There is a mistake in hosting adress Serbia must be Kosova because this botnet is hosted in Kosova indipendent Nation Here is the scaner used by Lindi a litle idiot from peja: #!/usr/bin/perl $powered="BaMbY"; $mail="admin(at)bamby.web.id"; ##################################################################################### ## ## ## 17/06/2010 ## ## Author : BaMbY, Voo_Doo ## ## Team : Irc.Byroe.Net ## ## ## ##Read more...
173.45.102.45(ngrBot hosted in United States Columbus Xlhost.com Inc)
Remote Host Port Number 173.45.102.45 5794 PASS ngrBot 199.15.234.7 80 83.169.31.7 80 NICK n{US|XPa}uknudkt USER uknudkt 0 0 :uknudkt JOIN #butowski ngrBot JOIN #US PRIVMSG #butowski :[DNS]: Blocked 0 domain(s) – Redirected 27 domain(s) hosting infos: http://whois.domaintools.com/173.45.102.45
thailand-photo.org(ngrBot hosted in United States Amsterdam Santrex Internet Services Ltd)
Remote Host Port Number 141.105.66.223 80 199.15.234.7 80 74.86.158.236 80 46.166.137.234 8282 PASS passwd PRIVMSG #dork :[HTTP]: Updated HTTP spread interval to “3” PRIVMSG #dork :[HTTP]: Updated HTTP spread message to “http://facebook-image.info/pic5436457564.jpg” PRIVMSG #dork :[d=”http://quadgroup.in/lol/dl.exe” s=”151552 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.exe” – Download retries: 0 PRIVMSG #dork :[d=”http://quadgroup.in/ngg.exe” s=”249856 bytes”] Executed file “C:DocumentsRead more...
46.105.241.231(ngrBot hosted in United Kingdom Ovh Systems)
Remote Host Port Number 199.15.234.7 80 46.105.241.231 80 50.16.220.121 80 46.105.241.231 6999 PASS PRIVMSG #chan :[d=”http://dl.dropbox.com/s/1ckvkvltoyy73e1/link.exe” s=”56471 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0 NICK n{US|XPa}pdrybps USER pdrybps 0 0 :pdrybps JOIN #chan ngrBot * The data identified by the following URLs was then requested from the remote web server: oRead more...
61.19.252.250(irc botnet hosted in Thailand Bangkok Cat Telecom Data Comm. Dept Idc Office)
Remote Host Port Number 61.19.252.250 2345 NICK New[USA|00|P|46702] PRIVMSG #!loco! :[M]: Thread Disabled. PRIVMSG #!loco! :[M]: Thread Activated: Sending Message With Email. USER XP-1537 * 0 :COMPUTERNAME MODE New[USA|00|P|46702] -ix JOIN #!loco! PONG 22 MOTD hosting infos: http://whois.domaintools.com/61.19.252.250
46.105.241.151(ngrBot hosted in United Kingdom Ovh Systems)
Remote Host Port Number 199.15.234.7 80 46.105.241.151 6667 PASS .. PRIVMSG #|ngr :[MSN]: Updated MSN spread interval to “6” PRIVMSG #|ngr :[MSN]: Updated MSN spread message to “wowww!! hahahaha http://ge.tt/8maSWT7/Major.exe” PRIVMSG #|ngr :[DNS]: Blocked “freewebtown.com” NICK n{US|XPa}zbegksp USER zbegksp 0 0 :zbegksp PONG :9E9B538B JOIN #|ngr ngrBot PRIVMSG #|ngr :[HTTP]: Updated HTTP spread interval toRead more...
67.220.73.178(irc botnet hosted in India Surat Gamehostingprovider Dot Com)
Remote Host Port Number 67.220.73.178 6667 NICK s_|637271 USER utwalul 0 0 :s_|637271 JOIN #botnet odjebi USERHOST s_|637271 MODE s_|637271 -x+B NOTICE NeoStats : VERSION mIRC v6.03 Khaled Mardam-Bey PONG :hub.bihchat.org PONG :9D02DE22 NOTICE IRC : hosting infos: http://whois.domaintools.com/67.220.73.178
46.166.140.185(ngrBot hosted in United Kingdom Santrex Internet Services Ltd)
Remote Host Port Number 199.15.234.7 80 46.166.140.185 1921 PASS ngrBot PRIVMSG ##cybercenter## :[DNS]: Redirecting “www.colpatria.com” to “188.72.238.235” PRIVMSG ##cybercenter## :[DNS]: Redirecting “colpatria.com” to “188.72.238.235” NICK n{US|XPa}kczqqak USER kczqqak 0 0 :kczqqak JOIN ##cybercenter## ngrBot JOIN #new PRIVMSG ##cybercenter## :[DNS]: Redirecting “www.davivienda.com” to “188.72.238.235” PRIVMSG ##cybercenter## :[DNS]: Redirecting “davivienda.com” to “188.72.238.235” Now talking in ##cybercenter## TopicRead more...
212.7.203.231(ngrBot hosted in Netherlands Amsterdam Dediserv Dedicated Servers Sp. Z O.o)
Remote Host Port Number 199.15.234.7 80 83.233.33.6 80 212.7.203.231 1866 PASS ngrBot PRIVMSG #!hot! :[DNS]: Blocked 1310 domain(s) – Redirected 0 domain(s) NICK n{US|XPa}murgiws USER murgiws 0 0 :murgiws JOIN #!hot! ngrBot PRIVMSG #!hot! :[HTTP]: Updated HTTP spread interval to “4” PRIVMSG #!hot! :[HTTP]: Updated HTTP spread message to “wowwwwvwwgwaww you look so amazing :bRead more...
keshmuney.com(ngrBot hosted in United Kingdom Ovh Systems)
Remote Host Port Number 199.15.234.7 80 46.105.241.217 80 46.105.241.136 32164 PASS ngrBot PRIVMSG #main :[MSN]: Updated MSN spread message to “OMG LOOK! http://goo.gl/Bixvp” PRIVMSG #main :[DNS]: Blocked 1359 domain(s) – Redirected 0 domain(s) NICK n{US|XPa}mlwhdje USER mlwhdje 0 0 :mlwhdje JOIN #main ngrBot PRIVMSG #main :[HTTP]: Updated HTTP spread interval to “6” PRIVMSG #main :[MSN]:Read more...