[unisog] irc bots

Sherry M. Rogers smrogers at socrates.Berkeley.EDU
Wed Apr 24 21:16:40 GMT 2002

We've had an outbreak of irc bots at UC Berkeley this week
as well.  As least some of the bots are communicating via
irc2.easynews.com and we have been able to identify them by
watching for irc connections to this address.

On Wed, 24 Apr 2002, Robert Dormer wrote:

> Hello all,
> Here at the University of Pennsylvania, we've recently had
> a couple of outbreaks of machines compromised by IRC
> bots - trinoo, shaft, GTBot and their ilk.  Anyone else out
> there in unisog land having the same sorts of problems?
> What have you all run into when dealing with these things?
> Regards,
> Robert Dormer
> =============
> Information Security - University of Pennsylvania
> phone: (215) 573 - 4574
> email: rdormer at isc.upenn.edu
> security: security at isc.upenn.edu

Sherry M. Rogers                 University of California, Berkeley
System & Network Security        phone (510)642-7157

More information about the unisog mailing list