Are you part of the Koobface botnet?

Our Honeypots collect a lot of IPs from PCs infected with the Koobface worm.

I did not quite know what to do with this information until a couple days ago.

We’ve decided to put all those IPs into a DB and have a PHP page query the user’s IP against our list.

Want to try it? Follow this URL:

http://zhengupload.paretologic.com/koobface.php

The number of IPs should grow steadily and any IP detected will display a time stamp of the last time it was active:

Jerome Segura