91.103.85.100 - - [01/Aug/2012:18:25:29 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 159.226.16.65 - - [03/Aug/2012:12:36:52 +0200] "\x80\x83\x01\x03\x01" 501 - "-" "-" 223.66.136.200 - - [04/Aug/2012:09:12:57 +0200] "l" 501 - "-" "-" 94.240.196.204 - - [04/Aug/2012:13:45:00 +0200] "\x16\x03\x01" 501 - "-" "-" 176.67.161.116 - - [04/Aug/2012:14:53:29 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [04/Aug/2012:23:01:25 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [06/Aug/2012:05:01:35 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 91.227.77.14 - - [06/Aug/2012:10:52:22 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 91.103.85.100 - - [06/Aug/2012:11:10:23 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 176.67.161.116 - - [06/Aug/2012:19:05:03 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 193.224.158.250 - - [07/Aug/2012:02:28:00 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:28:00 +0200] "\x16\x03" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:28:10 +0200] "\x80+\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:29:46 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:29:46 +0200] "\x16\x03" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:29:56 +0200] "\x80+\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:31:34 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:31:34 +0200] "\x16\x03" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:31:44 +0200] "\x80+\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:33:22 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:33:22 +0200] "\x16\x03" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:33:32 +0200] "\x80+\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:35:11 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:35:11 +0200] "\x16\x03" 501 - "-" "-" 193.224.158.250 - - [07/Aug/2012:02:35:21 +0200] "\x80+\x01" 501 - "-" "-" 141.212.113.30 - - [07/Aug/2012:11:16:17 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [07/Aug/2012:11:16:17 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [07/Aug/2012:11:16:29 +0200] "\x80+\x01" 501 - "-" "-" 201.145.8.123 - - [07/Aug/2012:15:28:32 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 23.20.137.131 - - [07/Aug/2012:15:33:57 +0200] "\x16\x03" 501 - "-" "-" 189.27.83.182 - - [07/Aug/2012:16:09:58 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:00:38:52 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:00:38:53 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:00:39:04 +0200] "\x80+\x01" 501 - "-" "-" 23.23.26.28 - - [08/Aug/2012:04:29:10 +0200] "\x16\x03\x01" 501 - "-" "-" 23.22.206.232 - - [08/Aug/2012:08:27:29 +0200] "\x16\x03" 501 - "-" "-" 69.50.192.164 - - [08/Aug/2012:10:32:00 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 184.73.105.114 - - [08/Aug/2012:11:55:21 +0200] "\x16\x03\x01" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:14:10:53 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:14:10:53 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [08/Aug/2012:14:11:05 +0200] "\x80+\x01" 501 - "-" "-" 176.67.161.116 - - [08/Aug/2012:20:48:07 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [09/Aug/2012:03:46:50 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [09/Aug/2012:03:46:50 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [09/Aug/2012:03:47:01 +0200] "\x80+\x01" 501 - "-" "-" 46.41.69.165 - - [09/Aug/2012:10:41:58 +0200] "GET / HTTP/1.0" 200 17874 "-" "-" 141.212.113.30 - - [09/Aug/2012:17:36:28 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [09/Aug/2012:17:36:28 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [09/Aug/2012:17:36:39 +0200] "\x80+\x01" 501 - "-" "-" 69.50.192.164 - - [09/Aug/2012:18:48:25 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [10/Aug/2012:07:16:26 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [10/Aug/2012:07:16:26 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [10/Aug/2012:07:16:37 +0200] "\x80+\x01" 501 - "-" "-" 114.60.222.71 - - [10/Aug/2012:18:31:48 +0200] "OPTIONS / HTTP/1.0" 200 - "-" "-" 141.212.113.30 - - [10/Aug/2012:20:39:00 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [10/Aug/2012:20:39:01 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [10/Aug/2012:20:39:12 +0200] "\x80+\x01" 501 - "-" "-" 176.67.161.116 - - [11/Aug/2012:01:29:56 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [11/Aug/2012:08:35:23 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 199.255.158.200 - - [11/Aug/2012:09:03:41 +0200] "\x16\x03\x01" 501 - "-" "-" 199.255.158.200 - - [11/Aug/2012:09:13:27 +0200] "\x16\x03\x01" 501 - "-" "-" 122.154.101.54 - - [11/Aug/2012:09:26:50 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:10:08:47 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:10:08:47 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:10:08:58 +0200] "\x80+\x01" 501 - "-" "-" 120.33.140.10 - - [11/Aug/2012:20:33:03 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:23:30:54 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:23:30:54 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [11/Aug/2012:23:31:05 +0200] "\x80+\x01" 501 - "-" "-" 141.212.113.30 - - [12/Aug/2012:12:49:16 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [12/Aug/2012:12:49:16 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [12/Aug/2012:12:49:27 +0200] "\x80+\x01" 501 - "-" "-" 184.173.218.170 - - [12/Aug/2012:14:03:10 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 177.36.112.52 - - [12/Aug/2012:16:57:24 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:02:01:18 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:02:01:18 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:02:01:30 +0200] "\x80+\x01" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:15:29:40 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:15:29:40 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [13/Aug/2012:15:29:52 +0200] "\x80+\x01" 501 - "-" "-" 176.67.161.116 - - [13/Aug/2012:18:38:21 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [14/Aug/2012:02:17:35 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [14/Aug/2012:06:54:30 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [14/Aug/2012:06:54:30 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [14/Aug/2012:06:54:41 +0200] "\x80+\x01" 501 - "-" "-" 141.212.113.30 - - [14/Aug/2012:22:31:35 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [14/Aug/2012:22:31:35 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [14/Aug/2012:22:31:46 +0200] "\x80+\x01" 501 - "-" "-" 62.141.38.144 - - [15/Aug/2012:00:28:22 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.41.58 - - [15/Aug/2012:04:33:06 +0200] "\x16\x03\x01" 501 - "-" "-" 184.173.218.170 - - [15/Aug/2012:07:43:24 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [15/Aug/2012:11:49:13 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [15/Aug/2012:11:49:14 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [15/Aug/2012:11:49:25 +0200] "\x80+\x01" 501 - "-" "-" 69.50.192.164 - - [15/Aug/2012:15:19:14 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [15/Aug/2012:19:13:32 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.67.161.116 - - [15/Aug/2012:20:31:36 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.154.42.194 - - [16/Aug/2012:00:41:16 +0200] "\x80\x82\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [16/Aug/2012:00:41:22 +0200] "GET / HTTP/1.0" 200 40929 "-" "-" 184.154.42.194 - - [16/Aug/2012:00:41:47 +0200] "-" 408 - "-" "-" 141.212.113.30 - - [16/Aug/2012:00:52:09 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [16/Aug/2012:00:52:09 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [16/Aug/2012:00:52:20 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [16/Aug/2012:12:54:45 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [16/Aug/2012:13:58:30 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [16/Aug/2012:13:58:30 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [16/Aug/2012:13:58:41 +0200] "\x80+\x01" 501 - "-" "-" 141.212.113.30 - - [17/Aug/2012:03:21:56 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [17/Aug/2012:03:21:56 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [17/Aug/2012:03:22:08 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [17/Aug/2012:06:04:41 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [17/Aug/2012:16:54:15 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [17/Aug/2012:16:54:16 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [17/Aug/2012:16:54:27 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [17/Aug/2012:22:22:22 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 122.154.101.54 - - [18/Aug/2012:01:12:06 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [18/Aug/2012:06:18:06 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [18/Aug/2012:06:18:06 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [18/Aug/2012:06:18:18 +0200] "\x80+\x01" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:00:48 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:00:49 +0200] "\x16\x03" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:01:00 +0200] "\x80+\x01" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:02:00 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:02:01 +0200] "\x16\x03" 501 - "-" "-" 220.194.47.84 - - [18/Aug/2012:07:02:12 +0200] "\x80+\x01" 501 - "-" "-" 151.25.0.6 - - [18/Aug/2012:10:03:09 +0200] "\x80L\x01\x03" 501 - "-" "-" 93.123.101.78 - - [18/Aug/2012:13:35:28 +0200] "\x80\x9e\x01\x03\x01" 501 - "-" "-" 205.237.197.106 - - [18/Aug/2012:14:26:40 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [18/Aug/2012:14:38:01 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.67.161.116 - - [18/Aug/2012:15:46:15 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.113.30 - - [19/Aug/2012:00:20:59 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.113.30 - - [19/Aug/2012:00:20:59 +0200] "\x16\x03" 501 - "-" "-" 141.212.113.30 - - [19/Aug/2012:00:21:11 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [19/Aug/2012:06:46:16 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [19/Aug/2012:23:53:24 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 205.237.193.107 - - [20/Aug/2012:02:01:05 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [20/Aug/2012:17:07:07 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [21/Aug/2012:01:00:26 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 184.173.218.170 - - [21/Aug/2012:02:24:57 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [21/Aug/2012:10:54:25 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [21/Aug/2012:22:22:14 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [22/Aug/2012:04:39:47 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 46.165.201.147 - - [22/Aug/2012:08:34:51 +0200] "HEAD http://internet.yandex.ru HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9) Gecko/2008052906 Firefox/3.0" 95.211.124.232 - - [22/Aug/2012:10:04:46 +0200] "\x05\x02" 501 - "-" "-" 77.68.41.217 - - [22/Aug/2012:22:26:35 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [23/Aug/2012:01:44:57 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 178.63.152.93 - - [23/Aug/2012:09:59:52 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 178.63.152.93 - - [23/Aug/2012:09:59:52 +0200] "\x16\x03" 501 - "-" "-" 178.63.152.93 - - [23/Aug/2012:10:00:02 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [23/Aug/2012:16:18:10 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.40.97 - - [24/Aug/2012:03:41:44 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [24/Aug/2012:10:05:52 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [25/Aug/2012:03:54:04 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 95.211.178.104 - - [25/Aug/2012:09:37:35 +0200] "HEAD http://internet.yandex.ru HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux i686; rv:7.0.1) Gecko/20100101 Firefox/7.0.1" 77.68.41.217 - - [25/Aug/2012:21:42:23 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [26/Aug/2012:16:40:20 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [27/Aug/2012:10:12:14 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 205.237.193.107 - - [27/Aug/2012:10:14:10 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [27/Aug/2012:16:50:07 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [28/Aug/2012:10:44:11 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [29/Aug/2012:04:42:56 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [29/Aug/2012:22:43:51 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 207.99.10.88 - - [29/Aug/2012:22:58:44 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [30/Aug/2012:17:05:43 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 182.147.134.194 - - [30/Aug/2012:19:06:46 +0200] "00000001-00000001<_this xsi:type=ManagedObjectReference type=ServiceInstance>ServiceInstance" 400 368 "-" "-" 77.68.41.217 - - [31/Aug/2012:11:20:48 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [31/Aug/2012:21:26:22 +0200] "\x80w\x01\x03\x01" 501 - "-" "-"