gusan0.sin-ip.es(irc botnet hosted in United States Chicago Fdcservers.net)

Remote Host Port Number
50.7.247.10 6667

NICK NEW[XX][XP]8744609838
USER 8744 “” “TsGh” :8744
MODE NEW[XX][XP]8744609838 -d
JOIN ##spam##
PONG :irc.priv8net.com

NICK {XPUSA698507}
USER COMPUTERNAME * 0 :COMPUTERNAME
MODE {XPUSA698507} -ix
JOIN ##v5##
MODE ##v5## -ix
PRIVMSG ##v5## :.::[DDoS]::. Flooding 127.0.0.2:1234 with ddos.syn for 50 seconds
PRIVMSG ##v5## :.::[DDoS]::. Done with flood (0KB/sec).
NICK {XPUSA965601}
MODE {XPUSA965601} -ix

hosting infos:
http://whois.domaintools.com/50.7.247.10

Categories: Uncategorized