irc.byroe.net (Lightaidra Router botnet hosted by fdcservers.net)

Resolved irc.byroe.net to 204.45.97.42, 103.13.240.2, 109.123.112.25, 91.121.73.41

Server:  irc.byroe.net
Port:  6667
Channel:  #priv8
#priv8           728     [+pmntr] CAUTION P.R.I.V.A.T.E CAUTION

AuthHost:  @csops.byroe.net

Oper:
[SuPrem0] (~BaGol0@csops.byroe.net): BaGol0
[SuPrem0] is a registered nick
[SuPrem0] ~#priv8
[SuPrem0] is away (Not Here !!!)
[SuPrem0] is a Staff Byroe
[SuPrem0] idle 08:04:23, signon: Mon Apr 15 07:04:56
[SuPrem0] End of WHOIS list.

Payload: hxxp://50.116.7.213/mymail/skins/larry/images/googiespell/.a/getbinaries.sh

Hosting infos:
http://whois.domaintools.com/204.45.97.42
http://whois.domaintools.com/103.13.240.2
http://whois.domaintools.com/109.123.112.25
http://whois.domaintools.com/91.121.73.41

Info for this post comes from x00
http://pastebin.com/zUEttWn2