Large warezbot network.

["Dave Monnier, IT Security Office, Indiana University" <dmonnier () IU EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The following IP is being used to control a number of very large
warezbot networks. This host is one of what appear to be four IRCDs. The
entire IRC network appears to be for warez etc.

65.110.42.59

The following are the largest channels being used on the server. Some of
these
channels have hundreds of bots in them.


#albums 622
#altrock 131
#anime-palace 183
#ANIMEUNIVERSE3 33
#attrition 796
#audioworld 1010
#bollywood 185
#CONSOLES 356
#e-warez 510
#ELITEWAREZ 489
#GK-XDCC 56
#the.real.uni 161
#tmd 92
#TMD-MOVIEZ 522
#tmd-music 106
#top0sec 79
#TOXIC-WAREZ 1340
#trance 90
#ULTRAD 163
#x-dcc 590
#xdcc 573

The following institutions have bots or users attached to the network
and present in one of the above channels.

LaTech.edu
NoDak.edu
albany.edu
american.edu
arizona.edu
binghamton.edu
bloomu.edu
callutheran.edu
calpoly.edu
cbu.edu
chop.edu
clemson.edu
colostate.edu
creighton.edu
csudh.edu
csupomona.edu
drake.edu
drexel.edu
duke.edu
emich.edu
emory.edu
fit.edu
fsu.edu
furman.edu
geneseo.edu
hartford.edu
howard.edu
ic.edu
ilstu.edu
jmu.edu
ksu.edu
ku.edu
lsu.edu
macalester.edu
memphis.edu
mnu.edu
montana.edu
morgan.edu
msstate.edu
msu.edu
mtu.edu
mu.edu
ncat.edu
ncsu.edu
newpaltz.edu
odu.edu
ohio-state.edu
oswego.edu
ou.edu
pitt.edu
psu.edu
purdue.edu
radford.edu
rhodes.edu
rit.edu
siu.edu
stonybrook.edu
syr.edu
tm.edu
trinity.edu
uaf.edu
uc.edu
uchicago.edu
uci.edu
ucla.edu
uconn.edu
ucr.edu
ucsf.edu
udel.edu
ufl.edu
uic.edu
uiowa.edu
uiuc.edu
uky.edu
umassd.edu
umich.edu
uml.edu
unc.edu
uncg.edu
unl.edu
unt.edu
upenn.edu
utdallas.edu
utk.edu
uvm.edu
uwsp.edu
vt.edu
washington.edu
wcu.edu
wcupa.edu
wmich.edu
wsu.edu
wustl.edu
wvwc.edu

Cheers,
- -Dave
- --
| Dave Monnier - dmonnier () iu edu - http://php.indiana.edu/~dmonnier/ |
|  Lead Security Engineer, Information Technology Security Office    |
|  Office of the VP for Information Technology, Indiana University   |
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAaD5mBIf6jlONJjIRAtZrAKDimTmrCAxnRa2g/91cswIjIcw3wACdEWhd
CHcQaadfC11Ky8VXOCh/RWA=
=A/g/
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.