75.102.22.40(irc botnet hosted in United States Chicago Hostforweb Inc)

Remote Host Port Number 195.122.131.8 80 204.0.5.41 80 63.135.80.224 80 63.135.80.46 80 66.220.158.11 80 75.102.22.40 2866 PASS xxx NICK NEW-[USA|00|P|20798] USER XP-0727 * 0 :COMPUTERNAME MODE NEW-[USA|00|P|20798] -ix JOIN #!nine! test PONG 22 MOTD hosting infos: http://whois.domaintools.com/75.102.22.40

infected34.co.cc(irc botnet hosted in Germany Berlin Fast It Colocation)

ircd :infected34.co.cc:6667 PASS timu or PASS aliss NICK [00|USA|989169] USER XP-6593 * 0 :COMPUTERNAME MODE [00|USA|989169] -ix JOIN #N timu MODE [SI|USA|00|P|79102] -ix JOIN #test# aliss PONG 217.79.190.39 NICK [SI|USA|00|P|79102] USER XP-4584 * 0 :COMPUTERNAME hosting infos: http://whois.domaintools.com/217.79.190.39

72.55.132.187(irc botnet hosted in Canada Zenkis.ca)

Remote Host Port Number 213.251.170.52 80 72.55.132.187 2603 PASS ngrBot 78.47.10.199 21 NICK n{US|XPa}hjcbvjl USER hjcbvjl 0 0 :hjcbvjl JOIN #phcrulez ngrBot USER adi hosting infos: http://whois.domaintools.com/72.55.132.187

173.246.100.120(irc botnet hosted in United States Baltimore Gandi Us Inc)

Remote Host Port Number 173.246.100.120 8888 PASS ngrBot 213.251.170.52 80 PRIVMSG #spread :[MSN]: Updated MSN spread interval to “3” PRIVMSG #spread :[MSN]: Updated MSN spread message to “.” PRIVMSG #spread :[HTTP]: Updated HTTP spread interval to “5” PRIVMSG #spread :[HTTP]: Updated HTTP spread message to “.” JOIN #special NICK n{US|XPa}phessck USER phessck 0 0 :phessck

brainbox.dyndns.org(irc botnet hosted in United States Sparta Ispsystem At Nac)

Remote Host Port Number 213.186.33.87 80 82.146.51.173 4598 NICK n[XP-USA]855437 PONG 422 PRIVMSG ##Channel## : 09Executed Process Successfully. USER 8554 “” “TsGh” :8554 JOIN ##Channel3## PRIVMSG ##Channel3## : NICK [XP-USA]561757 USER 5617 “” “TsGh” :5617 JOIN ##Channel## hosting infos: http://whois.domaintools.com/82.146.51.173