To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- I know who this SaYaN guy is, its a slovenian guy on IRCNet making alot of trouble. He has attacked my company alot of times because of friends using my services for IRC. 212.18.63.23 is a box owned by another slovenian guy called "speed". The Burmese network is mainly being ran by a hacker crew called SOL, SOL from solaris which were their OS of choice to hack. 212.18.63.23 is a box hosted at AMIS, some ISP excisting on slovenia who does not even allow IRC activity. Another guy you might found there is "dubai", a well known abuser on IRCNet which uses SaYaN's ddos network.
----- Original Message ----- From: "Niklas Schiffler" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Saturday, April 08, 2006 1:52 AM Subject: Re: [botnets] 212.18.63.23 > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > lordandrej wrote: > ... >> [ Network services ] >> * Looks for an Internet connection. >> * Connects to "212.18.63.23 " on port 6667 (TCP). >> * Connects to IRC server. >> * IRC: Uses nickname sayan-803400. >> * IRC: Uses username ezkieyac. >> * IRC: Joins channel #irc-party with password pass. >> * IRC: Sets the usermode for user sayan-803400 to +xB. > ... > > This server (212.18.63.23) is part of the Burmese IRC Network > (http://myanmaronline.org/index.php?option=com_wrapper&Itemid=65). > There's no A record for irc.burmeseonline.net pointing to that > IP though. > > nick.. > > > > _______________________________________________ > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > All list and server information are public and available to law > enforcement upon request. > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
