92.241.165.221(irc botnet hosted in Russian Federation Moscow Oao Webalta)

server 92.241.165.221:1234 PASS ngrBot (Channel: #!nigro!)

Now talking in #!nigro!
Topic On: [ #!nigro! ] [ ]
Topic By: [ spin ]

PRIVMSG #test :[DNS]: Blocked 1310 domain(s) – Redirected 0 domain(s)
NICK n{US|XPa}eyqlyzj
USER eyqlyzj 0 0 :eyqlyzj
JOIN #test ngrBot
PRIVMSG #test :[HTTP]: Updated HTTP spread interval to “2”
PRIVMSG #test :[MSN]: Updated MSN spread interval to “2”
PRIVMSG #test :[HTTP]: Updated HTTP spread message to “lolold!!9 foto?!2 http://show55.ru/facebook.php?=PIC93181.JPEG”
PRIVMSG #test :[MSN]: Updated MSN spread message to “lololj!!4 foto?!2 http://show55.ru/facebook.php?=PIC62695.JPEG”

found by _char

hosting infos:
http://whois.domaintools.com/92.241.165.221

Categories: Uncategorized