Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: [Full-disclosure] Worm phone home site question
From: ggfirst (guirad_gepita.fr)
Date: Tue Sep 27 2005 - 07:16:59 CDT
On 9/27/05, odinanne <odinannecomcast.net> wrote:
> 18.104.22.168 tcp 2255, 5522, 9009
> This is the phone home site for a worm found on the network. Any idea
> what service they are running on these ports or how to loggin or register?
> This is the worm.
it appears to be a classical IRC server.
So, you can easily login with any IRC client.
But I can't get the list of available channels.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/