[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] the bot 200.106.25.197



Hallo Marc,

* Marc Chabot <marcchabot@xxxxxxxxxxxxxx> [2004-04-15 16:49]:
> Can anyone here identify what bot this is?
> I keep getting viruses comming from 200.106.25.197 and
> it's open to telnet on port 23 asking for a password.

the ip could be an dynamic ip and 23 is the default telnet port.
it can be difficult to figure it out ;-)
regards nico

-- 
Nico Golde                | nico@xxxxxxxxx      | 310777820@ICQ | nion@xxxxxxx
http://www.ngolde.de      | GnuPG Key: http://www.ngolde.de/gpg/nico_golde.gpg
Fingerprint               | FF46 E565 5CC1 E2E5 3F69  C739 1D87 E549 7364 7CFF 
vim -c   ":%s/^/WhfgTNabgureRIvzSUnpxreT-Tavba/|:%s/[R-T]/ /Ig|:normal ggVGg?"

Attachment: pgp00043.pgp
Description: PGP signature