Remote Host Port Number 199.15.234.7 80 199.167.193.215 6567 PASS hell16 Clients: I have 453 clients and 0 servers Local users: Current Local Users: 453 Max: 1014 Global users: Current Global Users: 453 Max: 1002 NICK n{US|XPa}hkdmmjt USER hkdmmjt 0 0 :hkdmmjt JOIN #cont ngrBot hosting infos: http://whois.domaintools.com/199.167.193.215
85.31.187.144(irc botnet hosted in Germany Aachen Isppro Internet Kg)
Remote Host Port Number 85.31.187.144 6667 NICK {New}[USA-1244024-XP] USER 3533880 “” “lol” :3533880 JOIN #redhack hosting infos: http://whois.domaintools.com/85.31.187.144
irc.hackt.org(Aryan bot hosted in United States Douglas 123systems Solutions)
irc.hackt.org DNS_TYPE_A 64.31.25.127 64.31.25.127:6667 Nick: [AUT|629128] Username: 9857 Joined Channel: #aryan Private Message to Channel #aryan: “.die” Private Message to Channel #aryan: “haha” Private Message to Channel #aryan: “.remove” Private Message to Channel #aryan: “dat not mine” Private Message to Channel #aryan: “hi” Private Message to Channel #aryan: “get outa hur” Private Message to ChannelRead more...
61.31.99.67(irc botnet hosted in Taiwan Taipei Taiwan Fixed Network Co. Ltd)
Remote Host Port Number 199.15.234.7 80 63.223.121.212 80 85.214.46.98 80 61.31.99.67 1863 61.31.99.67 4042 NICK new[USA|XP|COMPUTERNAME]ncsrmcq USER xd “” “lol” :xd JOIN #newbiz# PONG 422 * The data identified by the following URLs was then requested from the remote web server: o http://api.wipmania.com/ o http://www.4freeimagehost.com/uploads/a8dfab5dd1c0.jpg o http://85.214.46.98/test/new.exe o http://85.214.46.98/test/biz.exe hosting infos: http://whois.domaintools.com/61.31.99.67
31.3.254.125(irc botnet hosted in United Kingdom Redstation Limited)
Remote Host Port Number 31.3.254.125 6667 NICK new[iRooT-XP-USA]049101 USER 0491 “” “TsGh” :0491 JOIN #abece WTF PRIVMSG #abece : 04[P2P Spread]: 09Injecting into P2P Shared Folders… PONG :HTTP1.4 hosting infos: http://whois.domaintools.com/31.3.254.125
219.98.181.47(ngrBot hosted in Japan Tokyo So-net Service)
Remote Host Port Number 199.15.234.7 80 83.233.33.6 80 219.98.181.47 4244 PASS stark PRIVMSG #Nh :[DNS]: Blocked 1310 domain(s) – Redirected 0 domain(s) NICK n{US|XPa}riqmriq USER riqmriq 0 0 :riqmriq JOIN #Nh NhG PRIVMSG #nh :[HTTP]: Updated HTTP spread interval to “3” PRIVMSG #nh :[HTTP]: Updated HTTP spread message to “Estas foto es tuyo? 😀 http://ho.io/p8zn?=www.facebook.com/profile/4373748”Read more...
184.154.174.202(ngrBot hosted in United States Chicago Singlehop Inc)
Remote Host Port Number 184.154.174.202 1888 PASS strike 199.15.234.7 80 70.38.98.236 80 NICK n{US|XPa}zjjqhnh USER zjjqhnh 0 0 :zjjqhnh JOIN #asdf strike JOIN #XP JOIN #US PRIVMSG #XP :[d=”http://img102.herosh.com/2011/09/26/125094789.gif” s=”81920 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0 hosting infos: http://whois.domaintools.com/184.154.174.202
74.50.57.232(GodBot hosted in United States Clay City Rimuhosting)
Remote Host Port Number 74.50.57.232 38 NICK Godbot|USA|XP|2202110 USER rhhnux “” “lol” :rhhnux JOIN #Internet# hosting infos: http://whois.domaintools.com/74.50.57.232
64.186.146.71(irc botnet hosted in United States Vpsland.com Llc)
Remote Host Port Number 64.186.146.71 4244 NICK new[iRooT-XP-USA]882912 USER 6372 “” “TsGh” :6372 JOIN #er# astar PONG :irc.undernet.org hosting infos: http://whois.domaintools.com/64.186.146.71
109.169.37.16(ngrBot hosted in United Kingdom Maidenhead Rapidswitch Ltd)
Remote Host Port Number 109.169.37.16 7777 PASS laekin0505x 199.15.234.7 80 65.254.250.108 80 NICK n{US|XPa}gvplpfy USER gvplpfy 0 0 :gvplpfy JOIN #totalrenovation2011 ngrBot PRIVMSG #totalrenovation2011 :[d=”http://teraniprom.com/admin/product_picture/FINAL.exe” s=”114688 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0 PRIVMSG #totalrenovation2011 :[d=”http://teraniprom.com/admin/product_picture/Winsoft.exe” s=”167936 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataMcxaxm.exe” – Download retries: 0 * TheRead more...