Full Disclosure mailing list archives
Re: the bot 200.106.25.197
From: Nico Golde <nion () gmx net>
Date: Thu, 15 Apr 2004 17:45:18 +0200
Hallo Marc, * Marc Chabot <marcchabot () marcchabot com> [2004-04-15 16:49]:
Can anyone here identify what bot this is? I keep getting viruses comming from 200.106.25.197 and it's open to telnet on port 23 asking for a password.
the ip could be an dynamic ip and 23 is the default telnet port. it can be difficult to figure it out ;-) regards nico -- Nico Golde | nico () ngolde de | 310777820@ICQ | nion () gmx net http://www.ngolde.de | GnuPG Key: http://www.ngolde.de/gpg/nico_golde.gpg Fingerprint | FF46 E565 5CC1 E2E5 3F69 C739 1D87 E549 7364 7CFF vim -c ":%s/^/WhfgTNabgureRIvzSUnpxreT-Tavba/|:%s/[R-T]/ /Ig|:normal ggVGg?"
Attachment:
_bin
Description:
Current thread:
- the bot 200.106.25.197 Marc Chabot (Apr 14)
- Re: the bot 200.106.25.197 Nico Golde (Apr 16)