To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
The brackets and pipes are simply characters, just like a-z,A-Z,0-9 are. They're often used to seperate information, though.
The first and last nicks look like they belong to an rxbot or a variant thereof - that's a typical nick pattern for those. On Fri, Mar 10, 2006 at 08:42:49AM -0600, Brian Allen babbled thus: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Hi, I'm not new to computer security, but I just started immersing > myself in how irc and botnets work a couple months ago when I started my > new job here. Here is a question I have: What is the significance of > the different bot names? I know each nick needs to be unique in an irc > channel so I would expect all the bot names to be random characters, but > most of the ones I have seen have some order to them. Here are some > true examples I captured: > > NICK [09|USA|078097] > NICK [Niger]-029 > NICK '20726815BDC5-C8AD-C1F8 > NiCK s1-0005ed56 > NICK |A00[USA]90993| > > > > What do the brackets and the pipes mean? Are they actually part of the > nick? I assume there is a country component to some bot nicks, although > I don't know why I would see Niger on a US campus. Do you have any > other advice for interesting things to look for and how to interpret > these nicks? > > > > Thanks, > > > > -Brian Allen -- PinkFreud Chief of Security, Nightstar IRC network irc.nightstar.net | www.nightstar.net Server Administrator - Blargh.CA.US.Nightstar.Net Unsolicited advertisements sent to this address are NOT welcome.
signature.asc
Description: Digital signature
_______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
