To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
I have an infected host at one of our clients trying 11 IRC destinations on port 8080, of which 4 (IRC domain shown) are live:
163.1.213.194
24.178.108.231
24.231.133.199
24.248.188.53 still.jp
24.3.168.130 still.jp
65.26.31.192 m00p.org
66.108.20.7
67.164.54.64 still.jp
69.216.104.25
69.220.225.80
69.254.144.52
Sorry if these are duplicates - I'm on a different PC from usual and don't have my file of known IPs handy.
Regards,
Dave
_____________________
David Long
Network Analyst
Serco Solutions
01223 717582
[EMAIL PROTECTED]
www.serco.com
bringing service to life
______________________
***Disclaimer****
This e-mail and any attachments are for the intended addressee(s) only and may contain confidential and/or privileged material. If you are not a named addressee, do not use, retain or disclose such information. This email is not guaranteed to be free from viruses and does not bind Serco in any contract or obligation.
Serco Limited. Registered in England and Wales. No: 24224 Registered Office: Serco House,16 Bartley Wood Business Park, Hook, Hampshire RG27 9UY United Kingdom.
_______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
