Our anonymous friend pointed this url http://cbteam.ws/(inside u have samples)
i checked files and i found this botnet wich i allready posted ip’s in the blog
Resolved : [cube.sdeirc.net] To [89.248.166.139]
Remote Host Port Number
cube.sdeirc.net 7392 PASS none
NICK New{US-XP-x86}1124207
USER 1124207 “” “1124207” :1124207
MODE New{US-XP-x86}1124207 +iMmx
JOIN #a secret
JOIN #rndbot zrag
credits to our anonymous contributor for this
hosting infos:
http://whois.domaintools.com/89.248.166.139