To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Actually, the pattern appears to be 01c7fa35$


On Tue, Sep 18, 2007 at 05:03:17PM -0400, Jonathan Yarden babbled thus:
> To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
> ----------
> I have a spamtrap getting 80-100k messages/day and noted a pattern that
> repeats in the Message-ID field:
> 
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> 
> Obviously in this subset, you can clearly see the pattern...01c7fa
> 
> My question to the list is whether this pattern appears in some of the
> Storm Botnet email others are getting.
> -- 
> Jon
> 
> Those who make peaceful revolution impossible will make violent
> revolution inevitable.
>                 -- John F. Kennedy

-- 
PinkFreud
Chief of Security, Nightstar IRC network
irc.nightstar.net | www.nightstar.net
Server Administrator - Blargh.CA.US.Nightstar.Net
Unsolicited advertisements sent to this address are NOT welcome.

Attachment: signature.asc
Description: Digital signature

_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to