nanog mailing list archives
IRC bots...
From: "Fergie (Paul Ferguson)" <fergdawg () netzero net>
Date: Sat, 12 Mar 2005 18:25:21 GMT
Somewhat related to operational issues... It was interesting to read the "daily handler" log at the ISC which related their experiences with detecting (and disabling/disinfecting) a machine/network infected with several IRCbot drone computers. As someone who has had to deal with with this issue on several customer networks, it is sometimes intriguing at the length at which some of the developers of these damned things go through to accomplish their feats. :-) http://isc.sans.org/diary.php?date=2005-03-10 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg () netzero net or fergdawg () sbcglobal net
Current thread:
- IRC bots... Fergie (Paul Ferguson) (Mar 12)
- Re: IRC bots... Bill Nash (Mar 12)
- <Possible follow-ups>
- RE: IRC bots... Hannigan, Martin (Mar 12)
- RE: IRC bots... Bill Nash (Mar 12)
- Re: IRC bots... John Kristoff (Mar 12)
- Re: IRC bots... Bill Nash (Mar 13)
- RE: IRC bots... Bill Nash (Mar 12)
- Re: IRC bots... Florian Weimer (Mar 20)
- Re: IRC bots... Alan Sparks (Mar 21)
- Re: IRC bots... Bill Nash (Mar 21)
- Message not available
- Re: IRC bots... Jay R. Ashworth (Mar 22)