Month: November 2011

64.34.200.181(irc botnet hosted in United States Newhall Serverbeach)

Uncategorized

Remote Host Port Number 64.34.200.181 2345 NICK New[USA|00|P|73781] PRIVMSG #!loco! :[M]: Thread Disabled. PRIVMSG #!loco! :[M]: Thread Activated: Sending Message With Email. USER XP-9402 * 0 :COMPUTERNAME MODE New[USA|00|P|73781] -ix JOIN #!loco! PONG 22 MOTD hosting infos: http://whois.domaintools.com/64.34.200.181

zeus.sunke.info(irc botnet hosted in China Zhejiang Ninbo Lanzhong Network Ltd)

Uncategorized

122.224.6.164 zeus.sunke.info ilo.brenz.pl Resolved : [ilo.brenz.pl] To [94.63.149.150] HTTP QueriesHTTP Query Text – x82x96xa2xe3xdaxd1xc7 Remote Host Port Number 122.224.6.164 82 174.123.157.154 80 174.133.57.141 80 193.5.110.10 80 204.0.5.40 80 204.0.5.48 80 204.0.5.59 80 207.46.202.15 80 64.38.232.180 80 65.55.13.243 80 66.114.51.107 80 60.190.223.132 88 60.190.223.60 2011 60.190.223.60 2012 60.190.223.60 888 61.147.99.179 81 66.228.49.83 1867 83.133.119.197 65520 ServiceRead more...

bt1.oyoba.com(ngrBot hosted in Russian Federation Moscow Anders Telecom Ltd)

Uncategorized

40-50K Bots inside aproximatly bt1.oyoba.com primary dns for controling bots bt1.yakizzy.com secondary dns not active Resolved : [bt1.oyoba.com] To [87.251.154.185] Resolved : [bt1.oyoba.com] To [87.251.154.168] Resolved : [bt1.oyoba.com] To [87.251.154.135] Resolved : [bt1.oyoba.com] To [87.251.154.145] 87.251.154.145:7654 Server Pass: ngrBot 87.251.154.135:7654 Server Pass: ngrBot 87.251.154.168:7654 Server Pass: ngrBot 87.251.154.185:7654 Server Pass: ngrBot Nick: n{US|XPa}bjhvcdc Username: bjhvcdcRead more...