Black SEO and IRCBot at

Found some IRCBots thoses last days, well detected (arond 27 on VirusTotal).

Theses IRCBackdoor connect to ( – OVH CA)

Notice the « Guy » name in the domain registration informations :

Registrant Name: Guy Shitrit
Registrant Organization: Guy Shitrit
Registrant Street: Henriyeta Sold
Registrant City: Qiryat Bialik
Registrant State/Province: NA
Registrant Postal Code: 27000
Registrant Country: IL
Registrant Phone: +972.0525611132
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email:

The website claim to boost your SEO :


on the ircd server, 845 clients are connected :


~230 bots on #seoa


and ~200 bots on #seob

« guy » is the administrator :


There are a channel by website and they loop in google query :


ircbot_overthetopseo3 ircbot_overthetopseo2
so seems this use bots to offers black SEO.
Surprising they dont hide so much.

I will contact OVH to get the IRCd down and the domain.


(Visité 78 fois, 1 visites ce jour)

Add Comment