To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
I am tracking a bot-net that originally tried to connect to its controllers
on 6667 but then switched to 4661. 

-Mike

-----Original Message-----
From: Roland Dobbins [mailto:[EMAIL PROTECTED] 
Sent: Friday, March 03, 2006 12:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [botnets] 6667 so stupid

To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------

SPs don't normally block this (nor should they), they're about  
providing service to their customers.

Lots of botnets use non-standard IRCDs running on random high ports,  
as well.  We're also seeing increasing use of non-IRC C&C methods, as  
well.


On Feb 24, 2006, at 3:00 PM, sandalwood wrote:

> To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
> ----------
> Hello botnets,
>
>   first post? nice.
>
>   well my question is, what do these kids all have down syndrome??
>   why are they so stupid as to use the ancient "recommended" port 6667
>   for c&c, when they should know that probably HALF of all major isps
>   automatically block outbound traffic to that port?
>
>   obvious alternate ports would be common services 80, 21, 53..
>
> -- 
> Best regards,
>  sandalwood                          mailto:[EMAIL PROTECTED]
>
>
>
> ----------
> * Zoner PhotoStudio 8 - Your Photos perfect, shared, organised!  
> www.zoner.com/zps
>
> _______________________________________________
> botnets mailing list
> To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
> http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

----------------------------------------------------------------------
Roland Dobbins <[EMAIL PROTECTED]> // 408.527.6376 voice

      Everything has been said.  But nobody listens.

                    -- Roger Shattuck

_______________________________________________
botnets mailing list
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets


_______________________________________________
botnets mailing list
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to