Re: Welcome to whitestar

To report a botnet PRIVATELY please email: c2report@xxxxxxxxx
----------
Nicholas Albright wrote:
> Since there has been little [no] activity on this list, I thought I'd through 
> a few things out to get us started.
> 
> First of all, everyone welcome to the Whitestar list. I applaud Gadi's 
> decision to open a public mailing list concerning botnets. In the time I've 
> been monitoring botnets I've learned that public education serves a great 
> purpose.
> 
> With that said,
> 
> 
> C&C Server IP:  66.235.208.47 
> Port: 8206
> NICK: mambo|######            (replace # with random numbers)
> USER STRING: USER mambo######    localhost localhost :uid= 30 (wwwrun) gid=8
> (www)
> (user string #'s use same numbers you used as NICK)

Reported.

Thanks Nicholas!

> Joins channel: #mambo# 
> with channel key: ddosit
> 
> Careful, this botherder checks is bots for snoops! 

Indeed, login to that server at your own risk.

        Gadi.