67.202.109.136(irc botnet hosted in United States Kansas City Steadfast Networks)

Remote Host Port Number
67.202.109.136 6567 PASS s1m0n3t4
70.38.98.239 80

MODE [SI|USA|00|P|83237] -ix
JOIN #feb# c1rc0dusoleil
PRIVMSG #feb# :[Dl]: File download: 80.0KB to: c:WINDOWSjtu.exe @ 80.0KB/sec.
PRIVMSG #feb# :[Dl]: Created process: “c:WINDOWSjtu.exe”, PID:
PONG Apple2.Network
NICK [SI|USA|00|P|83237]
USER XP-8307 * 0 :COMPUTERNAME

infos about hosting:
http://whois.domaintools.com/67.202.109.136

Categories: Uncategorized