VICTIM: GET /xxxxxxxxx HTTP/1.0User-Agent: bHost: 4.154.37.242 VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=21 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRY HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /skins/scion_taguchi/images/Berlin_image.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRYUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /skins/scion/images/scion-logo.png HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRYUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /skins/scion_taguchi/images/bullet.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRYUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /?epl=04020045UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQdQRAgGW2pRXAkAVQcSAVlNAFRbE0lfEV0CD1wPR0BZDEFoAw1aVlNdUAxUE0ARBQhXBwBWBFBRCVxAUj5dAgpbAwZVR0dUVlxrQgBQUF8JAV0FA1cHUloLQwdXFFgSUQpZQwQTCFpeXhtGS0VcEgdQA1ARUlRSRVwKC1IIWghWDlAKEghZXFtXWlcMR1EVWUsAHUYUFhIMSBAIVwRGW1gFUxERCVRGXQVYXgRREg5XWgRfawlfFxEFVFYVAlsTWRdHTlw0ZhNdXlJUBkFdFF1mCVJaBkUDBF1YA11HVRNDDEFSEhVqWkhMXV4Lal0GBQhVBwJQB1NUCg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRYUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: ident=click:0%7csearch:0%7cexitpop:0%7ctoken:tvzxvxxstwyppuy%7clload:0%7clvisit:1244742219; siliconfireware.ru=click:0%7csearch:0%7cexitpop:0%7clload:0%7clvisit:1244742219; Spusr=ac15000c57a04a31424b3d54 ATTACKER: GET /skins/scion_taguchi/images/bullet_right.gif HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990098UlsNZ0sAVVETVRBeUBESQ1sbSUQKWV4CDltTUUpRRgRHUUxKTEpEGhFYElxRAwUWUlBWEQ1aQz4DWVpbU1FVWAQSFksEVAEAVQdWUQpUXxUAaw9TXg0BUFUTVFxNWEUDXFgWXUtYXFIHHxVNSA0WDAhSBRJQUQdHBVpYWVFaXwRYUV9LUAlaVw5eBApKABFSE1FIRRYUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=24 VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=24 VICTIM: POST /w.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usContent-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AliveCache-Control: no-cachea=28 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /index.mas?epl=01990093VFAXVE0DWlgVVRBeVwMAHBYaFl8TCl4HAhAGXAgSVgpaaxBdXwBBURMNChdMFVwcTkcPWwpWWA8HXEddT1VDABtGFxdOS0NcEQ8LBVtAVVdREgJYDlReDw9UWF0FR1gJXFcNVl8MQVEWURAGFhcTFQ9bEmgBWVgCClBRBQkSRRYIBVAMDVIHBlcFUUVZOg9XXAxQBlc HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /?epl=04020016R1UMXGYWVlEFDVNaDV1QBlEMXg9FVFMUDUFTUVRAVBcIWwReFhIdRAlAXQpeBkMABQRAUwxYVggPW1RVXQlCDFldAVdXA1pGBEcDEV1LFEZHUwlYPEdSBwRHUEoFXEURRQ5NF0oMX10CXwwFURcDRABGAxkRQBgWT0VdSAddVwYQBwYIHxVcRBReBgZKWAlVBxICUhBcUA8_XFEFCQQAQ0VcA0tcWF9bAFREAFkRA1QORh8KEVBQCA5bRh5UW1IEWWsKV0wXDgVRFgEMTQsSQRgJM2RFW1gVPldZV1tfVAEIBURMSlgCBlUEVVcKU1MAR1EAUQZWQwgXUGpUWVpWEFRTBwVcCxVVPlkGXgBTVwdHVRNDDEFSEhVqWkhMXV4Lal0GBQhVBwJQB1NUDg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/index.mas?epl=01990093VFAXVE0DWlgVVRBeVwMAHBYaFl8TCl4HAhAGXAgSVgpaaxBdXwBBURMNChdMFVwcTkcPWwpWWA8HXEddT1VDABtGFxdOS0NcEQ8LBVtAVVdREgJYDlReDw9UWF0FR1gJXFcNVl8MQVEWURAGFhcTFQ9bEmgBWVgCClBRBQkSRRYIBVAMDVIHBlcFUUVZOg9XXAxQBlcAccept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: ident=click:0%7csearch:0%7cexitpop:0%7ctoken:qrzrttttpssqxutw%7clload:0%7clvisit:1244742653; siliconfireware.ru=click:0%7csearch:0%7cexitpop:0%7clload:0%7clvisit:1244742653; Spusr=ac15000c22124a3143fd7eb7