Resolved dayzstreaming.co.uk to 37.221.170.194 Server: dayzstreaming.co.uk Gate file: /gato/order.php Alternate domain: dayzstreaming.org.uk Hosting info: http://whois.domaintools.com/37.221.170.194 Related md5s (Download sample from Malwr.com) Betabot: c0d2e08c3f0d964858b8a9788aa6732e
sagagame.me (Betabot http botnet hosted by digitalocean.com)
Resolved sagagame.me to 162.243.107.99 Server: sagagame.me Gate file: /game/order.php Additonal IP: 69.172.212.16 The domain was only registered on the 20th. Not very good at hiding their botnet. Hosting info: http://whois.domaintools.com/162.243.107.99 Related md5s (Download sample from Malwr.com) Betabot: 48c1b1adda95b72577fda15642db20fd
filemoney.net (Betabot http botnet hosted by zonerhost.com)
Resolved filemoney.net to 93.115.210.184 Server: filemoney.net Gate file: /hunter/123/order.php Hosting info: http://whois.domaintools.com/93.115.210.184 Related md5s (Download sample from Malwr.com) Betabot: fa2da027ddbac8da4a67e8eed6c2f7e8
nedfistoloco.su (betabot http botnet hosted by ecatel.net)
Resolved nedfistoloco.su to 80.82.64.5 Server: nedfistoloco.su Gate file: /tetuuu/return.php Alternate domains: fucksecsss.sunawakfeds.suawesofucked.su Hosting infos: http://whois.domaintools.com/80.82.64.5 Related md5s (Download sample from Malwr.com) Betabot: 29f960ff8f7c9a4733c7c08b41077d56
62.76.179.167 (Betabot http botnet hosted by clodo.ru)
Server: 62.76.179.167 Gate file: /ateb/order.php backup IP/Domains: 85.143.166.167 nns4fgc284dcnaz.us (Sinkholed by Anubis networks) nn3dv00gsvdaqv.us Downloads gameover zeus and necurs rootkit from the same IP. Hosting infos: http://whois.domaintools.com/62.76.179.167 Related md5s (Download samples from Malwr.com) Betabot: af43ea0fc92ef858f0d86836c851df08 Gameover Zeus: 97496e1e10a0242ab78651a3cb2fce42 Necurs: 6e66daf2457fc549905d89549b1ed3b3
eboarivan.pw (Betabot http botnet hosted by digitalocean.com)
Resolved eboarivan.pw to 162.243.31.250 Server: eboarivan.pw Gate file: /arivan/ebo/order.php Hosting infos: http://whois.domaintools.com/162.243.31.250 Related md5s (Download sample from Malwr.com) Betabot: 8155fde3d35dbda2a399d353adb29bf9
mp3items.com (betabot http botnet hosted by netvision.net.il)
Resolved mp3items.com to 212.235.107.195 Server: mp3items.com Gate file: /N_883s/order.php Alternate domains: australia.ddns.netbetabot.ddns.netconnect.ddns.netdriver.ddns.neteuropetraffic.ddns.netmixtraffic.ddns.netsecure.ddns.netsecurity.ddns.netsocial.ddns.netsouthamerica.ddns.netstatus.ddns.netusa.ddns.netusatraffic.ddns.netvenezuela.ddns.netwinguard.servehttp.com Hosting infos: http://whois.domaintools.com/212.235.107.195 Related md5s (Download sample from Malwr.com) Betabot: 09d4bacf54a26053e046af2469c66a15
top-glenyx.com (betabot http botnet hosted by Fastflux)
Server: top-glenyx.com Gate file: /forum/userline.php Alternate domains: svl-trusted.com marinzer-3.com amerillia.net matterix-net.net Hosting infos: ;; QUESTION SECTION: ;top-glenyx.com. IN A ;; ANSWER SECTION: top-glenyx.com. 150 IN A 46.211.201.46 top-glenyx.com. 150 IN A 68.190.213.192 top-glenyx.com. 150 IN A 74.141.113.20 top-glenyx.com. 150 IN A 76.118.32.199 top-glenyx.com. 150 IN A 77.120.152.66 top-glenyx.com. 150 IN A 77.122.245.155 top-glenyx.com. 150 INRead more...
spaceshuttle.co.ua (betabot http botnet hosted by Panamaserver.com)
Resolved spaceshuttle.co.ua to 190.123.47.66 Server: spaceshuttle.co.ua Gate file: /joomla/images/order.php Alternate domains: orbiter.biz.ua ringostars.info digues.info Hosting infos: http://whois.domaintools.com/190.123.47.66 Related md5s (Download sample from Malwr.com) Betabot: d4d7b5553bce35569f816cb66d5cb838 Edit: Blocked domains from dns.dat *antivirus* 127.0.0.1 bitdefender.com 127.0.0.1 download.bitdefender.com 127.0.0.1 update.bitdefender.com 127.0.0.1 wfbs51-p.activeupdate.trendmicro.com 127.0.0.1 wfbs60-p.activeupdate.trendmicro.com 127.0.0.1 iau.trendmicro.com 127.0.0.1 licenseupdate.trendmicro.com 127.0.0.1 csm-as.activeupdate.trendmicro.com 127.0.0.1 wfbs6-icss-p.activeupdate.trendmicro.com 127.0.0.1 oc.activeupdate.trendmicro.com 127.0.0.1 update.avg.com 127.0.0.1 update.grisoft.comRead more...
norton360america.biz (betabot http botnet hosted by psychz.net)
Resolved norton360america.biz to 199.71.215.3 Server: norton360america.biz Gate file: /joomla/order.php Alternate domains: fuckencio.comnoticiasmerica.biznoticiasmerica.inhomelad.meallape.meallape.org One of the backup domains was used in a previous botnet. Hosting infos: http://whois.domaintools.com/199.71.215.3 Related md5s (Download sample from Malwr.com) Betabot: cc546493b759600dda8dae44da0f1000