61.31.99.67(irc botnet hosted in Taiwan Taipei Taiwan Fixed Network Co. Ltd)

Remote Host Port Number
199.15.234.7 80
63.223.121.212 80
85.214.46.98 80
61.31.99.67 1863
61.31.99.67 4042

NICK new[USA|XP|COMPUTERNAME]ncsrmcq
USER xd “” “lol” :xd
JOIN #newbiz#
PONG 422

* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://www.4freeimagehost.com/uploads/a8dfab5dd1c0.jpg
o http://85.214.46.98/test/new.exe
o http://85.214.46.98/test/biz.exe

hosting infos:
http://whois.domaintools.com/61.31.99.67

Categories: Uncategorized