To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Hello everybody,
Nice list.. I found small botnet located in Korea o/ server: 211.233.14.21 6667 // ´´NICK R443577004 USER R448390135 0 0 :R443577004 :Run 001 R443577004 :Welcome to the Run server R443577004 :Run 002 R443577004 :Your host is Run, running version 5.5.2653 :Run 003 R443577004 :This server was created Sep 9 2000 at 01:20:51 PDT :Run 004 R443577004 Run 5.5.2653 aioxz abcdefhiklmnoprstuvxyz :Run 251 R443577004 :There are 415 users and 405 invisible on 1 servers :Run 252 R443577004 2 :operator(s) online :Run 253 R443577004 107 :unknown connection(s) :Run 254 R443577004 3 :channels formed :Run 255 R443577004 :I have 415 clients and 0 servers :Run 265 R443577004 :Current local users: 415 Max: 944 :Run 266 R443577004 :Current global users: 415 Max: 944 JOIN #eer .eer. :Run 422 R443577004 :MOTD File is missing USERHOST R443577004 MODE R443577004 +i :[EMAIL PROTECTED] JOIN :#eer :Run 332 R443577004 #eer :.nats 100 200 203. -n :Run 353 R443577004 @ #eer :R443577004 @dp-[77] :Run 366 R443577004 #eer :End of /NAMES list. NOTICE #eer :[NTScan]: Scanning NT-shares.. :Run 302 R443577004 :[EMAIL PROTECTED] :R443577004 MODE R443577004 :+i // Server is very safely configured, channels are unlistable, #eer channel seems be as input channel, no other hosts only one op. I have no idea how uncover other two channels o//. Channel with key "#eer .eer." is working /for now ;]/. Botmaster have no time/spirit for reply ;] For now Im snooping one infected client in our network, maybe I will get another information .. by nirgil _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
