204.188.231.133(ngrBot hosted in United States Missoula Sharktech Internet Services)

Remote Host Port Number
199.15.234.7 80
82.165.102.141 80
204.188.231.133 19207 PASS ngrBot

NICK n{US|XPa}jdkpmyd
USER jdkpmyd 0 0 :jdkpmyd
JOIN ##cybercenter## ngrBot
PRIVMSG ##cybercenter## :[d=”http://www.cadelcucco.com/downloads/tmp3.exe” s=”172032 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataDcxaxd.exe” – Download retries: 0

* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://www.cadelcucco.com/downloads/tmp3.exe

hosting infos:
http://whois.domaintools.com/204.188.231.133

Categories: Uncategorized