blah.swapixtreme.com(irc botnet hosted in United Kingdom Vooservers Ltd)

Resolved : [blah.swapixtreme.com] To [91.227.221.217]

Clients: I have 308 clients and 1 servers
Local users: Current Local Users: 308 Max: 1
Global users: Current Global Users: 309 Max: 1105

Remote Host Port Number
blah.swapixtreme.com 7878

NICK [GSA]-274266
USER hhzegr 0 0 :[GSA]-274266
USERHOST [GSA]-274266
MODE [GSA]-274266 +xt
JOIN #b imallowed2020

hosting infos:
http://whois.domaintools.com/91.227.221.217

Categories: Uncategorized

2 Comments

Steeve BARBEAU - September 14, 2012 at 5:33 pm

You can find an analysis of a binary linked to this botnet on my blog http://blog.sbarbeau.fr/2012/01/caught-and-analyzed.html 🙂

Pig - September 14, 2012 at 8:16 pm

bon boulot Steeve

Comments are closed