orbitaurl.com( botnet hosted in United States Chicago Hostforweb Inc)

Remote Host Port Number
66.225.241.182 2345

NICK New[USA|00|P|11539]
PRIVMSG #!loco! :[M]: Thread Disabled.
PRIVMSG #!loco! :[M]: Thread Activated: Sending Message With Email.
USER XP-5074 * 0 :COMPUTERNAME
MODE New[USA|00|P|11539] -ix
JOIN #!loco!
PONG 22 MOTD

– DNS Queries:

Name Query Type Query Result Successful Protocol
orbitaurl.com DNS_TYPE_A 158.2.125.114 14.73.178.183 YES udp

210.170.62.115:2345
Nick: New[AUT|00|P|38063]
Username: XP-9980
Joined Channel: #!loco!
Channel Topic for Channel #!loco!: “D http://linkmenow.org/images3132.php?=”
Private Message to Channel #!loco!: “[M]: Thread Activated: Sending Message With Email.”
Private Message to Channel #!loco!: “[M]: Thread Disabled.”
Private Message to User New[AUT|00|P|38063]: “.hp http://domredi.com/1/”

infos about hosting:
http://whois.domaintools.com/66.225.241.182

Categories: Uncategorized