API tools faq
paste
Advertisement
MalwareMustDie

#MalwareMustDie! Zombie PCs used by Botnet & Malware

MalwareMustDie
Nov 4th, 2013
1,992
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.59 KB | None | 0 0
raw download clone embed print report
  1. // #MalwareMustDie! Mon Nov 4 23:33:17 JST 2013
  2. // Zombie PC IP Address are used for Multiple Malware
  3. // Infection and Botnet. A die hard nodes. Literally "Zombies".
  4. //
  5. // This post was contribution from OP-Kelihos of MalwareMustDie,
  6. // Thank's to the team (further announce is in BotConf)
  7. // Which successfully figured the list of zombies used
  8. // For multiple Botnets as malicious DNS or etc services.
  9. // *) PS: We changed the details, regularly upon updates.
  10. // THIS POST IS FOR REFERENCE TAKEDOWN / #TANGO EFFORT - #MMD
  11.  
  12. // IP ADDRESS LIST OF THE ACTIVE ZOMBIES:
  13.  
  14. 106.1.136.109
  15. 109.104.175.206
  16. 109.106.5.176
  17. 109.160.120.112
  18. 109.162.101.37
  19. 109.239.46.209
  20. 111.216.125.132
  21. 114.198.185.127
  22. 115.165.6.125
  23. 119.194.106.139
  24. 121.3.74.49
  25. 122.250.89.174
  26. 123.0.224.85
  27. 123.216.223.34
  28. 134.249.66.121
  29. 176.194.219.212
  30. 176.222.255.174
  31. 176.50.139.111
  32. 176.8.195.123
  33. 176.8.203.95
  34. 176.8.221.233
  35. 176.8.36.164
  36. 178.137.35.78
  37. 178.137.98.2
  38. 178.149.181.242
  39. 178.150.134.218
  40. 178.150.139.157
  41. 178.150.192.50
  42. 178.165.32.18
  43. 178.206.206.163
  44. 178.207.102.167
  45. 178.207.86.122
  46. 186.22.121.213
  47. 188.230.93.206
  48. 190.162.80.52
  49. 212.21.21.252
  50. 212.66.58.220
  51. 213.111.203.236
  52. 213.157.45.117
  53. 213.231.54.89
  54. 213.240.209.237
  55. 219.110.214.136
  56. 219.115.158.12
  57. 219.29.85.91
  58. 222.230.176.97
  59. 31.133.43.89
  60. 36.239.190.84
  61. 36.239.218.157
  62. 36.245.213.112
  63. 37.115.143.134
  64. 37.115.78.180
  65. 37.229.119.183
  66. 37.229.72.28
  67. 37.57.48.3
  68. 46.108.62.76
  69. 46.118.204.252
  70. 46.211.33.20
  71. 46.237.81.153
  72. 46.35.227.141
  73. 5.104.60.9
  74. 5.105.23.87
  75. 5.28.111.240
  76. 58.3.135.176
  77. 60.237.116.235
  78. 61.46.101.18
  79. 74.129.164.17
  80. 77.120.134.104
  81. 77.123.227.61
  82. 78.84.44.14
  83. 79.101.42.7
  84. 80.234.86.157
  85. 82.33.2.11
  86. 87.252.234.72
  87. 87.252.245.232
  88. 88.206.57.41
  89. 89.109.238.163
  90. 89.165.154.172
  91. 89.176.184.25
  92. 89.185.18.68
  93. 89.205.2.163
  94. 92.52.181.18
  95. 93.177.191.145
  96. 93.78.123.111
  97. 94.154.224.58
  98. 95.87.36.234
  99.  
  100. // Country Region of those Zombies IP:
  101. // These can be divided in region ( to confirm the effort possibilities)
  102.  
  103. UA (Ukraine) 35
  104. JP (Japan) 13
  105. RU (Russia) 11
  106. BG (Bulgary) 4
  107. TW (Taiwan) 5
  108. RO (Romania) 2
  109. RS (Serbia) 2
  110. KZ (Kazakstan) 2
  111. BY (Belarus) 2
  112. GB (United Kingdom) 1
  113. GE (Georgia) 1
  114. DE (Germany) 1
  115. AR (Argentine) 1
  116. CL (Chile) 1
  117. US (USA) 1
  118. CZ (Czech) 1
  119. MK (Macedonia) 1
  120.  
  121. // Zombie IP Addresses per Network details:
  122.  
  123. 106.1.136.109|Tue Oct 29 17:31:02 JST 2013||9924 | 106.1.0.0/16 | TFN | TW | KBRONET.COM.TW | KBRO CO. LTD.
  124. 109.104.175.206|Tue Oct 29 17:31:04 JST 2013|ppp-109-104-175-206.wildpark.net.|31272 | 109.104.160.0/19 | WILDPARK | RU | WILDPARK.NET | WILDPARK CO
  125. 109.106.5.176|Tue Oct 29 17:31:06 JST 2013|109.106.5.176.sumtel.ua.|15936 | 109.106.0.0/19 | UTN | UA | UKRTRANSSET.COM | UKRTRANS NETWORK LLC
  126. 109.160.120.112|Tue Oct 29 17:31:07 JST 2013||12615 | 109.160.120.0/24 | GCN | BG | GCN.BG | GLOBAL COMMUNICATION NET PLC
  127. 109.162.101.37|Tue Oct 29 17:31:09 JST 2013|109-162-101-37-sthn.broadband.kyivstar.net.|15895 | 109.162.64.0/18 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  128. 109.239.46.209|Tue Oct 29 17:31:11 JST 2013|209-46-239-109.customers.almanet.kz.|39824 | 109.239.44.0/22 | ALMANET | KZ | ALMATV.KZ | JSC ALMATV
  129. 111.216.125.132|Tue Oct 29 17:31:13 JST 2013|pd87d84.sitmnt01.ap.so-net.ne.jp.|2527 | 111.216.0.0/15 | SO | JP | SO-NET.NE.JP | SO-NET SERVICE
  130. 114.198.185.127|Tue Oct 29 17:31:15 JST 2013||9924 | 114.198.176.0/20 | TFN | TW | TFN.NET.TW | TFN MEDIA CO. LTD.
  131. 115.165.6.125|Tue Oct 29 17:31:16 JST 2013|h115-165-6-125.catv02.itscom.jp.|9365 | 115.165.0.0/17 | ITSCOM | JP | ITSCOM.JP | ITS COMMUNICATIONS INC.
  132. 119.194.106.139|Tue Oct 29 17:31:18 JST 2013||4766 | 119.192.0.0/13 | KIXS-AS | KR | KT.COM | KOREA TELECOM
  133. 121.3.74.49|Tue Oct 29 17:31:19 JST 2013|p034a31.kngwnt01.ap.so-net.ne.jp.|2527 | 121.2.0.0/15 | SO | JP | SO-NET.NE.JP | SO-NET SERVICE
  134. 122.250.89.174|Tue Oct 29 17:31:21 JST 2013|cyadg089174.c-able.ne.jp.|18077 | 122.250.0.0/17 | C | JP | C-ABLE.NE.JP | YAMAGUCHI CABLE VISION CO. LTD.
  135. 123.0.224.85|Tue Oct 29 17:31:22 JST 2013|123-0-224-85.nty.dy.tbcnet.net.tw.|4780 | 123.0.224.0/22 | SEEDNET | TW | TBC.US | TBC
  136. 123.216.223.34|Tue Oct 29 17:31:24 JST 2013|p1034-ipbf1103sapodori.hokkaido.ocn.ne.jp.|4713 | 123.216.0.0/13 | OCN | JP | OCN.NE.JP | OPEN COMPUTER NETWORK
  137. 134.249.66.121|Tue Oct 29 17:31:26 JST 2013|134-249-66-121-gprs.kyivstar.net.|15895 | 134.249.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  138. 176.194.219.212|Tue Oct 29 17:31:29 JST 2013|ip-176-194-219-212.bb.netbynet.ru.|12714 | 176.194.0.0/15 | TI | RU | NETBYNET.RU | NET BY NET HOLDING LLC
  139. 176.222.255.174|Tue Oct 29 17:31:30 JST 2013|host-176-222-255-174.ugmk-telecom.ru.|41560 | 176.222.254.0/23 | UT | RU | UGMK-TELECOM.RU | UGMK-TELECOM LLC
  140. 176.50.139.111|Tue Oct 29 17:31:32 JST 2013|176.50.139-111.xdsl.ab.ru.|41440 | 176.50.128.0/18 | SIBIRTELECOM | RU | SIBIRTELECOM.RU | OJSC SIBIRTELECOM
  141. 176.8.195.123|Tue Oct 29 17:31:34 JST 2013|176-8-195-123-krr.broadband.kyivstar.net.|15895 | 176.8.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  142. 176.8.203.95|Tue Oct 29 17:31:35 JST 2013|176-8-203-95-khe.broadband.kyivstar.net.|15895 | 176.8.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  143. 176.8.221.233|Tue Oct 29 17:31:37 JST 2013|176-8-221-233-smln.broadband.kyivstar.net.|15895 | 176.8.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  144. 176.8.36.164|Tue Oct 29 17:31:38 JST 2013|176-8-36-164-broadband.kyivstar.net.|15895 | 176.8.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  145. 178.137.35.78|Tue Oct 29 17:31:40 JST 2013|178-137-35-78-kre.broadband.kyivstar.net.|15895 | 178.137.0.0/17 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  146. 178.137.98.2|Tue Oct 29 17:31:42 JST 2013|178-137-98-2-krr.broadband.kyivstar.net.|15895 | 178.137.0.0/17 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  147. 178.149.181.242|Tue Oct 29 17:31:45 JST 2013|cable-178-149-181-242.dynamic.sbb.rs.|31042 | 178.149.0.0/16 | SERBIA-BROADBAND | RS | SBB.RS | SERBIA BROADBAND
  148. 178.150.134.218|Tue Oct 29 17:31:46 JST 2013|218.134.150.178.triolan.net.|13188 | 178.150.132.0/22 | BANKINFORM | UA | UKR.NET | TOV BANK-INFORM
  149. 178.150.139.157|Tue Oct 29 17:31:48 JST 2013|157.139.150.178.triolan.net.|13188 | 178.150.136.0/22 | BANKINFORM | UA | UKR.NET | TOV BANK-INFORM
  150. 178.150.192.50|Tue Oct 29 17:31:50 JST 2013|50.192.150.178.triolan.net.|13188 | 178.150.192.0/21 | BANKINFORM | UA | UKR.NET | TOV BANK-INFORM
  151. 178.165.32.18|Tue Oct 29 17:31:52 JST 2013|undef-salt-kh.maxnet.ua.|34700 | 178.165.0.0/18 | CITYNET | UA | MAXNET.UA | MAXNET TELECOM LTD
  152. 178.206.206.163|Tue Oct 29 17:31:54 JST 2013||28840 | 178.206.192.0/19 | TATTELECOM | RU | KGTS.RU | TATARSTAN BROAD-BAND ACCESS POOLS
  153. 178.207.102.167|Tue Oct 29 17:31:55 JST 2013||28840 | 178.207.0.0/16 | TATTELECOM | RU | KGTS.RU | TATARSTAN BROAD-BAND ACCESS POOLS
  154. 178.207.86.122|Tue Oct 29 17:31:57 JST 2013||28840 | 178.207.80.0/20 | TATTELECOM | RU | KGTS.RU | TATARSTAN BROAD-BAND ACCESS POOLS
  155. 186.22.121.213|Tue Oct 29 17:31:59 JST 2013|cpe-186-22-121-213.telecentro-reversos.com.ar.|27747 | 186.22.112.0/20 | Telecentro | AR | TELECENTRO-REVERSOS.COM.AR | TELECENTRO S.A.
  156. 188.230.93.206|Tue Oct 29 17:32:00 JST 2013|ip-188-230-93-206.airbites.net.ua.|43266 | 188.230.92.0/23 | ABUA | UA | AIRBITES.NET.UA | LLC AB UKRAINE
  157. 190.162.80.52|Tue Oct 29 17:32:02 JST 2013|pc-52-80-162-190.cm.vtr.net.|22047 | 190.162.80.0/21 | VTR | CL | VTR.NET | VTR BANDA ANCHA S.A.
  158. 212.21.21.252|Tue Oct 29 17:32:04 JST 2013|252.21.21.212.vpn.mgn.ru.|8427 | 212.21.16.0/20 | MAGINFO | RU | MGN.RU | MAGINFO JSC
  159. 212.66.58.220|Tue Oct 29 17:32:05 JST 2013||6886 | 212.66.48.0/20 | INTS | UA | INTS.NET | DATA INTERNET LTD
  160. 213.111.203.236|Tue Oct 29 17:32:07 JST 2013|236.203-pool.nikopol.net.|44924 | 213.111.192.0/18 | MAINSTREAM | UA | NIKOPOL.NET | PP MAINSTREAM
  161. 213.157.45.117|Tue Oct 29 17:32:09 JST 2013||8393 | 213.157.45.0/24 | NEWTECH | KZ | ASTEL.NET | ASTEL JSC
  162. 213.231.54.89|Tue Oct 29 17:32:11 JST 2013|213.231.54.89.pool.breezein.net.|34661 | 213.231.0.0/18 | BREEZE | UA | BREEZEIN.NET | TOV TRK BRIZ
  163. 213.240.209.237|Tue Oct 29 17:32:14 JST 2013||13124 | 213.240.208.0/20 | IBGC | BG | BLIZOO.BG | BLIZOO MEDIA AND BROADBAND EAD
  164. 219.110.214.136|Tue Oct 29 17:32:15 JST 2013|h219-110-214-136.catv02.itscom.jp.|9365 | 219.110.0.0/16 | ITSCOM | JP | ITSCOM.JP | ITS COMMUNICATIONS INC.
  165. 219.115.158.12|Tue Oct 29 17:32:17 JST 2013|zaqdb739e0c.zaq.ne.jp.|9617 | 219.115.128.0/19 | ZAQ | JP | JCOM.CO.JP | J:COM WEST CO. LTD.
  166. 219.29.85.91|Tue Oct 29 17:32:18 JST 2013|softbank219029085091.bbtec.net.|17676 | 219.29.0.0/16 | GIGAINFRA | JP | SOFTBANKBB.CO.JP | SOFTBANK BB CORP
  167. 222.230.176.97|Tue Oct 29 17:32:20 JST 2013|s97.176.230.222.fls.vectant.ne.jp.|2519 | 222.230.0.0/16 | VECTANT | JP | FNJ.CO.JP | FAMILY NET JAPAN INCORPORATED
  168. 31.133.43.89|Tue Oct 29 17:32:21 JST 2013||52091 | 31.133.32.0/19 | TRUBNIKOV | UA | - | FOP TRUBNIKOV VALERIY MUHAYLOVICH
  169. 36.239.190.84|Tue Oct 29 17:32:23 JST 2013|36-239-190-84.dynamic-ip.hinet.net.|3462 | 36.239.0.0/16 | HINET | TW | CHT.COM.TW | CHTD CHUNGHWA TELECOM CO. LTD.
  170. 36.239.218.157|Tue Oct 29 17:32:30 JST 2013||3462 | 36.239.0.0/16 | HINET | TW | CHT.COM.TW | CHTD CHUNGHWA TELECOM CO. LTD.
  171. 36.245.213.112|Tue Oct 29 17:32:32 JST 2013|em36-245-213-112.pool.e-mobile.ne.jp.|9609 | 36.244.0.0/15 | EACCESS | JP | EACCESS.NET | EACCESS LTD.
  172. 37.115.143.134|Tue Oct 29 17:32:34 JST 2013|37-115-143-134-broadband.kyivstar.net.|15895 | 37.115.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  173. 37.115.78.180|Tue Oct 29 17:32:36 JST 2013|37-115-78-180-broadband.kyivstar.net.|15895 | 37.115.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  174. 37.229.119.183|Tue Oct 29 17:32:37 JST 2013|37-229-119-183-broadband.kyivstar.net.|15895 | 37.229.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  175. 37.229.72.28|Tue Oct 29 17:32:38 JST 2013|37-229-72-28-broadband.kyivstar.net.|15895 | 37.229.0.0/16 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  176. 37.57.48.3|Tue Oct 29 17:32:40 JST 2013|3.48.57.37.triolan.net.|13188 | 37.57.48.0/21 | BANKINFORM | UA | UKR.NET | TOV BANK-INFORM
  177. 46.108.62.76|Tue Oct 29 17:32:43 JST 2013|hosted-by.levelhost.net.|5541 | 46.108.60.0/22 | ADNET | RO | HOSTPAY.RO | C&A CONNECT SRL
  178. 46.118.204.252|Tue Oct 29 17:32:44 JST 2013|SOL-FTTB.252.204.118.46.sovam.net.ua.|15895 | 46.118.0.0/16 | KSNET | UA | SOVAM.NET.UA | GOLDEN TELECOM
  179. 46.211.33.20|Tue Oct 29 17:32:46 JST 2013|46-211-33-20-chg.broadband.kyivstar.net.|15895 | 46.211.0.0/17 | KSNET | UA | KYIVSTAR.NET | KYIVSTAR PJSC
  180. 46.237.81.153|Tue Oct 29 17:32:48 JST 2013|46-237-81-153.pz.ddns.bulsat.com.|43205 | 46.237.64.0/18 | BULSATCOM-BG | BG | BULSAT.COM | BULSATCOM AD
  181. 46.35.227.141|Tue Oct 29 17:32:49 JST 2013|141-227-35-46.host.sevstar.net.|35816 | 46.35.224.0/19 | SEVSTAR | UA | LANCOM.GR | LANCOM LTD.
  182. 5.104.60.9|Tue Oct 29 17:32:51 JST 2013|5-104-60-9.mytrinity.com.ua.| | | | UA | MYTRINITY.COM.UA | CIFROVYE DISPETCHERSKIE SISTEMY
  183. 5.105.23.87|Tue Oct 29 17:32:53 JST 2013|5-105-23-87.mytrinity.com.ua.|43554 | 5.105.0.0/16 | CDS | UA | MYTRINITY.COM.UA | CIFROVYE DISPETCHERSKIE SISTEMY
  184. 5.28.111.240|Tue Oct 29 17:32:55 JST 2013|cable-5-28-111-240.cust.telecolumbus.net.|20880 | 5.28.64.0/18 | BLUE | DE | BLUE-CABLE.NET | TELE COLUMBUS GMBH
  185. 58.3.135.176|Tue Oct 29 17:32:57 JST 2013|58-3-135-176.ppp.bbiq.jp.|7679 | 58.3.128.0/17 | QTNET | JP | QTNET.CO.JP | KYUSHU TELECOMMUNICATION NETWORK CO. INC.
  186. 60.237.116.235|Tue Oct 29 17:32:59 JST 2013|FLH1Aaz107.myg.mesh.ad.jp.|2518 | 60.236.0.0/14 | BIGLOBE | JP | BIGLOBE.NE.JP | NEC BIGLOBE LTD.
  187. 61.46.101.18|Tue Oct 29 17:33:00 JST 2013|zaq3d2e6512.zaq.ne.jp.|9617 | 61.46.0.0/17 | ZAQ | JP | JCOM.CO.JP | J:COM WEST CO. LTD.
  188. 74.129.164.17|Tue Oct 29 17:33:02 JST 2013|74-129-164-17.dhcp.insightbb.com.|10796 | 74.128.0.0/12 | SCRR-10796 | US | MYINSIGHT.COM | INSIGHT COMMUNICATIONS COMPANY L.P.
  189. 77.120.134.104|Tue Oct 29 17:33:05 JST 2013|77-120-134-104.dynamic-FTTB.datasvit.net.|25229 | 77.120.128.0/18 | VOLIA | UA | VOLIA.NET | KYIVSKI TELEKOMUNIKATSIYNI MEREZHI LLC
  190. 77.123.227.61|Tue Oct 29 17:33:07 JST 2013||48169 | 77.123.224.0/19 | IVC | UA | VOLIA.NET | KYIVSKI TELEKOMUNIKATSIYNI MEREZHI LLC
  191. 78.84.44.14|Tue Oct 29 17:33:08 JST 2013||12578 | 78.84.0.0/16 | APOLLO | LV | - | ADDRESS POOL FOR LTC-HOME CUSTOMERS
  192. 79.101.42.7|Tue Oct 29 17:33:10 JST 2013||8400 | 79.101.0.0/16 | TELEKOM | RS | - | SA ELEKTRONIK KOSOVSKA MITROVICA
  193. 80.234.86.157|Tue Oct 29 17:33:12 JST 2013||15500 | 80.234.0.0/17 | OJSC | RU | TOLCOM.RU | FOR CLIENT TOGLIATTI COMMUNICATION TSINFORM
  194. 82.33.2.11|Tue Oct 29 17:33:14 JST 2013|cpc3-jarr13-2-0-cust522.16-2.cable.virginm.net.|5089 | 82.32.0.0/15 | NTL | GB | VIRGINMEDIA.COM | VIRGIN MEDIA LIMITED
  195. 87.252.234.72|Tue Oct 29 17:33:16 JST 2013|87.252.234.72.vpn.garant.by.|50334 | 87.252.234.0/24 | GARANT | BY | NETLAND.BY | MOBILE SERVICE LTD.
  196. 87.252.245.232|Tue Oct 29 17:33:17 JST 2013||50334 | 87.252.245.0/24 | GARANT | BY | NETLAND.BY | MOBILE SERVICE LTD.
  197. 88.206.57.41|Tue Oct 29 17:33:19 JST 2013|pool-88-206-57-41.is74.ru.|8369 | 88.206.0.0/17 | INTERSVYAZ | RU | IS74.RU | INTERSVYAZ-2 JSC
  198. 89.109.238.163|Tue Oct 29 17:33:21 JST 2013||25515 | 89.109.192.0/18 | CTCNET | RU | - | ROSTELECOM MOSCOW REGION BRANCH
  199. 89.165.154.172|Tue Oct 29 17:33:22 JST 2013|89-165-154-172.next-gen.ro.|48161 | 89.165.152.0/22 | NG | RO | NEXT-GEN.RO | ODORHEIU SECUIESC
  200. 89.176.184.25|Tue Oct 29 17:33:24 JST 2013|ip-89-176-184-25.net.upcbroadband.cz.|6830 | 89.176.0.0/16 | LGI | CZ | UPCBROADBAND.CZ | UPC CESKA REPUBLIKA A.S.
  201. 89.185.18.68|Tue Oct 29 17:33:26 JST 2013|CPE137068.tvcom.net.ua.|57033 | 89.185.16.0/21 | TVCOM-ALTAIR | UA | TVCOM.NET.UA | TVCOM LTD.
  202. 89.205.2.163|Tue Oct 29 17:33:27 JST 2013|89.205.2.163.robi.com.mk.|41557 | 89.205.0.0/21 | MEGANET | MK | ROBI.COM.MK | MEGANET
  203. 92.52.181.18|Tue Oct 29 17:33:29 JST 2013|| | | | UA | BIT.TE.UA | BITTERNET LTD
  204. 93.177.191.145|Tue Oct 29 17:33:42 JST 2013|host-93-177-191-145.customer.co.ge.| | | | GE | CAUCASUS.NET | CAUCASUS ONLINE LTD.
  205. 93.78.123.111|Tue Oct 29 17:33:45 JST 2013||25229 | 93.78.112.0/20 | VOLIA | UA | VOLIA.NET | KYIVSKI TELEKOMUNIKATSIYNI MEREZHI LLC
  206. 94.154.224.58|Tue Oct 29 17:33:46 JST 2013|ip-e03a.d-net.kiev.ua.| | | | UA | D-NET.KIEV.UA | DELTA-NET LLC
  207. 95.87.36.234|Tue Oct 29 17:33:49 JST 2013|ip-95-87-36-234.trakiacable.net.|38924 | 95.87.0.0/18 | AS | BG | TRAKIACABLE.NET | TRAKIA KABEL OOD
  208.  
  209. // HOW LONG CAN THESE IP GOES??
  210. // Behold the PoC of the "Anniversary" Zombie-IP: 94.154.224.58 :
  211.  
  212. "bugfivin.ru.","bugfivin.ru","A","94.154.224.58","2013-01-27 04:08:08","2013-01-27 04:08:31","2","0:00:23"
  213. "didcufun.ru.","didcufun.ru","A","94.154.224.58","2013-01-31 02:04:51","2013-01-31 02:04:51","1","0:00:00"
  214. "diteqciq.ru.","diteqciq.ru","A","94.154.224.58","2013-01-28 00:07:21","2013-01-28 00:07:32","2","0:00:11"
  215. "ecrihgep.ru.","ecrihgep.ru","A","94.154.224.58","2013-01-31 23:27:43","2013-01-31 23:27:43","1","0:00:00"
  216. "www.isbegisy.ru.","isbegisy.ru","A","94.154.224.58","2013-01-31 02:03:49","2013-01-31 02:03:49","1","0:00:00"
  217. "iwhuwugy.ru.","iwhuwugy.ru","A","94.154.224.58","2013-01-30 01:10:31","2013-03-16 03:03:29","4","45 days
  218. "joljihuk.ru.","joljihuk.ru","A","94.154.224.58","2013-01-29 04:21:07","2013-02-26 01:33:55","3","27 days
  219. "merwiqca.ru.","merwiqca.ru","A","94.154.224.58","2013-01-28 04:01:26","2013-02-17 23:08:48","5","20 days
  220. "soduvnec.ru.","soduvnec.ru","A","94.154.224.58","2013-01-29 04:07:32","2013-02-27 03:50:51","8","28 days
  221. "ip-e03a.d-net.kiev.ua.","d-net.kiev.ua","A","94.154.224.58","2013-01-28 06:27:59","2013-10-06 00:47:35","180","250 days
  222. "oparle.com.","oparle.com","A","94.154.224.58","2013-01-27 01:50:11","2013-05-19 00:05:54","194","111 days
  223. "ns1.oparle.com.","oparle.com","A","94.154.224.58","2013-01-28 05:23:10","2013-05-18 02:26:03","19","109 days
  224. "ns2.oparle.com.","oparle.com","A","94.154.224.58","2013-01-31 01:52:47","2013-03-25 13:39:18","91","53 days
  225. "ns3.oparle.com.","oparle.com","A","94.154.224.58","2013-01-31 01:52:47","2013-04-17 05:19:07","113","76 days
  226. "ns4.oparle.com.","oparle.com","A","94.154.224.58","2013-01-27 03:16:43","2013-04-19 05:08:43","69","82 days
  227. "ns1.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-29 23:25:30","2013-04-12 04:02:48","73","72 days
  228. "ns2.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-31 03:28:21","2013-03-24 03:04:17","110","51 days
  229. "ns3.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-30 03:29:59","2013-04-05 02:11:39","1903","64 days
  230. "ns4.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-27 01:43:35","2013-03-04 02:44:58","809","36 days
  231. "ns5.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-29 23:25:30","2013-03-04 05:40:37","52","33 days
  232. "ns6.boomsco.com.","boomsco.com","A","94.154.224.58","2013-01-27 02:39:11","2013-04-05 01:13:29","77","67 days
  233. "ns1.larstor.com.","larstor.com","A","94.154.224.58","2013-01-27 04:06:42","2013-05-06 03:18:29","286","98 days
  234. "ns2.larstor.com.","larstor.com","A","94.154.224.58","2013-01-27 04:07:10","2013-04-05 06:13:37","74","68 days
  235. "ns3.larstor.com.","larstor.com","A","94.154.224.58","2013-01-27 04:06:42","2013-03-23 01:26:52","35","54 days
  236. "ns4.larstor.com.","larstor.com","A","94.154.224.58","2013-01-27 04:06:42","2013-04-05 05:13:26","129","68 days
  237. "ns5.larstor.com.","larstor.com","A","94.154.224.58","2013-01-27 20:38:37","2013-04-05 00:14:13","160","67 days
  238. "ns6.larstor.com.","larstor.com","A","94.154.224.58","2013-01-28 04:01:42","2013-04-05 04:12:08","84","67 days
  239. "ns3.newrect.com.","newrect.com","A","94.154.224.58","2013-01-30 01:04:56","2013-04-02 04:05:44","592","62 days
  240. "ns4.newrect.com.","newrect.com","A","94.154.224.58","2013-01-29 02:07:53","2013-04-09 13:12:08","232","70 days
  241. "ns6.newrect.com.","newrect.com","A","94.154.224.58","2013-01-27 21:34:00","2013-04-05 20:13:15","311","67 days
  242.  
  243. ---
  244. #MalwareMustDIE!!!!!!
  245. OP-KELIHOS, MMD, 2013.
  246. @VriesHd @kellewic @DhiaLite @Secluded_Memory @unixfreaxjp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!