h.maqder.info(irc botnet hosted in United States Wisconsin Rapids Datawave Technologies Llc)

Resolved : [h.maqder.info] To [206.176.205.101]

Remote Host Port Number
h.maqder.info 3921

NICK GL-154325340
USER ianbryzrwyw 0 0 :GL-154325340
USERHOST GL-154325340
MODE GL-154325340 +x+i
JOIN #n msspas’
NICK GL-142987297
USER epqnfvzbqyg 0 0 :GL-142987297
USERHOST GL-142987297
MODE GL-142987297 +x+i
NICK GL-802428583
USER puyriaytwb 0 0 :GL-802428583
USERHOST GL-802428583
MODE GL-802428583 +x+i
NICK GL-470192572
USER odzajtdpxck 0 0 :GL-470192572
USERHOST GL-470192572
MODE GL-470192572 +x+i
NICK GL-886873334
USER iclglfhsg 0 0 :GL-886873334
USERHOST GL-886873334
MODE GL-886873334 +x+i
NICK GL-771067257
USER cilchnqaamh 0 0 :GL-771067257
USERHOST GL-771067257
MODE GL-771067257 +x+i
NICK GL-526301332
USER xqapsfppc 0 0 :GL-526301332
USERHOST GL-526301332
MODE GL-526301332 +x+i
NICK GL-706622405
USER dngzyjcopg 0 0 :GL-706622405
USERHOST GL-706622405
MODE GL-706622405 +x+i

Now talking in #n
Topic On: [ #n ] [ xvvv mssql 80 0 0 -a -r -s 12]
Topic By: [ wsws ]
Modes On: [ #n ] [ +smntMu 12]

hosting infos:
http://whois.domaintools.com/206.176.205.101

Categories: Uncategorized

2 Comments

ZeroSecurity - September 16, 2012 at 7:17 am

May i ask where you obtain your malware samples from?

Pig - September 16, 2012 at 4:54 pm

from honeypots

Comments are closed