VICTIM: GET /xxxxxxxxx HTTP/1.0User-Agent: bHost: 4.131.92.239 VICTIM: POST /wres.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=22 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/wres.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/wres.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0A HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/wres.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /skins/scion_taguchi/images/bullet.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /skins/scion_taguchi/images/Berlin_image.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /skins/scion_taguchi/images/bullet_right.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /skins/scion/images/scion-logo.png HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /?epl=04080077UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQUERlxfVmtYAQgFUgofBlJABFcNEUFYFFYGXQlZEBNZDhVqV1RXV1oAUQlTHk0WDgVTBFdQCFdUAVcSB2gKUQpZVwQBHkpVXwFqRwddXVgABVkFVlINU1QVAFATWxdTXg0VUEcFV1JXSkJGB0sXFVtEXlkEAB1WAgNHUAlaAlxZDwBYUAVLXV0MVlsMXlAXVkMAQgdNShBAQw5EE1kHUEVcDlNTHkhcUBZQCQ5XWAEVWA5TAw9nDQlGEwlUBUVWWBQPQUdBBWFiQ1BSBF1aEVpCBG8OAlYCE1IGUVtSDRNWFBVaQV1LQG4KRUALV1c6WlBcAVJXDlRRAlYG HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070088UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAFTAkBWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: ident=click:0%7csearch:0%7cexitpop:0%7ctoken:qztxpuqruxspuyyw%7clload:0%7clvisit:1245302226; siliconfireware.ru=click:0%7csearch:0%7cexitpop:0%7clload:0%7clvisit:1245302226; Spusr=ac150010198e4a39cdd24437 VICTIM: POST /wres.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=28 VICTIM: POST /wres.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=28 VICTIM: POST /wres.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usContent-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AliveCache-Control: no-cachea=23 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/wres.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/wres.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /index.mas?epl=02070047UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAVUB0BWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0A HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/wres.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /?epl=04060081UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQUERlxfVmtYAQgFRFtYEVZTDkIbXkoAAVoOWhURDVpDPgNZWltTUVVYBBIWSwRUAQBUA1JRDlBVFQBrD1NeDQFQVRNHWVZQbhZQUQYFAVUFDVUFVFUKQwdXFFgSUQpZQwQTCFpeXhtGF1BHTEhRFQxdB1NHUFxVQFcOWQdeDVtWDAQIRlFUXVIKW1ILSlwSUkYEHhAWHhUJQxRaAlIRCFgHBxNFUFlHVFhZWwNcHwlcVwBcPQtXEBQOUwZAVAxAWRUTTAhtaxJUA1NRAUxQE1ZrDVEMBE0EAVZcUQgRAkBDDhVQRkxnW0ERXFsMZ1ABDgVRBFRSD1RRBA HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=02070047UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpERgRDTBNQFVlaB1dDBAcFEQ8OQWpaVFtSDlBQXwkfEUAJUAJWVgtVVAVUB0BWPFxTXFkDBAweVVUQWUAEUVURVkZcXwQFFxIUVhIaFl8TCl4HAhAGXAgSVQpYVQtWVwReUVxDCw9RBgldB10UUhRURQRPR0AAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: ident=click:0%7csearch:0%7cexitpop:0%7ctoken:szyprvrxxwppupry%7clload:0%7clvisit:1245302653; siliconfireware.ru=click:0%7csearch:0%7cexitpop:0%7clload:0%7clvisit:1245302653; Spusr=ac15000c2e624a39cf7d8280