zomb.hopto.org
Mark McDonagh <[email protected]> Wed, 24 Aug 2005 10:57:30 +0000
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <1124881050.27838.16.camel@decker> |
Hi, I have just noticed a lot of machines connecting to an irc server zomb.hopto.org, Its probably the C&C server for a botnet, Has anyone else seen connections to this host ? It appears to be changing its resolution regularly. It resolves to multiple hosts. Probably best to prevent resolution of this domain name. Cheers Mark _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions