a list of hosts in a RPC BOTNET, mostly 209.x.x.x,
From: Drew Weaver
Date: Wed Aug 06 11:31:58 2003
I've tried contacting abuse departments of several of
these isps and none of them seem to care, so I figured I would post the info
here, and maybe someone will let them know, the biggest offender is atlantech.
These are all hosts that have been compromised by the same person, they're
being used to SYN flood 65.110.34.100
If you want to see this glorious channel for your self its
called #!LPOL! on Undernet.
Basically the way this works is your box gets attacked, then
it sits on this irc channel and waits for commands, in this case the command is
!SYN 65.110.34 1000 6667 9999 -s
Anyways here is the list, and every 30 seconds or so 2 or 3
more jump into this room.. the botnet is growing!