I googled it and it seems that the bot came from nigeria:
Host name: 41.191.108.130 IP address: 41.191.108.130 Location: NIGERIA
http://mengwong.livejournal.com/73172.html -- Martin Tomasek
_______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.