216.93.249.98 - - [01/Apr/2012:01:12:59 +0200] "HEAD / HTTP/1.0" 200 0 "-" "-" 94.24.41.58 - - [01/Apr/2012:16:01:23 +0200] "\x16\x03\x01" 501 - "-" "-" 46.28.64.94 - - [02/Apr/2012:19:45:24 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 46.28.64.94 - - [02/Apr/2012:21:44:44 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 94.24.41.211 - - [03/Apr/2012:06:53:05 +0200] "\x16\x03\x01" 501 - "-" "-" 194.72.238.62 - - [04/Apr/2012:09:49:08 +0200] "-" 408 - "-" "-" 23.20.39.201 - - [04/Apr/2012:16:29:13 +0200] "\x16\x03" 501 - "-" "-" 94.24.41.211 - - [04/Apr/2012:23:56:14 +0200] "\x16\x03\x01" 501 - "-" "-" 204.236.248.172 - - [05/Apr/2012:03:11:55 +0200] "\x16\x03\x01" 501 - "-" "-" 107.22.67.185 - - [05/Apr/2012:11:04:25 +0200] "\x16\x03" 501 - "-" "-" 107.20.52.168 - - [05/Apr/2012:14:57:04 +0200] "\x16\x03\x01" 501 - "-" "-" 194.72.238.62 - - [06/Apr/2012:12:47:41 +0200] "\x16\x03" 501 - "-" "-" 64.89.202.25 - - [06/Apr/2012:18:05:55 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 182.71.143.3 - - [06/Apr/2012:23:06:55 +0200] "\x16\x03\x01" 501 - "-" "-" 182.71.143.3 - - [06/Apr/2012:23:06:56 +0200] "\x16\x03" 501 - "-" "-" 182.71.143.3 - - [07/Apr/2012:00:55:08 +0200] "\x16\x03\x01" 501 - "-" "-" 182.71.143.3 - - [07/Apr/2012:00:55:08 +0200] "\x16\x03" 501 - "-" "-" 94.24.40.207 - - [07/Apr/2012:09:43:18 +0200] "\x16\x03\x01" 501 - "-" "-" 220.165.5.4 - - [08/Apr/2012:05:21:50 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 220.165.5.4 - - [08/Apr/2012:05:21:51 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 93.182.36.130 - - [08/Apr/2012:08:27:41 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 79.118.84.74 - - [08/Apr/2012:09:09:51 +0200] "\x16\x03\x01" 501 - "-" "-" 193.105.249.105 - - [09/Apr/2012:10:09:34 +0200] "\x16\x03\x01" 501 - "-" "-" 193.105.249.105 - - [09/Apr/2012:10:09:34 +0200] "\x16\x03\x01" 501 - "-" "-" 220.165.5.4 - - [10/Apr/2012:21:02:53 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 220.165.5.4 - - [10/Apr/2012:21:02:53 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 220.165.5.4 - - [10/Apr/2012:21:02:54 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 194.72.238.62 - - [11/Apr/2012:02:41:56 +0200] "\x16\x03\x01" 501 - "-" "-" 194.72.238.62 - - [14/Apr/2012:10:35:38 +0200] "\x16\x03" 501 - "-" "-" 211.94.161.84 - - [14/Apr/2012:15:18:05 +0200] "\x80\x8c\x01\x03\x01" 501 - "-" "-" 91.205.189.27 - - [15/Apr/2012:10:08:57 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 194.72.238.62 - - [16/Apr/2012:10:45:46 +0200] "\x16\x03\x01" 501 - "-" "-" 85.25.95.51 - - [16/Apr/2012:19:45:20 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 118.218.219.206 - - [17/Apr/2012:04:32:54 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 118.218.219.206 - - [17/Apr/2012:04:32:54 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 141.212.109.58 - - [17/Apr/2012:15:07:44 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 91.121.23.114 - - [18/Apr/2012:12:28:48 +0200] "\x80v\x01\x03\x01" 501 - "-" "-" 91.121.23.114 - - [18/Apr/2012:12:28:48 +0200] "\x16\x03" 501 - "-" "-" 91.121.23.114 - - [18/Apr/2012:12:28:58 +0200] "\x80+\x01" 501 - "-" "-" 46.254.20.21 - - [18/Apr/2012:20:05:30 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 91.121.23.114 - - [18/Apr/2012:23:41:24 +0200] "\x80v\x01\x03\x01" 501 - "-" "-" 91.121.23.114 - - [18/Apr/2012:23:41:24 +0200] "\x16\x03" 501 - "-" "-" 91.121.23.114 - - [18/Apr/2012:23:41:34 +0200] "\x80+\x01" 501 - "-" "-" 91.121.23.114 - - [19/Apr/2012:11:35:30 +0200] "\x80v\x01\x03\x01" 501 - "-" "-" 91.121.23.114 - - [19/Apr/2012:11:35:30 +0200] "\x16\x03" 501 - "-" "-" 91.121.23.114 - - [19/Apr/2012:11:35:40 +0200] "\x80+\x01" 501 - "-" "-" 46.254.20.21 - - [20/Apr/2012:05:13:53 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 202.56.221.30 - - [21/Apr/2012:06:37:03 +0200] "\x80\x8c\x01\x03\x01" 501 - "-" "-" 195.54.60.60 - - [21/Apr/2012:22:55:03 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 195.54.60.60 - - [21/Apr/2012:22:55:03 +0200] "\x16\x03" 501 - "-" "-" 195.54.60.60 - - [21/Apr/2012:22:55:13 +0200] "\x80+\x01" 501 - "-" "-" 195.54.60.60 - - [22/Apr/2012:02:20:51 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 195.54.60.60 - - [22/Apr/2012:02:20:51 +0200] "\x16\x03" 501 - "-" "-" 195.54.60.60 - - [22/Apr/2012:02:21:01 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [22/Apr/2012:23:59:51 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [22/Apr/2012:23:59:52 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:00:02 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:00:27 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:00:28 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:00:39 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:03 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:04 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:15 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:40 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:41 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:01:52 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:02:17 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:02:17 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:02:28 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:02:53 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:02:54 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:03:05 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:03:30 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:03:30 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:03:31 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:06 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:07 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:18 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:42 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:43 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:04:44 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:05:19 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:05:20 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:05:31 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:05:56 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:05:57 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:06:08 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:06:33 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:06:33 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:06:44 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:09 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:10 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:21 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:46 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:47 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:07:59 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:08:23 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:08:24 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:08:35 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:08:59 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:09:00 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:09:11 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:09:36 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:09:37 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:09:48 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:10:13 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:10:14 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:10:25 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:10:50 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:10:51 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:11:02 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:11:27 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:11:28 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:11:39 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:04 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:04 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:15 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:40 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:41 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:12:52 +0200] "\x80+\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:13:17 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:13:18 +0200] "\x16\x03" 501 - "-" "-" 221.174.50.139 - - [23/Apr/2012:00:13:29 +0200] "\x80+\x01" 501 - "-" "-" 107.21.179.175 - - [23/Apr/2012:18:36:59 +0200] "\x16\x03\x01" 501 - "-" "-" 109.72.212.212 - - [26/Apr/2012:20:23:55 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.105.66.27 - - [29/Apr/2012:04:47:58 +0200] "\x16\x03\x01" 501 - "-" "-" 77.109.111.126 - - [30/Apr/2012:16:38:44 +0200] "\x80g\x01\x03\x01" 501 - "-" "-"