[Intrusions] zomb.hopto.org

Mark McDonagh payload at gmail.com
Wed Aug 24 10:57:30 GMT 2005


Hi,

I have just noticed a lot of machines connecting to an irc server
zomb.hopto.org, Its probably the C&C server for a botnet, 

Has anyone else seen connections to this host ? It appears to be
changing its resolution regularly. It resolves to multiple hosts.
Probably best to prevent resolution of this domain name.

Cheers
Mark




More information about the Intrusions mailing list