SHARE
TWEET

raphidae report - storm, defocus/igneel

a guest Feb 2nd, 2015 519 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Hi [redacted],
  2.  
  3. We got an abuse notification from our Provider saying that your Container :115::/64 IPv6 Subnet was involved in a BotNet, thus part Criminal Intent.
  4.  
  5. We had no option to suspend your VPS Server, or have the whole server taken offline.
  6.  
  7.  
  8. --- Complaint ---
  9.  
  10. Dear Sir, Madam,
  11.  
  12. Recently we have identified an abusive botnet on the EFNet IRC network.
  13. These bots jump on nicknames first freed by denial of service traffic to
  14. clients and servers of our network. They seem to connect from your IP
  15. range(s), attached is a log of the IPv6 addresses/ranges in question.
  16.  
  17. A system in your network may be compromised, or you may have an abusive
  18. customer. Would you please take a look?
  19.  
  20. Thank you in advance.
  21.  
  22. 'raphidae'
  23. Server Administrator; irc.mediamonks.net
  24. Server Operator; irc.mzima.net, efnet.port80.se, irc.rizon.so
  25.  
  26.  
  27. [30/01/15][17:25:43] ••• igneel is defocus@lag.storm.sx * defocus
  28. [30/01/15][17:25:43] ••• igneel is on 7 channels
  29. [30/01/15][17:25:43] ••• igneel is on: #zombie¹ #vps #troll #null
  30. #maryjane
  31. #efnet2 #ebola
  32. [30/01/15][17:25:43] ••• igneel is using irc.inet.tele.dk Better
  33. than WoW
  34. [30/01/15][17:25:43] ••• igneel is actually 2a02:e00:fffb:115::2000
  35. [30/01/15][17:02:14] ••• zombie is solar@2001:1b40:3600:100:0:2:afae:1d26
  36. *
  37. don't whois me, whois defocus
  38. [30/01/15][17:02:14] ••• zombie is on 17 channels
  39. [30/01/15][17:02:14] ••• zombie is on: #exploits #root #malicious
  40. #ebola #null
  41. #nyc #heroin #mdma #syn #troll
  42. [30/01/15][17:02:14] ••• zombie is on: #e #opiate #phear #juped
  43. #antisec #evil
  44. #abuse
  45. [30/01/15][17:02:14] ••• zombie is using efnet.port80.se MARK
  46. MY WORDS!
  47. [30/01/15][17:02:14] ••• zombie is actually 2001:1b40:3600:100:0:2:afae:1d26
  48. User efnet.port80.se rnyr mad 2001:1b40:3600:100:0:2:c9e:ac69
  49. 2001:1b40:3600:100:0:2:c9e:ac69 mad
  50. User efnet.port80.se nsa terror 2001:1b40:3600:100:0:2:afae:1d26
  51. 2001:1b40:3600:100:0:2:afae:1d26 GOT HACKED
  52. User efnet.port80.se exploit never 2001:1b40:3600:100:0:2:125:af28
  53. 2001:1b40:3600:100:0:2:125:af28 It will be a one sided annihilation.
  54. User efnet.port80.se uhdj high 2001:1b40:3600:100:0:2:9ed1:6753
  55. 2001:1b40:3600:100:0:2:9ed1:6753 high
  56. efnet.port80.se End of TRACE
  57.  
  58. Regards,
  59. [redacted]
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top