[botnets] NICK question

[Brian Allen]

To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------

Hi, I’m not new to computer security, but I just started immersing myself in how irc and botnets work a couple months ago when I started my new job here.  Here is a question I have:  What is the significance of the different bot names?  I know each nick needs to be unique in an irc channel so I would expect all the bot names to be random characters, but most of the ones I have seen have some order to them.  Here are some true examples I captured:   NICK [09|USA|078097] NICK [Niger]-029 NICK '20726815BDC5-C8AD-C1F8 NiCK s1-0005ed56 NICK |A00[USA]90993|   What do the brackets and the pipes mean? Are they actually part of the nick?  I assume there is a country component to some bot nicks, although I don’t know why I would see Niger on a US campus.  Do you have any other advice for interesting things to look for and how to interpret these nicks?   Thanks,   -Brian Allen

_______________________________________________
botnets mailing list
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets