Re: the bot 200.106.25.197

[Nico Golde <nion () gmx net>]

Hallo Marc,

* Marc Chabot <marcchabot () marcchabot com> [2004-04-15 16:49]:
> Can anyone here identify what bot this is?
> I keep getting viruses comming from 200.106.25.197 and
> it's open to telnet on port 23 asking for a password.

the ip could be an dynamic ip and 23 is the default telnet port.
it can be difficult to figure it out ;-)
regards nico

-- 
Nico Golde                | nico () ngolde de      | 310777820@ICQ | nion () gmx net
http://www.ngolde.de      | GnuPG Key: http://www.ngolde.de/gpg/nico_golde.gpg
Fingerprint               | FF46 E565 5CC1 E2E5 3F69  C739 1D87 E549 7364 7CFF 
vim -c   ":%s/^/WhfgTNabgureRIvzSUnpxreT-Tavba/|:%s/[R-T]/ /Ig|:normal ggVGg?"

Attachment: _bin
Description: