On Wed, 5 Jan 2005 18:27:25 -0500 (EST), [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Here is some additional information.
> � ircname : [UNC]69402 > | channels : #!processor > � server : shellcodewarez.info (ScW Network) > : idle : 4 hours 57 mins 9 secs (signon: Tue Jan 4 23:40:01 2005) > ������---�--��-������---�--��-���������--- -- - > | [UNC]73047 ([EMAIL PROTECTED]) (unknown) > � ircname : [UNC]73047 > | channels : +#!processor > � server : shellcodewarez.info (ScW Network) > : idle : 4 hours 57 mins 26 secs (signon: Wed Jan 5 07:48:45 2005) > > As you can see they are masking the ip addresses. That depends. When new victim arrives on the channel, you can see his IP: [13:06] * [UNC]08801 ([EMAIL PROTECTED]) has joined #!processor but on inquery it's really masked, yes: [13:07] [UNC]08801 is [EMAIL PROTECTED] * [UNC]08801 [13:07] [UNC]08801 is on #!processor [13:07] [UNC]08801 using shellcodewarez.info ScW Network [13:07] [UNC]08801 has been idle 49 secs, signed on thursday jan 06 01:18 pm all the best, W. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
