Unixbots at undernet channel #colombo10

Found: traped in Honeypot

IP used: 172.158.130.36

Channel: #colombo10

Bot owner: colo1

Using: EnergyMech, IRC Bot software

Email: GigiBazat@Yahoo.com

Passwords used to change Root of SSHD

!@#$cristimata!@#$

pulamea123daumuie

halt

123456

Software downloads:

http://zomby2009.ilive.ro/0809.tgz (contains exploits)

http://colomboten.ucoz.ru/kriss.tgz (contains a scanner)

http://www.visatorul.go.ro/Quick.mp3 (contains a scanner)

http://colomboten.ucoz.ru/fast.tgz (contains a mechbot)

http://www.personale.110mb.com/scan/scanner.tgz

http://www.tiger1ne.netfast.org/linuxteam.tgz (contains a scanner)

Work directory

/var/tmp

Additional information:

You will find some old kernel exploits from august (0809.tgz)