
Kansas State Government
[EMAIL PROTECTED]
785-296-8434

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Sunday, May 07, 2006 8:35 AM
To: [email protected]
Subject: Re: [botnets] Honeypot rendering

To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Quoting "Kettlewell, Larry [KO]" <[EMAIL PROTECTED]>:

> ---><html><head><title>Error 404</title><meta name="robots"
>
> --->content="noindex"><META HTTP-EQUIV="Content-Type"
>
> --->CONTENT="text/html; charset=iso-8859-1"></head><body><h2>HTTP
Error
>
> --->404</h2><p><strong>404 Not found</strong></p></body></html>

It is a recon-bot looking for awstats victims, exactl;y as rlvaughn 
stated.  However the '<meta name="robots" content="noindex">'  stuff 
has nothing to do with it.  That part was sent from your server to the 
recon bot in the 404 header. brack

-------------------------------------------------
Email solutions, MS Exchange alternatives and extrication,
security services, systems integration.
Contact:    [EMAIL PROTECTED]


_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law
enforcement upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to