Hack Forums
whats the quickest you have seen a botnet die? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: whats the quickest you have seen a botnet die? (/showthread.php?tid=4873713)



whats the quickest you have seen a botnet die? - Dickyb0bSue - Jun 20, 2015

from your experiences whats the quickest you have seen a botnet flop to its knees, for me its when i had 3.5k with bbot i think it was, 1 minitue there all there the next there all gone, and i dont think i was botkilled hmm, this happened in the dcom/lsass spreading days


* - PLT ‌ - Jun 20, 2015

When people make the stupid decision of buying bots. One minute they're there, the next they're not.

or sometimes they're not there at all



* - PolarBeats - Jun 20, 2015

your botnet can be sinkholed in less then a minute if the person knows what they're doing. Microsoft seized a 1 million node p2p botnet (zeroaccess) and they did the same to kelihos. A botnet can be killed in a matter of seconds if someone seizes the domains/servers the botnet uses. Even p2p botnets can be peer poisoned and taken down.


* - Voxfames - Jun 20, 2015

The fastest I saw one go down was on a modded irc server that blocked everybody but bots and commanders. The admin of the datacenter logged in got kicked instantly and shut the server down. LOL. Was up about 1 week. Lucky the bots had backup domain algorithms so it took just a few minutes to recover them.


* - PLT ‌ - Jun 20, 2015

(Jun 20, 2015 04:36 PM)Voxfames Wrote:  The fastest I saw one go down was on a modded irc server that blocked everybody but bots and commanders. The admin of the datacenter logged in got kicked instantly and shut the server down. LOL. Was up about 1 week. Lucky the bots had backup domain algorithms so it took just a few minutes to recover them.

Yeah anyone who's building a botnet should always set it up on a domain / DNS so the IP can be changed whenever. Also best to make sure you always have backup domains / DNS's.


* - Black Scorpion - Jun 20, 2015

the fastest i seen was when i got 700 pma bots. They all pinged out in 15 mins.


* - Jаson - Jun 20, 2015

I had about 800 routers and set a flood for 300 seconds. They pinged out and never came back.


* - PLT ‌ - Jun 20, 2015

(Jun 20, 2015 10:48 PM)Black Scorpion Wrote:  the fastest i seen was when i got 700 pma bots. They all pinged out in 15 mins.

You must have had an absolutely terrible bot lol.


(Jun 20, 2015 10:58 PM)๖ۣۜLucifer Wrote:  I had about 800 routers and set a flood for 300 seconds. They pinged out and never came back.

Same with you.