|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [Full-disclosure] Worm phone home site question
From: ggfirst (guirad_g
epita.fr)
Date: Tue Sep 27 2005 - 07:16:59 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On 9/27/05, odinanne <odinannecomcast.net> wrote:
> 210.240.39.40 tcp 2255, 5522, 9009
>
> This is the phone home site for a worm found on the network. Any idea
> what service they are running on these ports or how to loggin or register?
>
> This is the worm.
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSDBOT%2ECGY&VSect=P
>
>
Hello,
it appears to be a classical IRC server.
So, you can easily login with any IRC client.
But I can't get the list of available channels.
--
ggfirst
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]