[77801] in North American Network Operators' Group
Re: IRC Bot list (cross posting)
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Tue Feb 8 20:33:54 2005
Date: Wed, 9 Feb 2005 01:32:55 +0000 (GMT)
From: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
To: "J. Oquendo" <sil@politrix.org>
Cc: UNIversity Security Operations Group <unisog@lists.sans.org>,
<nanog@nanog.org>
In-Reply-To: <Pine.GSO.4.58.0502082012540.6191@kungfunix.net>
Errors-To: owner-nanog-outgoing@merit.edu
Hi,
you probably didnt think of this but it might not be a good idea to publish a
list of 3000 computers than can be infected/taken over for further nastiness.
if you can privately send me a list of Ip addresses (no need to sort) i can
assist you to distribute this information securely?
Steve
On Tue, 8 Feb 2005, J. Oquendo wrote:
>
>
> On Tue, 8 Feb 2005, Justin Azoff wrote:
>
> > I found an irc channel with 3000+ irc bots in it including a few hundred
> > edu's.
> > I have it posted at
> >
> > http://www.albany.edu/~ja6447/hacked_bots8.txt
> >
>
> I started to sort them... Maybe I will finish when I get out of work or
> so. Here is the prettified/sorted list of the above...
> http://www.infiltrated.net/nanog-list-botlist
>
> lynx -dump http://www.infiltrated.net/nanog-list-botlist|grep -i $MYDOMAIN
>
> Further sorted
> http://www.infiltrated.net/nanog-botlist-comcast
> http://www.infiltrated.net/nanog-botlist-edu
> http://www.infiltrated.net/nanog-botlist-optonline
> http://www.infiltrated.net/nanog-botlist-vz
> http://www.infiltrated.net/nanog-botlist-cox
> http://www.infiltrated.net/nanog-botlist-mspring
> http://www.infiltrated.net/nanog-botlist-rr
>
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
> J. Oquendo
> GPG Key ID 0x0D99C05C
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0D99C05C
>
> sil @ infiltrated . net http://www.infiltrated.net
>
> "How a man plays the game shows something of his
> character - how he loses shows all" - Mr. Luckey
>
