Re: short Botnet list and Cashing in on DoS

["Ricardo \"Rick\" Gonzalez" <rico.gonzalez () gmail com>]

In the future, I'd be careful about posting this list to nanog, rather
than privately to their respective  security and abuse desks.

I realize your intentions were good, but it's been pointed out before
that this mailing list is monitored by the crackers controlling a lot
of the bot networks, including Gregory "OseK" Taylor, Brian Bruns, and
Andrew "Trelane" Kirch, so it's probably not a good idea to fuel them
by listing the IP addresses of users with compromised machines.

---R
On Fri, 8 Oct 2004 16:01:21 -0500, Matthew S. Hallacy <poptix () poptix net> wrote:
> On Fri, Oct 08, 2004 at 09:07:48PM +0200, Gadi Evron wrote:
>
> > Those drone armies that lurk on actual real networks are a major problem
> > for the networks themselves, but I doubt anyone can blame them for:
>
> Only when they do something about it.
>
> > 1. Worrying about personal privacy of their users, not wanting to bend
> > too many rules to fight these drones that *appear* like regular users.
>
> Appear? If you own one of the blocks below, please do something about it.
>
> sadsa``` ~orion@67.98.36.19  Don't Touch Me
> `o`hj`h` ~orion@67.98.36.19  Don't Touch Me
> TaiFrunze ~orion@66.136.184.186  Don't Touch Me
> Crist9597 ~orion () adsl-66-136-184-186 dsl stlsmo swbell net  Don't Touch Me
> Mihaiul ~orion () pD9F73FA3 dip t-dialin net  Don't Touch Me
> Cs` ~tayrona () pD9F5AF65 dip t-dialin net  Don't Touch Me
> __intzu__ ~alpina () pD9F5AF65 dip t-dialin net  Don't Touch Me
> _ragonul_ ~alpina@203.115.112.137  Don't Touch Me
> Dragonul_ ~alpina@203.115.112.137  Don't Touch Me
> }-{ ~orion@66.88.13.142  Don't Touch Me
> {}- ~orion@66.88.13.142  Don't Touch Me
> Kyia_ ~tayrona () pD9F5AEFB dip t-dialin net  Don't Touch Me
> Rupetot ~weed () ptd2-d9b8264f pool mediaWays net  Don't Touch Me
> awa` ~imagine () ptd2-d9b8264f pool mediaWays net  Don't Touch Me
> Raz ~private () pD9F5AF4A dip t-dialin net  Don't Touch Me
> FacFocu ~orion@66.161.11.110  Don't Touch Me
> Cristi-- ~alpina () pD9F5AE4A dip t-dialin net  Don't Touch Me
> VandFan ~users () pD9F5AE17 dip t-dialin net  Don't Touch Me
> Dragonul` ~tayrona@217.245.174.20  Don't Touch Me
> Viper18 ~users () pD9F5AE17 dip t-dialin net  Don't Touch Me
> \op ~orion () h-66-134-43-211 snvacaid covad net  Don't Touch Me
> Kyia ~weed () c-67-163-117-167 client comcast net  Don't Touch Me
> n3fertiti ~users () ll194-33-222-204-194 ll194 iam net ma  Don't Touch Me
> _____i___ ~orion () c-24-16-161-107 client comcast net  Don't Touch Me
> Tzucky ~orion () MaKkInSus users undernet org  Don't Touch Me
> Cristel` ~orion () c-24-16-161-107 client comcast net  Don't Touch Me
> ns0 ~orion () earth sisioh com  Don't Touch Me
> Aiuritul ~ignore () ll194-33-222-204-194 ll194 iam net ma  Don't Touch Me
> dragonul ~orion@67.40.239.163  Don't Touch Me
> Aiure`l ~orion@66.161.11.110  Don't Touch Me
> Avi0n ~orion () dsl092-179-090 sfo1 dsl speakeasy net  Don't Touch Me
> Muthi_ ~orion () adsl-67-38-98-242 dsl chcgil ameritech net  Don't Touch Me
> forgrt ~orion () adsl-67-38-98-242 dsl chcgil ameritech net  Don't Touch Me
> Qp` ~orion () dsl092-032-218 lax1 dsl speakeasy net  Don't Touch Me
> Pasarel ~orion () dsl092-032-218 lax1 dsl speakeasy net  Don't Touch Me
> `p`p`p ~orion@202.39.224.36  Don't Touch Me
> Dragonel ~orion@202.39.224.36  Don't Touch Me
> polq ~orion@202.37.100.19  Don't Touch Me
> `o`o`o`o` ~orion@202.37.100.19  Don't Touch Me
> HanPanga ~orion () dsl092-030-100 sea2 dsl speakeasy net  Don't Touch Me
> Hanga ~orion () dsl092-030-100 sea2 dsl speakeasy net  Don't Touch Me
> helpMa ~orion () dsl092-030-249 sea2 dsl speakeasy net  Don't Touch Me
> OrlanDo`` ~orion () rrcs-67-52-199-254 west biz rr com  Don't Touch Me
> ionmaria ~orion () dsl092-030-249 sea2 dsl speakeasy net  Don't Touch Me
> Wow` ~orion@216.138.83.22  Don't Touch Me
> heart ~orion () WhaThaFack users undernet org  Don't Touch Me
> nicknam`` ~orion@67.69.108.212  Don't Touch Me
> _o_o_o ~orion@67.69.108.212  Don't Touch Me
> apometre ~orion@66.228.198.102  Don't Touch Me
> mutule ~orion@66.228.198.102  Don't Touch Me
> sugaciu`` ~orion@67.40.239.163  Don't Touch Me
> Rezerve ~imagine () c-67-164-103-112 client comcast net  Don't Touch Me
> Sugaci`` ~orion () CPE-65-30-85-5 kc rr com  Don't Touch Me
> daasd`` ~orion () CPE-65-30-85-5 kc rr com  Don't Touch Me
> Soule ~fucked () c-67-164-103-112 client comcast net  Don't Touch Me
> IP255 ~orion () uslec-66-255-65-10 cust uslec net  Don't Touch Me
> Ghidon ~orion () adsl-66-218-54-38 dslextreme com  Don't Touch Me
> Minea ~orion () user-119bq9a biz mindspring com  Don't Touch Me
> Milimetru ~orion () mdsnwinrp3-pool0-a130 mdsnwi tds net  Don't Touch Me
> centime ~orion () mdsnwinrp3-pool0-a130 mdsnwi tds net  Don't Touch Me
> wip` ~orion () user-119bq9a biz mindspring com  Don't Touch Me
> ijij ~orion () Toronto-HSE-ppp3746549 sympatico ca  Don't Touch Me
> _o_ ~orion () rrcs-67-52-199-254 west biz rr com  Don't Touch Me
> afchd`` ~orion () Toronto-HSE-ppp3746549 sympatico ca  Don't Touch Me
> Aiureai ~orion () va-65-41-106-85 sta sprint-hsd net  Don't Touch Me
> Save- ~weed () c-67-163-117-167 client comcast net  Don't Touch Me
> Sugativa` ~orion () va-65-41-106-85 sta sprint-hsd net  Don't Touch Me
> costi`` ~orion () 66 88 191 62 ptr us xo net  Don't Touch Me
> }-{` ~orion () 66 88 191 62 ptr us xo net  Don't Touch Me
> `o`o`o ~orion@67.39.113.154  Don't Touch Me
> wacdsfc ~orion@67.39.113.154  Don't Touch Me
> Cruella ~orion@216.138.83.22  Don't Touch Me
> So`what ~orion () ns1 kimbrand net  Don't Touch Me
> `o`o ~orion () li9-240 members linode com  Don't Touch Me
> Dragon-` ~orion () li9-240 members linode com  Don't Touch Me
> mysql ~orion () ns1 kimbrand net  Don't Touch Me
> MaArunc ~berg@66.192.122.27  Don't Touch Me
> InterGame ~orion () c66 203 200 210 tidc telus com  Don't Touch Me
> Ampulea ~orion () c66 203 200 210 tidc telus com  Don't Touch Me
> wadasd` ~orion () 213 210 185 47 adsl nextra cz  Don't Touch Me
> Vrabie ~orion@213.210.185.47  Don't Touch Me
> Ancas ~orion@66.192.122.27  Don't Touch Me
> Hacker-ul ~orion@67.32.12.11  Don't Touch Me
> Pilotu ~orion () mumiaX users undernet org  Don't Touch Me
> lamerul ~orion () 66-194-148-180 gen twtelecom net  Don't Touch Me
> Muthi ~orion () 66-194-148-180 gen twtelecom net  Don't Touch Me
> Pasarelu ~orion@216.198.204.226  Don't Touch Me
> `o`o``o` ~orion@216.198.204.226  Don't Touch Me
> Apometru ~orion@213.234.124.169  Don't Touch Me
> Soare` ~orion@213.234.124.169  Don't Touch Me
> qwewq ~property@213.237.106.4  Don't Touch Me
> Imagine ~orion () server195-228 matrix-server co uk  Don't Touch Me
> SeeN ~orion () Flgurantu users undernet org  Don't Touch Me
> Saliva ~imagine () ptd2-d9b8264f pool mediaWays net  Don't Touch Me
> }[} ~orion () h-66-134-43-211 snvacaid covad net  Don't Touch Me
> Polik ~orion () h-66-134-43-212 snvacaid covad net  Don't Touch Me
> Comes ~Read@80.78.226.176  Read Only *
> Parts ~Read@206.176.192.111  Read Only *
> Officials ~Read@66.98.204.56  Read Only *
> BaNNeD ~Read () TurboBDiesel users undernet org  Read Only *
> Regide ~Read () lahfaye bgfservers com  Read Only *
> ImTheBoss ~Read () exo phpwebhosting com  Read Only *
> Makara ~Read () ds80-237-204-8 dedicated hosteurope de  Read Only *
> Distrus ~Read@69.10.154.150  Read Only *
> Read____ ~Read@210.1.50.2  Read Only *
> Read__ ~Read@67.18.145.210  Read Only *
> Read_____ ~Read () 35-11-190-213 customers iber-x net  Read Only *
> Read___ ~Read@80.86.206.30  Read Only *
> Read ~Read@217.148.176.138  Read Only *
> CapDeTaur httpd@24.180.128.140  Read Only *
> Motroi ~Read@195.66.106.30  Read Only *
> LcShells ~Read@206.251.242.140  Read Only *
> Cifre ~Read@212.43.237.40  Read Only *
> Complete ~Read@83.211.141.24  Read Only *
> ZidaneUs ~DhtTeam1 () zealot webnick net  Dorohoi-Hacking-Team !!!
> CheaterGo ~DhtTeam1 () ip-211-122-134-202 rev dyxnet com  Dorohoi-Hacking-Team !!!
> CheaterRu ~DhtTeam1@64.62.172.111  Dorohoi-Hacking-Team !!!
> CheaterUk ~DhtTeam1@64.71.141.167  Dorohoi-Hacking-Team !!!
> CheaterCr ~DhtTeam1@216.67.239.64  Dorohoi-Hacking-Team !!!
> CheaterSk ~DhtTeam1@64.246.56.54  Dorohoi-Hacking-Team !!!
> CheaterRk ~DhtTeam1@67.19.156.231  Dorohoi-Hacking-Team !!!
> CheaterRo ~DhtTeam1@67.19.156.227  Dorohoi-Hacking-Team !!!
> InDaHouze ~C-Strike@66.193.230.226  Dorohoi-Team
> ZidaneUs ~DhtTeam1 () zealot webnick net  Dorohoi-Hacking-Team !!!
> CheaterGo ~DhtTeam1 () ip-211-122-134-202 rev dyxnet com  Dorohoi-Hacking-Team !!!
> AlexWget ~C-Strike () server incomware com  Dorohoi-Team
> CheaterRu ~DhtTeam1@64.62.172.111  Dorohoi-Hacking-Team !!!
> CheaterUk ~DhtTeam1@64.71.141.167  Dorohoi-Hacking-Team !!!
> A13xandru ~C-Strike@217.98.56.2  Dorohoi-Team
> SmEcHeRu ~C-Strike () adyinlove users undernet org  Dorohoi-Team
> AlexSunos ~C-Strike@66.194.41.172  Dorohoi-Team
> CheaterCr ~DhtTeam1@216.67.239.64  Dorohoi-Hacking-Team !!!
> CheaterSk ~DhtTeam1@64.246.56.54  Dorohoi-Hacking-Team !!!
> PuiDePix ~C-Strike@66.194.41.171  Dorohoi-Team
> AlexRoBoT ~C-Strike@66.194.41.171  Dorohoi-Team
> Dumi ~C-Strike@66.194.41.174  Dorohoi-Team
> AlexOut ~C-Strike@66.193.175.124  Dorohoi-Team
> TheHacers ~C-Strike@66.193.175.124  Dorohoi-Team
> CheaterRk ~DhtTeam1@67.19.156.231  Dorohoi-Hacking-Team !!!
> CheaterRo ~DhtTeam1@67.19.156.227  Dorohoi-Hacking-Team !!!
> update ~mos () AmCei7Ani users undernet org  MariusHacK The Hacker TeaM Dorohoi
> AllWanted ~craciun () InferNus users undernet org  MariusHacK The Hacker TeaM Dorohoi
>
>
>
> --
> Matthew S. Hallacy                            FUBAR, LART, BOFH Certified
> http://www.poptix.net                           GPG public key 0x01938203