77.68.41.217 - - [01/Oct/2012:03:17:13 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.154.42.194 - - [01/Oct/2012:06:00:56 +0200] "\x80\x82\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [01/Oct/2012:06:01:02 +0200] "GET / HTTP/1.0" 200 40929 "-" "-" 184.154.42.194 - - [01/Oct/2012:06:01:28 +0200] "-" 408 - "-" "-" 77.68.41.217 - - [01/Oct/2012:21:10:57 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.173.218.170 - - [02/Oct/2012:12:13:58 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [02/Oct/2012:15:00:38 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.67.161.116 - - [02/Oct/2012:21:43:15 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 213.128.31.1 - - [03/Oct/2012:00:02:01 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 213.128.31.1 - - [03/Oct/2012:00:02:02 +0200] "\x16\x03" 501 - "-" "-" 213.128.31.1 - - [03/Oct/2012:00:02:14 +0200] "\x80+\x01" 501 - "-" "-" 213.128.31.1 - - [03/Oct/2012:00:02:58 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 213.128.31.1 - - [03/Oct/2012:00:03:00 +0200] "\x16\x03" 501 - "-" "-" 213.128.31.1 - - [03/Oct/2012:00:03:11 +0200] "\x80+\x01" 501 - "-" "-" 141.212.121.10 - - [03/Oct/2012:03:49:15 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [03/Oct/2012:08:54:08 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 110.173.0.11 - - [03/Oct/2012:15:26:06 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [04/Oct/2012:02:44:44 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [04/Oct/2012:20:41:44 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 216.165.179.30 - - [04/Oct/2012:23:43:16 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:43:16 +0200] "\x16\x03" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:43:26 +0200] "\x80+\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:44:39 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:44:39 +0200] "\x16\x03" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:44:49 +0200] "\x80+\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:46:03 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:46:03 +0200] "\x16\x03" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:46:13 +0200] "\x80+\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:47:29 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:47:29 +0200] "\x16\x03" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:47:39 +0200] "\x80+\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:48:56 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:48:56 +0200] "\x16\x03" 501 - "-" "-" 216.165.179.30 - - [04/Oct/2012:23:49:06 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [05/Oct/2012:14:42:08 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.67.161.116 - - [05/Oct/2012:15:21:40 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [05/Oct/2012:19:18:50 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [06/Oct/2012:08:36:43 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [07/Oct/2012:02:38:45 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 207.234.145.57 - - [07/Oct/2012:04:11:31 +0200] "\x80|\x01\x03\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:11:31 +0200] "\x16\x03" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:11:42 +0200] "\x80.\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:14:11 +0200] "\x80|\x01\x03\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:14:11 +0200] "\x16\x03" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:14:22 +0200] "\x80.\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:16:51 +0200] "\x80|\x01\x03\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:16:51 +0200] "\x16\x03" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:17:01 +0200] "\x80.\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:19:38 +0200] "\x80|\x01\x03\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:19:38 +0200] "\x16\x03" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:19:49 +0200] "\x80.\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:22:17 +0200] "\x80|\x01\x03\x01" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:22:18 +0200] "\x16\x03" 501 - "-" "-" 207.234.145.57 - - [07/Oct/2012:04:22:28 +0200] "\x80.\x01" 501 - "-" "-" 77.68.41.217 - - [07/Oct/2012:20:35:34 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 118.88.12.158 - - [08/Oct/2012:10:56:21 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 118.88.12.158 - - [08/Oct/2012:10:56:22 +0200] "\x16\x03" 501 - "-" "-" 118.88.12.158 - - [08/Oct/2012:10:56:32 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [08/Oct/2012:14:33:32 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 188.120.233.152 - - [08/Oct/2012:16:07:48 +0200] "\x16\x03\x01" 501 - "-" "-" 65.110.96.61 - - [08/Oct/2012:17:29:52 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [09/Oct/2012:08:30:23 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.154.42.194 - - [09/Oct/2012:16:08:01 +0200] "\x80\x82\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [09/Oct/2012:16:08:07 +0200] "GET / HTTP/1.0" 200 40929 "-" "-" 184.154.42.194 - - [09/Oct/2012:16:08:33 +0200] "-" 408 - "-" "-" 184.173.218.170 - - [10/Oct/2012:01:33:06 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [10/Oct/2012:02:25:26 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 23.23.70.139 - - [10/Oct/2012:02:28:49 +0200] "\x16\x03" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:16:17 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:16:18 +0200] "\x16\x03" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:16:30 +0200] "\x80+\x01" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:17:24 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:17:25 +0200] "\x16\x03" 501 - "-" "-" 213.128.31.1 - - [10/Oct/2012:11:17:37 +0200] "\x80+\x01" 501 - "-" "-" 23.23.65.22 - - [10/Oct/2012:15:51:26 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [10/Oct/2012:20:20:58 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 54.242.92.143 - - [11/Oct/2012:05:42:11 +0200] "\x16\x03" 501 - "-" "-" 184.72.185.25 - - [11/Oct/2012:07:33:20 +0200] "\x16\x03\x01" 501 - "-" "-" 94.24.41.133 - - [11/Oct/2012:10:03:15 +0200] "\x16\x03\x01" 501 - "-" "-" 195.157.13.221 - - [11/Oct/2012:13:01:22 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [11/Oct/2012:14:10:19 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 216.214.181.195 - - [12/Oct/2012:00:18:14 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [12/Oct/2012:07:53:24 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.40.126 - - [12/Oct/2012:13:39:25 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [13/Oct/2012:01:51:03 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [13/Oct/2012:19:40:09 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.20.82.93 - - [14/Oct/2012:10:49:20 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 141.212.121.10 - - [14/Oct/2012:11:42:18 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 69.36.162.250 - - [14/Oct/2012:12:41:26 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [14/Oct/2012:13:09:52 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [15/Oct/2012:07:05:19 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [16/Oct/2012:00:58:51 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [16/Oct/2012:18:59:42 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.154.42.194 - - [17/Oct/2012:07:36:56 +0200] "\x80\x82\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [17/Oct/2012:07:37:02 +0200] "GET / HTTP/1.0" 200 40929 "-" "-" 184.154.42.194 - - [17/Oct/2012:07:37:28 +0200] "-" 408 - "-" "-" 77.68.41.217 - - [17/Oct/2012:12:56:12 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [18/Oct/2012:05:32:47 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [18/Oct/2012:19:47:16 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [18/Oct/2012:23:31:37 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 122.154.101.54 - - [19/Oct/2012:16:45:33 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [19/Oct/2012:17:33:21 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [20/Oct/2012:11:30:13 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 216.214.181.195 - - [20/Oct/2012:15:09:57 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [21/Oct/2012:05:31:00 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [21/Oct/2012:22:42:30 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 1.179.132.218 - - [21/Oct/2012:23:25:25 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 1.179.132.218 - - [21/Oct/2012:23:25:26 +0200] "\x16\x03" 501 - "-" "-" 1.179.132.218 - - [21/Oct/2012:23:25:37 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [21/Oct/2012:23:33:40 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 1.179.132.218 - - [22/Oct/2012:02:46:44 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 1.179.132.218 - - [22/Oct/2012:02:46:44 +0200] "\x16\x03" 501 - "-" "-" 1.179.132.218 - - [22/Oct/2012:02:46:55 +0200] "\x80+\x01" 501 - "-" "-" 1.179.132.218 - - [22/Oct/2012:06:30:49 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 1.179.132.218 - - [22/Oct/2012:06:30:50 +0200] "\x16\x03" 501 - "-" "-" 1.179.132.218 - - [22/Oct/2012:06:31:01 +0200] "\x80+\x01" 501 - "-" "-" 198.101.254.108 - - [22/Oct/2012:12:20:58 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 120.39.183.250 - - [22/Oct/2012:17:30:54 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 120.39.183.250 - - [22/Oct/2012:17:30:55 +0200] "\x16\x03" 501 - "-" "-" 120.39.183.250 - - [22/Oct/2012:17:31:05 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [22/Oct/2012:17:31:36 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 120.39.183.250 - - [22/Oct/2012:20:19:51 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 120.39.183.250 - - [22/Oct/2012:20:19:52 +0200] "\x16\x03" 501 - "-" "-" 120.39.183.250 - - [22/Oct/2012:20:20:02 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [23/Oct/2012:11:33:23 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.41.184 - - [23/Oct/2012:17:35:43 +0200] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [24/Oct/2012:05:06:44 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [24/Oct/2012:11:29:05 +0200] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [24/Oct/2012:19:54:45 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [25/Oct/2012:13:54:36 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 183.82.99.121 - - [25/Oct/2012:20:11:41 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 183.82.99.121 - - [25/Oct/2012:20:11:41 +0200] "\x16\x03" 501 - "-" "-" 183.82.99.121 - - [25/Oct/2012:20:11:51 +0200] "\x80+\x01" 501 - "-" "-" 183.82.99.121 - - [26/Oct/2012:01:15:28 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 183.82.99.121 - - [26/Oct/2012:01:15:28 +0200] "\x16\x03" 501 - "-" "-" 183.82.99.121 - - [26/Oct/2012:01:15:39 +0200] "\x80+\x01" 501 - "-" "-" 209.17.184.84 - - [26/Oct/2012:03:41:04 +0200] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [26/Oct/2012:06:30:43 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [27/Oct/2012:01:13:21 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.53.114.36 - - [27/Oct/2012:04:10:17 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 121.254.156.164 - - [27/Oct/2012:16:18:37 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 121.254.156.164 - - [27/Oct/2012:16:18:38 +0200] "\x16\x03" 501 - "-" "-" 121.254.156.164 - - [27/Oct/2012:16:18:49 +0200] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [27/Oct/2012:19:14:41 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 121.254.156.164 - - [27/Oct/2012:19:20:17 +0200] "\x80d\x01\x03\x01" 501 - "-" "-" 121.254.156.164 - - [27/Oct/2012:19:20:19 +0200] "\x16\x03" 501 - "-" "-" 121.254.156.164 - - [26/Oct/2012:06:30:39 +0200] "\x80+\x01" 501 - "-" "-" 176.53.114.36 - - [28/Oct/2012:08:14:51 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [28/Oct/2012:12:18:32 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 173.204.237.42 - - [29/Oct/2012:04:45:02 +0100] "\x16\x03\x01" 501 - "-" "-" 173.1.8.194 - - [29/Oct/2012:04:52:04 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [29/Oct/2012:06:19:31 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [29/Oct/2012:20:04:18 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 176.53.114.36 - - [29/Oct/2012:23:30:38 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [30/Oct/2012:00:15:00 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:47 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:47 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:49 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:50 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:50 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:52 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:53 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:54 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:54 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:54 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:55 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:56 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:57 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:57 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:57 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:57 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:58 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:58 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:59 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [30/Oct/2012:09:00:59 +0100] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [30/Oct/2012:18:15:12 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.53.114.36 - - [31/Oct/2012:04:22:53 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [31/Oct/2012:12:16:27 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-"