porsuk.seremonymt2.com(irc botnet hosted in Turkey Netinternet Bilgisayar Ve Telekomunikasyon San. Ve Tic. Ltd. Sti)

Resolved : [porsuk.seremonymt2.com] To [94.102.0.65]

Remote Host Port Number
94.102.0.65 6667 PASS secret

NICK USA|87706
USER xyeaec 0 0 :USA|87706
JOIN #scanner
USERHOST USA|87706
MODE USA|87706 -x+i
PONG :HTTP1.4

Now talking in #sohbet
Topic On: [ #sohbet ] []
Topic By: [ Hw ]

Now talking in #scanner
Topic On: [ #scanner ] []
Topic By: [ THA|8207182 ]

NICK n{US|XPa}mmapsia
USER mmapsia 0 0 :mmapsia
JOIN #chav secret

MODE USA|17803 -x+i
JOIN #hack timu
USERHOST USA|17803
PRIVMSG #hack :-
psniff
– Carnivore packet sniffer active.
PRIVMSG #spam :-
– suspicious BOT packet from: 94.102.0.65:6667 – :HTTP1.4 302 USA|17803 :USA|17803=+lmlma@4e.59.85ae.static.theplanet.com
– suspicious BOT packet from: 94.102.0.65:6667 – :HTTP1.4 404 USA|17803 #hack :You must have a registered nick (+r) to talk on this channel (#hack)
– suspicious BOT packet from: 94.102.0.65:6667 – :infeCTeD!sadfg@ddos.com PRIVMSG #hack :.
NICK USA|17803
USER lmlma 0 0 :USA|17803

UPDATE:
Remote Host Port Number
94.102.0.65 81

NICK hsrhgun|INF|18|25|54|382|
USER 54491 hsrhgun.com 94.102.0.65 :54491 hsrhgun
JOIN #iusb#
PONG :HTTP1.4

hosting infos:
http://whois.domaintools.com/94.102.0.65

Categories: Uncategorized