short Botnet list and Cashing in on DoS
Ricardo "Rick" Gonzalez
rico.gonzalez at gmail.com
Sat Oct 9 23:32:47 UTC 2004
In the future, I'd be careful about posting this list to nanog, rather
than privately to their respective security and abuse desks.
I realize your intentions were good, but it's been pointed out before
that this mailing list is monitored by the crackers controlling a lot
of the bot networks, including Gregory "OseK" Taylor, Brian Bruns, and
Andrew "Trelane" Kirch, so it's probably not a good idea to fuel them
by listing the IP addresses of users with compromised machines.
---R
On Fri, 8 Oct 2004 16:01:21 -0500, Matthew S. Hallacy <poptix at poptix.net> wrote:
>
> On Fri, Oct 08, 2004 at 09:07:48PM +0200, Gadi Evron wrote:
>
> > Those drone armies that lurk on actual real networks are a major problem
> > for the networks themselves, but I doubt anyone can blame them for:
>
> Only when they do something about it.
>
> > 1. Worrying about personal privacy of their users, not wanting to bend
> > too many rules to fight these drones that *appear* like regular users.
>
> Appear? If you own one of the blocks below, please do something about it.
>
> sadsa``` ~orion at 67.98.36.19 Don't Touch Me
> `o`hj`h` ~orion at 67.98.36.19 Don't Touch Me
> TaiFrunze ~orion at 66.136.184.186 Don't Touch Me
> Crist9597 ~orion at adsl-66-136-184-186.dsl.stlsmo.swbell.net Don't Touch Me
> Mihaiul ~orion at pD9F73FA3.dip.t-dialin.net Don't Touch Me
> Cs` ~tayrona at pD9F5AF65.dip.t-dialin.net Don't Touch Me
> __intzu__ ~alpina at pD9F5AF65.dip.t-dialin.net Don't Touch Me
> _ragonul_ ~alpina at 203.115.112.137 Don't Touch Me
> Dragonul_ ~alpina at 203.115.112.137 Don't Touch Me
> }-{ ~orion at 66.88.13.142 Don't Touch Me
> {}- ~orion at 66.88.13.142 Don't Touch Me
> Kyia_ ~tayrona at pD9F5AEFB.dip.t-dialin.net Don't Touch Me
> Rupetot ~weed at ptd2-d9b8264f.pool.mediaWays.net Don't Touch Me
> awa` ~imagine at ptd2-d9b8264f.pool.mediaWays.net Don't Touch Me
> Raz ~private at pD9F5AF4A.dip.t-dialin.net Don't Touch Me
> FacFocu ~orion at 66.161.11.110 Don't Touch Me
> Cristi-- ~alpina at pD9F5AE4A.dip.t-dialin.net Don't Touch Me
> VandFan ~users at pD9F5AE17.dip.t-dialin.net Don't Touch Me
> Dragonul` ~tayrona at 217.245.174.20 Don't Touch Me
> Viper18 ~users at pD9F5AE17.dip.t-dialin.net Don't Touch Me
> \op ~orion at h-66-134-43-211.snvacaid.covad.net Don't Touch Me
> Kyia ~weed at c-67-163-117-167.client.comcast.net Don't Touch Me
> n3fertiti ~users at ll194-33-222-204-194.ll194.iam.net.ma Don't Touch Me
> _____i___ ~orion at c-24-16-161-107.client.comcast.net Don't Touch Me
> Tzucky ~orion at MaKkInSus.users.undernet.org Don't Touch Me
> Cristel` ~orion at c-24-16-161-107.client.comcast.net Don't Touch Me
> ns0 ~orion at earth.sisioh.com Don't Touch Me
> Aiuritul ~ignore at ll194-33-222-204-194.ll194.iam.net.ma Don't Touch Me
> dragonul ~orion at 67.40.239.163 Don't Touch Me
> Aiure`l ~orion at 66.161.11.110 Don't Touch Me
> Avi0n ~orion at dsl092-179-090.sfo1.dsl.speakeasy.net Don't Touch Me
> Muthi_ ~orion at adsl-67-38-98-242.dsl.chcgil.ameritech.net Don't Touch Me
> forgrt ~orion at adsl-67-38-98-242.dsl.chcgil.ameritech.net Don't Touch Me
> Qp` ~orion at dsl092-032-218.lax1.dsl.speakeasy.net Don't Touch Me
> Pasarel ~orion at dsl092-032-218.lax1.dsl.speakeasy.net Don't Touch Me
> `p`p`p ~orion at 202.39.224.36 Don't Touch Me
> Dragonel ~orion at 202.39.224.36 Don't Touch Me
> polq ~orion at 202.37.100.19 Don't Touch Me
> `o`o`o`o` ~orion at 202.37.100.19 Don't Touch Me
> HanPanga ~orion at dsl092-030-100.sea2.dsl.speakeasy.net Don't Touch Me
> Hanga ~orion at dsl092-030-100.sea2.dsl.speakeasy.net Don't Touch Me
> helpMa ~orion at dsl092-030-249.sea2.dsl.speakeasy.net Don't Touch Me
> OrlanDo`` ~orion at rrcs-67-52-199-254.west.biz.rr.com Don't Touch Me
> ionmaria ~orion at dsl092-030-249.sea2.dsl.speakeasy.net Don't Touch Me
> Wow` ~orion at 216.138.83.22 Don't Touch Me
> heart ~orion at WhaThaFack.users.undernet.org Don't Touch Me
> nicknam`` ~orion at 67.69.108.212 Don't Touch Me
> _o_o_o ~orion at 67.69.108.212 Don't Touch Me
> apometre ~orion at 66.228.198.102 Don't Touch Me
> mutule ~orion at 66.228.198.102 Don't Touch Me
> sugaciu`` ~orion at 67.40.239.163 Don't Touch Me
> Rezerve ~imagine at c-67-164-103-112.client.comcast.net Don't Touch Me
> Sugaci`` ~orion at CPE-65-30-85-5.kc.rr.com Don't Touch Me
> daasd`` ~orion at CPE-65-30-85-5.kc.rr.com Don't Touch Me
> Soule ~fucked at c-67-164-103-112.client.comcast.net Don't Touch Me
> IP255 ~orion at uslec-66-255-65-10.cust.uslec.net Don't Touch Me
> Ghidon ~orion at adsl-66-218-54-38.dslextreme.com Don't Touch Me
> Minea ~orion at user-119bq9a.biz.mindspring.com Don't Touch Me
> Milimetru ~orion at mdsnwinrp3-pool0-a130.mdsnwi.tds.net Don't Touch Me
> centime ~orion at mdsnwinrp3-pool0-a130.mdsnwi.tds.net Don't Touch Me
> wip` ~orion at user-119bq9a.biz.mindspring.com Don't Touch Me
> ijij ~orion at Toronto-HSE-ppp3746549.sympatico.ca Don't Touch Me
> _o_ ~orion at rrcs-67-52-199-254.west.biz.rr.com Don't Touch Me
> afchd`` ~orion at Toronto-HSE-ppp3746549.sympatico.ca Don't Touch Me
> Aiureai ~orion at va-65-41-106-85.sta.sprint-hsd.net Don't Touch Me
> Save- ~weed at c-67-163-117-167.client.comcast.net Don't Touch Me
> Sugativa` ~orion at va-65-41-106-85.sta.sprint-hsd.net Don't Touch Me
> costi`` ~orion at 66.88.191.62.ptr.us.xo.net Don't Touch Me
> }-{` ~orion at 66.88.191.62.ptr.us.xo.net Don't Touch Me
> `o`o`o ~orion at 67.39.113.154 Don't Touch Me
> wacdsfc ~orion at 67.39.113.154 Don't Touch Me
> Cruella ~orion at 216.138.83.22 Don't Touch Me
> So`what ~orion at ns1.kimbrand.net Don't Touch Me
> `o`o ~orion at li9-240.members.linode.com Don't Touch Me
> Dragon-` ~orion at li9-240.members.linode.com Don't Touch Me
> mysql ~orion at ns1.kimbrand.net Don't Touch Me
> MaArunc ~berg at 66.192.122.27 Don't Touch Me
> InterGame ~orion at c66.203.200.210.tidc.telus.com Don't Touch Me
> Ampulea ~orion at c66.203.200.210.tidc.telus.com Don't Touch Me
> wadasd` ~orion at 213.210.185.47.adsl.nextra.cz Don't Touch Me
> Vrabie ~orion at 213.210.185.47 Don't Touch Me
> Ancas ~orion at 66.192.122.27 Don't Touch Me
> Hacker-ul ~orion at 67.32.12.11 Don't Touch Me
> Pilotu ~orion at mumiaX.users.undernet.org Don't Touch Me
> lamerul ~orion at 66-194-148-180.gen.twtelecom.net Don't Touch Me
> Muthi ~orion at 66-194-148-180.gen.twtelecom.net Don't Touch Me
> Pasarelu ~orion at 216.198.204.226 Don't Touch Me
> `o`o``o` ~orion at 216.198.204.226 Don't Touch Me
> Apometru ~orion at 213.234.124.169 Don't Touch Me
> Soare` ~orion at 213.234.124.169 Don't Touch Me
> qwewq ~property at 213.237.106.4 Don't Touch Me
> Imagine ~orion at server195-228.matrix-server.co.uk Don't Touch Me
> SeeN ~orion at Flgurantu.users.undernet.org Don't Touch Me
> Saliva ~imagine at ptd2-d9b8264f.pool.mediaWays.net Don't Touch Me
> }[} ~orion at h-66-134-43-211.snvacaid.covad.net Don't Touch Me
> Polik ~orion at h-66-134-43-212.snvacaid.covad.net Don't Touch Me
> Comes ~Read at 80.78.226.176 Read Only *
> Parts ~Read at 206.176.192.111 Read Only *
> Officials ~Read at 66.98.204.56 Read Only *
> BaNNeD ~Read at TurboBDiesel.users.undernet.org Read Only *
> Regide ~Read at lahfaye.bgfservers.com Read Only *
> ImTheBoss ~Read at exo.phpwebhosting.com Read Only *
> Makara ~Read at ds80-237-204-8.dedicated.hosteurope.de Read Only *
> Distrus ~Read at 69.10.154.150 Read Only *
> Read____ ~Read at 210.1.50.2 Read Only *
> Read__ ~Read at 67.18.145.210 Read Only *
> Read_____ ~Read at 35-11-190-213.customers.iber-x.net Read Only *
> Read___ ~Read at 80.86.206.30 Read Only *
> Read ~Read at 217.148.176.138 Read Only *
> CapDeTaur httpd at 24.180.128.140 Read Only *
> Motroi ~Read at 195.66.106.30 Read Only *
> LcShells ~Read at 206.251.242.140 Read Only *
> Cifre ~Read at 212.43.237.40 Read Only *
> Complete ~Read at 83.211.141.24 Read Only *
> ZidaneUs ~DhtTeam1 at zealot.webnick.net Dorohoi-Hacking-Team !!!
> CheaterGo ~DhtTeam1 at ip-211-122-134-202.rev.dyxnet.com Dorohoi-Hacking-Team !!!
> CheaterRu ~DhtTeam1 at 64.62.172.111 Dorohoi-Hacking-Team !!!
> CheaterUk ~DhtTeam1 at 64.71.141.167 Dorohoi-Hacking-Team !!!
> CheaterCr ~DhtTeam1 at 216.67.239.64 Dorohoi-Hacking-Team !!!
> CheaterSk ~DhtTeam1 at 64.246.56.54 Dorohoi-Hacking-Team !!!
> CheaterRk ~DhtTeam1 at 67.19.156.231 Dorohoi-Hacking-Team !!!
> CheaterRo ~DhtTeam1 at 67.19.156.227 Dorohoi-Hacking-Team !!!
> InDaHouze ~C-Strike at 66.193.230.226 Dorohoi-Team
> ZidaneUs ~DhtTeam1 at zealot.webnick.net Dorohoi-Hacking-Team !!!
> CheaterGo ~DhtTeam1 at ip-211-122-134-202.rev.dyxnet.com Dorohoi-Hacking-Team !!!
> AlexWget ~C-Strike at server.incomware.com Dorohoi-Team
> CheaterRu ~DhtTeam1 at 64.62.172.111 Dorohoi-Hacking-Team !!!
> CheaterUk ~DhtTeam1 at 64.71.141.167 Dorohoi-Hacking-Team !!!
> A13xandru ~C-Strike at 217.98.56.2 Dorohoi-Team
> SmEcHeRu ~C-Strike at adyinlove.users.undernet.org Dorohoi-Team
> AlexSunos ~C-Strike at 66.194.41.172 Dorohoi-Team
> CheaterCr ~DhtTeam1 at 216.67.239.64 Dorohoi-Hacking-Team !!!
> CheaterSk ~DhtTeam1 at 64.246.56.54 Dorohoi-Hacking-Team !!!
> PuiDePix ~C-Strike at 66.194.41.171 Dorohoi-Team
> AlexRoBoT ~C-Strike at 66.194.41.171 Dorohoi-Team
> Dumi ~C-Strike at 66.194.41.174 Dorohoi-Team
> AlexOut ~C-Strike at 66.193.175.124 Dorohoi-Team
> TheHacers ~C-Strike at 66.193.175.124 Dorohoi-Team
> CheaterRk ~DhtTeam1 at 67.19.156.231 Dorohoi-Hacking-Team !!!
> CheaterRo ~DhtTeam1 at 67.19.156.227 Dorohoi-Hacking-Team !!!
> update ~mos at AmCei7Ani.users.undernet.org MariusHacK The Hacker TeaM Dorohoi
> AllWanted ~craciun at InferNus.users.undernet.org MariusHacK The Hacker TeaM Dorohoi
>
>
>
> --
> Matthew S. Hallacy FUBAR, LART, BOFH Certified
> http://www.poptix.net GPG public key 0x01938203
>
More information about the NANOG
mailing list