I missed this on isc.sans.edu, already missed the first two but this will link you to number three. http://johannes.homepc.org/packet.txt I already started working on mine :)
Ok we have a couple more to go through. Next is;
$filebotperl = "iso.txt";I love comments, at least we don't have to guess what this is for.
#!/usr/bin/perl # # ShellBOT by: devil__ # Greetz: Puna, Kelserific # Comandos: # @oldpack <ip>...
Excellent write up on ssh brute force, configuration and tools you can use to help mitigate it. http://www.dragonresearchgroup.org/insight/sshpwauth-tac.html (btw I found this on the isc.sans.edu site a few days ago if you all missed it.)
The next on the list is
$filebotphp = "bot.txt";This looks pretty specific to the irc bot, but there is something encoded again just like in the other scripts.