62.76.179.167 (Betabot http botnet hosted by clodo.ru)

Server:  62.76.179.167
Gate file:  /ateb/order.php

backup IP/Domains:  85.143.166.167
nns4fgc284dcnaz.us (Sinkholed by Anubis networks)
nn3dv00gsvdaqv.us

Downloads gameover zeus and necurs rootkit from the same IP.

Hosting infos:  http://whois.domaintools.com/62.76.179.167

Related md5s (Download samples from Malwr.com)
Betabot:
af43ea0fc92ef858f0d86836c851df08
Gameover Zeus: 97496e1e10a0242ab78651a3cb2fce42
Necurs: 6e66daf2457fc549905d89549b1ed3b3