[nsp-sec] crimeircd.net | c-crime central it seems

Wed Mar 14 14:09:14 EDT 2012

All,

Just an FYI.  Ran into a major RFI, ID theft and c-crime central it seems.  The channel #ccpower is back, channel is invisible, but there for sure.

Nuke or proxy details if you can.

* Now talking in #ccpower
* Topic is 'Â«Your Ultimate Internet Security GuideÂ»  | RULES: @/+v verify first, | For check join #unix ||  For reporting rippers join #Rippers ,  Do not set timers faster than 0 60  Checker is On #unix .'
* Set by hidden on Wed Feb 08 23:28:28
<bambam> SelliNg CCV w0rLdwIdE. pAyMeNt vIa LiBerTy ReSerVe 0nLy. Pm Me f0r DeaL. ThAnk Y0u!!!

* iHack VERIFIED SELLER [Selling:] RDP [AMSworks] / Fresh Leads/Mail List [All Countries] / Fullz CC [Fresh/Valid] / Dead Fullz [Fresh / Bulk orders Usualy] / Scam Pages [LATEST 2011] / i Host/Build Scams / Fresh World Wide Socks - Available.
<Chelsea>  Selling Cvv Price List (USA UK IT GR CZ RU PL CH AT LU BE BR JP TW BG UA NL IL MX ES PT and more) - Full Info (USA UK ) - PayPal Verified MY ID: theandroidsell at yahoo.com

31.192.213.231 | matrix.crimeircd.net
77.235.47.23 | gateway.nl.crimeircd.net
80.172.240.150 | masters.crimeircd.net
80.237.154.26 | europe.crimeircd.net
82.165.38.156 | orbit.crimeircd.net
87.237.212.72 | killers.crimeircd.net
89.30.123.146 | powertech.crimeircd.net
93.189.34.83 | black.crimeircd.net
112.125.40.215 | underworld.crimeircd.net
112.125.57.185 | femous.crimeircd.net
113.35.224.60 | google.crimeircd.net
114.179.209.19 | luxembourg.eu.crimeircd.net
119.145.144.56 | leet.crimeircd.net
149.13.20.119 | mozilla.crimeircd.net
222.35.141.198 | infected.ch.crimeircd.net
222.35.141.231 | irc.crimeircd.net

Bulk mode; whois.cymru.com [2012-03-14 16:45:18 +0000]

174     | 149.13.20.119    | COGENT Cogent/PSI
3301    | 87.237.212.72    | TELIANET-SWEDEN TeliaSonera AB
4134    | 119.145.144.56   | CHINANET-BACKBONE No.31,Jin-rong Street
4713    | 114.179.209.19   | OCN NTT Communications Corporation
4847    | 222.35.141.198   | CNIX-AP China Networks Inter-Exchange
4847    | 222.35.141.231   | CNIX-AP China Networks Inter-Exchange
8426    | 80.172.240.150   | CLARANET-AS ClaraNET LTD
8560    | 82.165.38.156    | ONEANDONE-AS 1&1 Internet AG
16265   | 77.235.47.23     | LEASEWEB LeaseWeb B.V.
17506   | 113.35.224.60    | UCOM UCOM Corp.
20773   | 80.237.154.26    | HOSTEUROPE-AS Host Europe GmbH
24138   | 222.35.141.198   | CRNET_BJ_IDC-CNNIC-AP China Tietong Telecommunication Corporation
24138   | 222.35.141.231   | CRNET_BJ_IDC-CNNIC-AP China Tietong Telecommunication Corporation
31216   | 89.30.123.146    | BSOCOM BSO Network Solutions SAS
45037   | 93.189.34.83     | HISPAWEB-NETWORK Propelin Consulting S.L.U.
45096   | 112.125.40.215   | CNNIC-ALIBABA-BJ-NET-AP Alibaba (Beijing) Technology Co., Ltd.
45096   | 112.125.57.185   | CNNIC-ALIBABA-BJ-NET-AP Alibaba (Beijing) Technology Co., Ltd.
51559   | 31.192.213.231   | NETINTERNET Netinternet Bilgisayar ve Telekomunikasyon San. ve Tic. Ltd. Sti.

Channel list exposes what one would expect to see ..

#unix 362 [+ntrRMN] 4,4 5,4%4,5%5,5 1,5%5,1%1,1 0,1 â~... Welcome To CrimeIRCD Network â~... - Checker Status = ON - Do Not Flood The Bot , Free Cards Every Minute , Join also #CCPOWER To Sell/Buy Have nice day http://crimeircd.org/rules 1,5%5,5 4,5%5,4%4,4 0,40,44,4 5,4%4,5%
#crime 116 [+ntrRMN] 9,1[11,1Welcome ON 8#crime9,1][7,1Checker Status 7[9ON7]9,1]9,1[7,1 HeLp Commands8 !cmd9,1]9,1[7,1BUYING stuff 11msg 8FASTER9,1]9,1[7,1FOR ANY 11NETWORK8/9SERVICE8/4REPORTING11 HeLp join 8#HeLp 4#rippers9,1]
#chking 112 [+ntrMN] 4,1-=[ Welcome to 0#CHKING4,1 @CrimeIRC ]=-4,1-=[ Checker STATUS: 0ON4,1 ]=-\0Check CMD !chk & !ck 4/-=[ For any HELP Message Any AOP/Voice ]=-\/-=| 0'For Trading Join 9#ccpower 4rippers Join 7#Rippers '''
#checker 107 [+ntrRM] 7,1 Checker 9,1 UP . 7,1 Use 4,1 !chk CCNUMBER EXPIREDATE CVV2 7,1 to chk. 6,1 Recheck = Permanement ban from the channel {Akick List} 7,1 Checker 9,1 UP . 7,1 Use 4,1 !chk CCNUMBER EXPIREDATE CVV2 AMMOUNT 7,1 to chk. 6,1 Recheck = Permanement ban from the channel {Akick List}
#MAXCrime 91 [+mntrR] 9,1[13 Welcome 7To 8 MAXCrime9]1,4<->9,1[11 Checker Status 9On9]9,1[8,1Stuff for Sale11 See In #ccpower9,1]9,1[4,1HIRE 1,7MAX-Chk4,1 In PVT Channel PM me9,1]
#cvvx 81 [+ntrN] 11,1Selling [CHK-BOT] source for 8 100 lr 7KosoWaR-
#chk-br 71 [+ntrRM] 9,1[11,1Welcome ON 8#chk-br9,1][7,1Checker Status 7[9ON7]9,1]9,1[7,1 HeLp Commands8 !cmd
#hackers 63 [+ntrRMN] h**p://ton5mkxr2for63mk.onion/ | (Wanna private bot? msg u1m) | http://pastebin.com/PxLdmj9a FuCK OFF RIPPERS! | SELLING LR SHOPS BUG. GET FREE CREDITS ON CC SHOPS! PM u1m (example: ccshop.biz user: keedz pass: keedz)
#Money 57 [+ntrR] 0,1 * 4,1 Welcome to 8#Money 4Stay here and enjoy our channel 0,1 * 8,1Today: 11http://www.pdair.com0,1 * 8 Checker is 9ON 0,1 * U need put amount on checker 8!chk (number) (validate) (cvv) (amount) 4[8MINIMIUM $54]
#BRMafia 51 [+rR] 0,5#8BRMafia0,5 «» Bem Vindos (11WELCOME0,5) ao #8BRMafia0,5 Canal Banker/Carder em Rede 11irc.crimeircd.org 0,5Viemos Para Ficar Jamais Morreremos Somos o Terror da Capital Somos o Movimento Levou Calote? #9IRCops0,5 «» #8BRMafia1"
#chk 38 [+ntrRM] 04ê(tm)¨04 [ 06Checker 04= 09ON! 04| 06Bot 04= 09SeXy-ChK 04| 06Help 04= 09!cmd 04| 06Selling 04= 09US06|09UK06|09CVV06||09C9906||09RDP06||09VPS06||09VPN 04| 06Shop 04= 09www.CCHeaven.in 04| 09Gr4nD1o5 04] 04ê(tm)¨04 
#Checkcc 37 [+ntrM] 7[ 06Checker = 09ON 07] - 07[ 06Help = 09!Help 07] Today Cardable Website Seeds Cannabis -> http://www.cannabis-seeds.co.uk/
#cc 28 [+ntr] '4,1 -=[ Welcome to 0#CC4,1 @CrimeIRC ]=- 8,1 http://goo.gl/BiHqm
#CcBoT 18 [+ntrRM] 0,12We are working on DNS of CrimeIRCD.net if you can't connect please use irc.crimeircd.org or irc.unixirc.eu
#chkcc 17  
#visa 8 [+ntr] 13 To Report Rippers join #Rippers . Checker ON . !chk ccnumber expire cvv2 Privat Stay Out!
#g15 7 [+r] 15,0`%0,15%,11,15`%15,11%,12,11`%11,12%,2,12`%12,2%'1,2`%2,1% 0,1 Welcome To #g15 checker CCVerifier[v6] status 1,9ON!! by bambam 2,1`%1,2%12,2`%2,12%,11,12`%12,11%'15,11`%11,15%,0,15`%
#gelora 6 [+nt] 2AVAILAIBLE COMMAND'S ---> ( !BANK <BIN> ) & ( !CHK <CCNUM> <EXP> <CVV2> ) & ( PRIVATE CHECK )   4/msg Citibank !CHK <CCNUM> <EXP> <CVV2>
#rippers 5 [+mntrR] Welcome To Ripper reporting CHANNEL | If you have been ripped -OR- would wish to report a Ripper Plz Wait any Oper to be online|For more Info type !info To get HeLp NO IDLE! : Latest Rippers: gAbs/cowboy/CCleaner/zorg/spookster/secured/cashier2k/flypsid/Cashit/Lloyds/soytupapa/Sao_Bang/Okas/bubra
#CCMx 4 [+ntr] 9[46C9]9.46a9.46r9.46d9.46e9.46r9.46z9.0[46M0]0.46é0.4[X4]4.46i4.46c4.46o4.
#i/o 4 [+ntr] 
#montreal 4 [+ntr] 
#vhost 4 [+ntrRcM] Vhost services UP example : !vhost thebest.crimeircd.net Notice: !vhost restricted user will be banded if him/her used restricted Vhost enjoy your stay at CrimeIRCD
#DraGo 3 [+ntr]  Community of #DraGo: hmmm {Spam UK / Hacker} | bz {CVV2 Seller} | u1m {Hacker/Coder/CVV2 Seller}'  Sindrom`x` {CVV2 Dumps Seller}
#help 3 [+ntrc] Welcome to official #Help channel.If you need help please ask on main To register your nick type : /ns register yourpassword your at mail.com to register channel type : /cs register #channel password description
#linux 3 [+ntr]

Steve Shelton
Security Engineer
Cogent Communications
sshelton at cogentco.com