46.21.175.46 - - [01/Nov/2012:01:09:33 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [01/Nov/2012:06:17:46 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 202.55.178.61 - - [01/Nov/2012:17:21:56 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 95.211.178.102 - - [01/Nov/2012:21:32:44 +0100] "\x05\x02" 501 - "-" "-" 141.212.121.10 - - [01/Nov/2012:22:27:24 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [02/Nov/2012:00:20:24 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [02/Nov/2012:18:25:06 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 46.166.166.28 - - [03/Nov/2012:06:15:36 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [03/Nov/2012:12:27:37 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [03/Nov/2012:20:21:59 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [03/Nov/2012:23:38:45 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [04/Nov/2012:06:17:30 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 184.82.116.148 - - [04/Nov/2012:16:44:19 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [04/Nov/2012:22:46:48 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.41.133 - - [04/Nov/2012:23:47:26 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [05/Nov/2012:10:35:23 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [05/Nov/2012:11:34:34 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:32 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:32 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:32 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:32 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:33 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:34 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:34 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:34 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:34 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:34 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:37 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:38 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:38 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:38 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:38 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:39 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:40 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:41 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:41 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:41 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [05/Nov/2012:23:46:41 +0100] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [06/Nov/2012:11:05:55 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 95.211.178.103 - - [06/Nov/2012:22:32:19 +0100] "\x05\x02" 501 - "-" "-" 77.68.41.217 - - [07/Nov/2012:17:56:20 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 23.20.162.65 - - [08/Nov/2012:07:11:18 +0100] "\x16\x03" 501 - "-" "-" 184.73.2.149 - - [08/Nov/2012:09:44:30 +0100] "\x16\x03" 501 - "-" "-" 178.255.87.241 - - [08/Nov/2012:13:54:19 +0100] "\x16\x03\x01" 501 - "-" "-" 178.255.87.241 - - [08/Nov/2012:13:54:19 +0100] "\x80\xb8\x01\x03\x01" 501 - "-" "-" 141.212.121.10 - - [08/Nov/2012:17:39:05 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [08/Nov/2012:20:20:08 +0100] "\x80\x82\x01\x03\x01" 501 - "-" "-" 184.154.42.194 - - [08/Nov/2012:20:20:15 +0100] "GET / HTTP/1.0" 200 40929 "-" "-" 184.154.42.194 - - [08/Nov/2012:20:20:40 +0100] "-" 408 - "-" "-" 46.163.66.167 - - [08/Nov/2012:21:36:16 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 50.19.50.179 - - [09/Nov/2012:05:52:51 +0100] "\x16\x03" 501 - "-" "-" 46.163.66.167 - - [09/Nov/2012:06:16:46 +0100] "PUT /webdav/func.php HTTP/1.1" 405 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 107.21.154.47 - - [09/Nov/2012:17:23:47 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [10/Nov/2012:00:33:30 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 95.211.178.103 - - [10/Nov/2012:13:59:23 +0100] "\x04\x01" 501 - "-" "-" 95.211.178.103 - - [10/Nov/2012:13:59:28 +0100] "\x05\x01" 501 - "-" "-" 95.211.178.103 - - [10/Nov/2012:13:59:28 +0100] "CONNECT 81.19.66.234:25 HTTP/1.0" 404 263 "-" "-" 141.212.121.10 - - [10/Nov/2012:18:48:05 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [11/Nov/2012:23:08:50 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [11/Nov/2012:23:08:51 +0100] "\x16\x03" 501 - "-" "-" 203.122.18.84 - - [11/Nov/2012:23:09:01 +0100] "\x80+\x01" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:06:18:34 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:06:18:35 +0100] "\x16\x03" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:06:18:45 +0100] "\x80+\x01" 501 - "-" "-" 176.32.82.139 - - [12/Nov/2012:18:13:08 +0100] "\x80\x8f\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:20:09:23 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:20:09:24 +0100] "\x16\x03" 501 - "-" "-" 203.122.18.84 - - [12/Nov/2012:20:09:35 +0100] "\x80+\x01" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:04:17:21 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:04:17:21 +0100] "\x16\x03" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:04:17:32 +0100] "\x80+\x01" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:14:25:22 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:14:25:23 +0100] "\x16\x03" 501 - "-" "-" 203.122.18.84 - - [13/Nov/2012:14:25:34 +0100] "\x80+\x01" 501 - "-" "-" 141.212.121.10 - - [14/Nov/2012:01:36:40 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 219.117.218.151 - - [14/Nov/2012:05:58:39 +0100] "\x16\x03" 501 - "-" "-" 31.186.97.13 - - [14/Nov/2012:06:27:40 +0100] "\x16\x03\x01" 501 - "-" "-" 69.36.162.250 - - [14/Nov/2012:17:21:12 +0100] "\x16\x03\x01" 501 - "-" "-" 66.199.146.111 - - [14/Nov/2012:21:10:32 +0100] "\x80d\x01\x03\x01" 501 - "-" "-" 95.211.178.103 - - [15/Nov/2012:16:35:21 +0100] "\x04\x01" 501 - "-" "-" 95.211.178.103 - - [15/Nov/2012:16:35:26 +0100] "CONNECT 81.19.92.36:25 HTTP/1.0" 404 262 "-" "-" 95.211.178.103 - - [15/Nov/2012:16:35:26 +0100] "\x05\x01" 501 - "-" "-" 77.68.41.217 - - [15/Nov/2012:23:31:47 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [16/Nov/2012:05:39:18 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [16/Nov/2012:17:35:41 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 91.103.85.100 - - [16/Nov/2012:21:40:45 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 77.223.154.107 - - [17/Nov/2012:04:08:02 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [17/Nov/2012:11:34:59 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:09 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:09 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:09 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:09 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:10 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:11 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:11 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:11 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:12 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:12 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:12 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:12 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:12 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:13 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:14 +0100] "\x16\x03" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:15 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:16 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:16 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:16 +0100] "\x80+\x01" 501 - "-" "-" 66.180.160.20 - - [17/Nov/2012:22:49:17 +0100] "\x80+\x01" 501 - "-" "-" 77.68.41.217 - - [18/Nov/2012:05:29:13 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.9.31.112 - - [18/Nov/2012:14:56:10 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 176.9.31.112 - - [18/Nov/2012:18:55:13 +0100] "PUT /webdav/help.php HTTP/1.1" 405 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 77.68.41.217 - - [18/Nov/2012:23:19:45 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:54 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:54 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:55 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:57 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:57 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:58 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:58 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:58 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:58 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:58 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:59 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:59 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:46:59 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:00 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:02 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:02 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:02 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:02 +0100] "\x16\x03" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:02 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:04 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:04 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:04 +0100] "\x80+\x01" 501 - "-" "-" 46.38.184.106 - - [19/Nov/2012:02:47:04 +0100] "\x80+\x01" 501 - "-" "-" 141.212.121.10 - - [20/Nov/2012:02:22:42 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [22/Nov/2012:18:16:10 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 75.125.227.210 - - [23/Nov/2012:01:22:43 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 74.208.223.90 - - [23/Nov/2012:04:00:29 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 74.208.223.90 - - [23/Nov/2012:09:13:27 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [23/Nov/2012:12:14:56 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 74.208.223.90 - - [23/Nov/2012:14:18:38 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 74.208.223.90 - - [23/Nov/2012:19:15:20 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 75.125.227.210 - - [23/Nov/2012:20:48:58 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 74.208.223.90 - - [24/Nov/2012:00:16:10 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 95.0.235.78 - - [24/Nov/2012:04:09:34 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 74.208.223.90 - - [24/Nov/2012:04:58:31 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [24/Nov/2012:06:12:03 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 74.208.223.90 - - [24/Nov/2012:09:41:44 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [25/Nov/2012:00:09:45 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 66.135.32.241 - - [25/Nov/2012:11:53:17 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [25/Nov/2012:18:12:04 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [26/Nov/2012:12:13:26 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 77.68.41.217 - - [27/Nov/2012:05:56:28 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [27/Nov/2012:14:48:44 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:09 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:09 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:10 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:10 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:10 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:10 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:10 +0100] "\x16\x03\x01" 501 - "-" "-" 174.129.159.121 - - [27/Nov/2012:17:42:11 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [27/Nov/2012:23:47:19 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 122.154.101.54 - - [28/Nov/2012:17:23:51 +0100] "\x80g\x01\x03\x01" 501 - "-" "-" 77.68.41.217 - - [28/Nov/2012:17:45:20 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 94.24.41.133 - - [28/Nov/2012:19:44:23 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [29/Nov/2012:11:11:43 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 63.246.152.68 - - [29/Nov/2012:11:19:06 +0100] "\x80s\x01\x03\x01" 501 - "-" "-" 107.21.66.255 - - [29/Nov/2012:22:38:38 +0100] "\x16\x03" 501 - "-" "-" 184.72.172.131 - - [30/Nov/2012:04:13:32 +0100] "\x16\x03\x01" 501 - "-" "-" 77.68.41.217 - - [30/Nov/2012:04:56:38 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-" 141.212.121.10 - - [30/Nov/2012:09:20:08 +0100] "\x80w\x01\x03\x01" 501 - "-" "-" 54.234.25.149 - - [30/Nov/2012:15:02:18 +0100] "\x16\x03" 501 - "-" "-" 77.68.41.217 - - [30/Nov/2012:22:54:13 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 404 "-" "-"