Full Disclosure mailing list archives

Re: SSH scans, i caught one

From: Marco van Berkum <marco () obit nl>
Date: Mon, 22 Nov 2010 22:50:38 +0100

A friend pointed me to a botnet called Chuck Norris.

http://www.muni.cz/ics/research/cyber/files/chuck_norris.pdf

This botnet looks exactly similar, tho this one uses telnet to
bruteforce. At least, according to the pdf. Exact same commands,
but this time via SSH. Chuck Norris 2? :)

Grtz,
Marco van Berkum





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Re: SSH scans, i caught one, (continued)
- Re: SSH scans, i caught one OrderZero (Nov 20)
  - Re: SSH scans, i caught one Marco van Berkum (Nov 20)
    - Re: SSH scans, i caught one Robin (Nov 20)
    - Re: SSH scans, i caught one Marco van Berkum (Nov 20)
    - Re: SSH scans, i caught one Egon Alter (Nov 20)
    - Re: SSH scans, i caught one Marco van Berkum (Nov 20)
    - Re: SSH scans, i caught one Marco van Berkum (Nov 20)
    - Message not available
    - Re: SSH scans, i caught one Thor (Hammer of God) (Nov 22)
    - Message not available
    - Re: SSH scans, i caught one Graham Gower (Nov 22)
    - Re: SSH scans, i caught one Valdis . Kletnieks (Nov 22)
    - Re: SSH scans, i caught one Marco van Berkum (Nov 22)
    - Re: SSH scans, i caught one Lukasz Jaroszewski (Nov 22)
    - Re: SSH scans, i caught one Lukasz Jaroszewski (Nov 22)
    - Re: SSH scans, i caught one andrew wiggin (Nov 20)
    - Re: SSH scans, i caught one Robin (Nov 20)