RE: hacked server, DDoS bin installed

"J B" <[email protected]>
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
This should help.

Internet Fraud Complaint Center (http://www.ifccfbi.gov/index.asp) For 
reporting suspicious activity on the web

your local FBI office, refer to the list at 
(http://www.fbi.gov/contact/fo/fo.htm)

Thanks

J

>From: [email protected]
>To: [email protected]
>Subject: hacked server, DDoS bin installed
>Date: 6 Dec 2005 21:33:27 -0000
>MIME-Version: 1.0
>Received: from outgoing.securityfocus.com ([205.206.231.26]) by 
>MC6-F32.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 7 Dec 2005 
>07:10:09 -0800
>Received: from outgoing.securityfocus.com by outgoing.securityfocus.com     
>      via smtpd (for mc6.bay6.hotmail.com [65.54.252.230]) with ESMTP; Wed, 
>7 Dec 2005 06:47:02 -0800
>Received: from lists.securityfocus.com (lists.securityfocus.com 
>[205.206.231.19])by outgoing2.securityfocus.com (Postfix) with QMQPid 
>DC4F814562B; Wed,  7 Dec 2005 07:27:36 -0700 (MST)
>Received: (qmail 19782 invoked from network); 6 Dec 2005 21:43:12 -0000
>X-Message-Info: 6sSXyD95QpXNn2WKoN/NAe1Q/NK+Wk7DqU6Lce4ywGw=
>Mailing-List: contact [email protected]; run by ezmlm
>Precedence: bulk
>List-Id: <incidents.list-id.securityfocus.com>
>List-Post: <mailto:[email protected]>
>List-Help: <mailto:[email protected]>
>List-Unsubscribe: <mailto:[email protected]>
>List-Subscribe: <mailto:[email protected]>
>Delivered-To: mailing list [email protected]
>Delivered-To: moderator for [email protected]
>X-Mailer: MIME-tools 5.411 (Entity 5.404)
>Return-Path: 
>[email protected]
>X-OriginalArrivalTime: 07 Dec 2005 15:10:11.0501 (UTC) 
>FILETIME=[51933DD0:01C5FB40]
>
>a customers server got hacked.. binary in tact, seems like they were 
>DDoSing.. strings brings up the irc server, channel name, key.. where is 
>the fbi address where i can send this information to?
>
>thanks

_________________________________________________________________
Take advantage of powerful junk e-mail filters built on patented Microsoft® 
SmartScreen Technology. 
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
  Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.