To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------





The botnet located at

 

The IRC server is

/server bart.ddoshost.net:6667

This resolves to 72.20.3.22

 

The channel is

/join #w4r3z enter0000

 

Has been, at least temporarily, shutdown.  The dns entry bart.ddoshost.net was (is) parked at www.sharpnet.net.  The admins for that site killed the service. I assume the owners will just move their domain to a new server son.  I received this message from the sharpnet admin:

 

 

----snip----

Thank you for bringing this to our attention, I have shutdown the service in question, and I have traced the responsible party, I am also implementing port-blocking of common irc ports on that server, if you can email me a copy of the infected program in a RAR file it would be greatly appreciated, so that I may give it to my specialists, and have it investigated. I am sorry that this indicent has happened to you.  If you need assistance in removing this bot, let me know.

 

Zachary A. Eadie

----snip----

_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to