av.psybnc.cz(100k ngrBot hosted in France Paris Gandi)

Saga continues the lamer behind this net(Virus) is changing domain names but still hard for him to be invisible

Resolved : [av.psybnc.cz] To [92.243.10.12]
Resolved : [av.psybnc.cz] To [92.243.0.109]
Resolved : [av.psybnc.cz] To [92.243.27.72]
Resolved : [av.psybnc.cz] To [92.243.17.156]
Resolved : [av.psybnc.cz] To [92.243.25.164]

Other domains used by the lamer:
up.a7aneek.net
av.shannen.cc

92.243.10.12 5900 PASS ngrBot
92.243.0.109 5900 PASS ngrBot
92.243.27.72 5900 PASS ngrBot
92.243.17.156 5900 PASS ngrBot
92.243.25.164 5900 PASS ngrBot

NICK n{US|XPa}vowobev
USER vowobev 0 0 :vowobev
JOIN ##Redrm-002## redem
JOIN #new
JOIN #SPp,#DLx,#UP

Now talking in ##Redrm-002##
Topic On: [ ##Redrm-002## ] [ !m on !s -n !j #SPp,#DLx,#UP !j -c UA,UKR #vnc ]
Topic By: [ kjkjk ]
* _Magic sets mode: +o _Magic

Now talking in #SPp
Topic On: [ #SPp ] [ !mod usbi on !mod msnu off !msn.int 3 !msn.set :O hahaha! http://www.facebook.com.img098.tk/Photo-#########.jpeg !http.int 4 !http.set 😉 hehehe! http://www.facebook.com.img098.tk/Photo-#########.jpeg ]
Topic By: [ kjkjk ]
* MrDD sets mode: +o MrDD
Parts: MrDD [Mr_DD@Virus.Gov]

hosting infos:
http://whois.domaintools.com/92.243.10.12