VICTIM: GET /xxxxxxx HTTP/1.0User-Agent: bHost: 203.180.17.238 VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=20 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /?epl=03500022VGsLXARdBQVVFgYMVQQPXQ9VC1JeRl4NCFZaVl5dQwBCVRBdFxdGEgZfDTxKAABWE1EUCgtBQxFbGhpLUVhYBlpaBFFLAERVE1VMEU1KER0RXBYIClNURFJRBR5MRwxUBwFXCgFVCgRRFgwMTDoEXw5XDVIHCBEED0FHV0hNDFUbBVcOAV0VRA5DCxdRCggOElEHRQBdaAMOTRNXSEAMClsSA01NCkdREkQ9DEgRD1wPaw9TXgMCU1QBDAkIBhcVWkQXVl0AQQkOVgRFSA0HQAQJClgCUREFBEZcX1ZrWAEIA1AMHwZSQARXDRFBWBRWBl0JWRATRAQAR1ZQZ0BIFVAJBFdLCA HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: siliconfireware.ru=click%3A0%7Csearch%3A0%7Cexitpop%3A0%7Cblocked%3A0%7Clload%3A0%7Clvisit%3A1255280899; ident=click%3A0%7Csearch%3A0%7Cexitpop%3A0%7Cblocked%3A0%7Ctoken%3Arztytqvrqqtvyqsw%7Clload%3A0%7Clvisit%3A1255280899; Spusr=a0015ac3a94ad211035bd5 ATTACKER: GET /css/724/landing/en.css HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/body_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/td_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/container_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/keywords_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/bullet.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/pop_cat_top.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/searchtext_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/search.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/footer_bg.jpg HTTP/1.0Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=21 VICTIM: POST /w.php?ifc=0 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: ebookfinaltrash.ruContent-Length: 4Connection: Keep-AlivePragma: no-cachea=21 VICTIM: POST /w.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usContent-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: siliconfireware.ruContent-Length: 4Connection: Keep-AliveCache-Control: no-cachea=20 ATTACKER: GET /?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0 HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/siliconfireware.ru/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-Alive ATTACKER: GET /?epl=03480014VGsLXARdBQVVFgYMVQQPXQ9VC1JeRl4NCFZaVl5dQwBCVRBdFxdGEgZfDTxKAABWE1EUCgtBQxFbGhpLUVhYBlpaBFFLAERVE1VMEU1KER0RXBYIClNURFJRBR5MRwxUBwFXCgFUAAVZFgwMTDoEXw5XDVIHCBEED0FHV0hNDFUbBVEMCkNDWxJZFgpXC1tABFUUVAtqVQ4ZE1pITAleCxNVF0xWEVZHFW8NE0wMCV0_XQIKVQAFVFUMBAgKEkEKRUEMXFwXDlsHVkQTUAQVVlxYCVYHE1MEElxSVmddVVgCBlYeWgRHUQZfEBoFFwNUCFsIREVGUgATVl1nTE1BAAhSDUpU HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: searchportal.information.comConnection: Keep-AliveCookie: siliconfireware.ru=search%3A0%7Cexitpop%3A0%7Clload%3A0%7Clvisit%3A1255281318%7Cclick%3A0%7Cblocked%3A0; ident=search%3A0%7Cexitpop%3A0%7Clload%3A0%7Clvisit%3A1255281318%7Cclick%3A0%7Cblocked%3A0%7Ctoken%3Awxzrqxxqqquqwsvy; Spusr=a0015ac6afd4ad212a65d78 ATTACKER: GET /css/724/landing/en.css HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/body_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/td_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/container_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/keywords_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/bullet.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/pop_cat_top.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/searchtext_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/search.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive ATTACKER: GET /images/724/footer_bg.jpg HTTP/1.1Accept: */*Referer: http:/searchportal.information.com/?a_id=8614&domainname=siliconfireware.ru&adultfilter=off/w.php?ifc=0Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: spi.domainsponsor.comConnection: Keep-Alive