To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- I just had two machines connect via IRC to the following. I included a few of the many different NICKS:
Hostname appears to be www.castledental.com although I didn't verify with query logs IP 67.66.58.136 Port 4367 NICK [04|USA|928671] NICK [04|USA|851313] USER XP-8858 * 0 :MATILDA NICK odmevuzkmgw NICK zrdkurwzjww NICK vfhltvbdhwqe I can't telnet to this IP/port but I did get this from a browser: % telnet 67.66.58.136 4367 Trying 67.66.58.136... telnet: Unable to connect to remote host: Connection refused http://www.castledental.com:4367/ :linux.org 451 GET :You have not registered :linux.org 451 Host: :You have not registered :linux.org 451 User-Agent: :You have not registered :linux.org 451 Accept: :You have not registered :linux.org 451 Accept-Language: :You have not registered :linux.org 451 Accept-Encoding: :You have not registered :linux.org 451 Accept-Charset: :You have not registered :linux.org 451 Keep-Alive: :You have not registered :linux.org 451 Connection: :You have not registered :linux.org 451 Cookie: :You have not registered ERROR :Closing Link: [128.252.120.109] (Ping timeout) I've never seen this. Can anyone explain why telnet didn't work but a browser made a connection? Is it just busy and I should keep trying or is there some other common explanation? You can't handle the tooth, -Brian _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
