Exposedbotnets - exposedbotnets.com - Inside Your Botnet
General Information:
Latest News:
irc.tskiller.com (Athena irc botnet hosted by scopehosts.com) 27 Aug 2013 | 07:02 am
Resolved irc.tskiller.com to 91.109.17.227 Server: irc.tskiller.com Port: 6667 There are 1 users and 207 invisible on 1 servers Channels: #kurdish 5 #ddos 13 asf1...
74.121.150.39 (Wordpress brute forcing botnet hosted by it7.net) 22 Aug 2013 | 04:51 am
Server: 74.121.150.39 Port: 22503 (note, this is not irc based) This is one of the various botnets attempting to bruteforce wordpress blogs. It works pretty fast, during a short run on the malwr.co...
ns1.androha.com (Andromeda http botnet hosted by namecheap.com) 17 Aug 2013 | 11:06 pm
Resolved ns1.androha.com to 162.213.250.141 Server: ns1.androha.com Gate file: /cgi/image.php Plugins: Rootkit: hxxp://ns1.androha.com/cgi/r.pack Socks: hxxp://ns1.androha.com/cgi/s.pack Formgrabb...
allrounders.cc (Athena http botnet hosted by hostkey.com) 16 Aug 2013 | 01:38 am
Resolved allrounders.cc to 146.0.73.201 Server: allrounders.cc Gate file: /1ds2541svc/gate.php This domain was previously used as a backup domain for a now defunct betabot. I guess the owner is tr...
kankarmz.ru (betabot http botnet hosted by Alibabahost.com) 13 Aug 2013 | 09:28 pm
Resolved kankarmz.ru to 37.221.170.35 Server: kankarmz.ru Gate file: /Duf67/H8938_827.php Alternate domains (both are currently unregistered): u023sjasj.net iodijsakj.net This is one of only thre...
xvident.pw (andromeda http botnet hosted by maxhosting.ru) 12 Aug 2013 | 09:37 pm
Resolved xvident.pw to 192.162.100.211 Server: xvident.pw Gate file: gate.php There is a another domain pointed to the same IP which is also hosting a andromeda panel. Server: plesto.pw Gate fil...
yt4cpa.us (Andromeda http botnet hosted by worldstream.nl) 11 Aug 2013 | 08:14 am
Resoloved yt4cpa.us to 217.23.11.122 Server: yt4cpa.us Gate file: /gate.php Downloaded by this betabot phpinfo here: http://yt4cpa.us/test.php Hosting infos: http://whois.domaintools.com/217.23.1...
bitcoinglobalbanking.com (Betabot http botnet hosted by leaseweb.com) 11 Aug 2013 | 01:53 am
Resolved bitcoinglobalbanking.com to 82.192.92.5 Server: bitcoinglobalbanking.com Gate file: /b/order.php Alternate domain: bitcointradingdepot.com This botnet wasn't actually mining bitcoins wh...
spambox.su (snk aspermod irc botnet hosted by Cityline Ltd) 11 Aug 2013 | 01:52 am
Resolved spambox.su to 95.215.70.66 Server: spambox.su Port: 5050 Channel: #b600 Now talking on #b600 Topic for #b600 is: .j #sending Topic for #b600 set by x (Sat Aug 10 05:38:20 2013) Hosting i...
thebankslife.no-ip.biz (Athena irc botnet hosted by shellxnet.com) 10 Aug 2013 | 08:53 pm
Resolved thebankslife.no-ip.biz to Server: thebankslife.no-ip.biz Port: 6667 Channel Users Topic #sexlyfe 2 [+nt] #Syncrude 78 [+sntVCT] !download hxxp://nassau...