Hackforums.net Investigation


We are working to get Hackforums.net shut down. We feel strongly that it a website which has an undue influence on young people as well as promoting illegal computer activities such as hacking, virus spreading, manipulation of online financial services etc.

I'm not certain of what your criteria if for judging a site to be 'positive for malware'. I know that is not an easy threat to withstand and I don't blame this site for exercising caution and withdrawing the 'positive' for malware decision.

Hackforums.net - "Infecting one another with malware."


We are reporting this site for illegal activitie and it should be closed as soon as posible!

Legal internet law will clean all illegal activities and we will help realise it!

[IT Security Team]

91.215.159.137(irc botnet hosted in Netherlands Amsterdam Infinite Technologies Internet Solutions Limited)

Remote Host Port Number
112.78.8.20 80
195.122.131.3 80
213.251.170.52 80
91.215.159.137 1866 PASS ngrBot

PRIVMSG #!hot! :[DNS]: Blocked 1259 domain(s) - Redirected 0 domain(s)
PRIVMSG #!hot! :[d="http://rapidshare.com/files/2997295683/nap.exe"] Error downloading file [e="12039"]
NICK n{US|XPa}aytockz
USER aytockz 0 0 :aytockz
JOIN #!hot! ngrBot
PRIVMSG #!hot! :[HTTP]: Updated HTTP spread interval to "5"
PRIVMSG #!hot! :[HTTP]: Updated HTTP spread message to "LOL http://jardincaracolito.edu.co/facebook-profile-pic-r9k5w9_JPG"
PRIVMSG #!hot! :[MSN]: Updated MSN spread interval to "5"
PRIVMSG #!hot! :[MSN]: Updated MSN spread message to "LOL http://jardincaracolito.edu.co/facebook-profile-pic-u9v2e9_JPG"


hosting infos:
http://whois.domaintools.com/91.215.159.137