Quote:
Originally posted by {fusion}
These are some raw logs coming from this broker, do they look normal.
239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_02.jpg HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_03.jpg HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_04.gif HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_05.gif HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_06.gif HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:41 -0800] "GET /console/newlover/images/findanewlover-fpa-01_07.jpg HTTP/1.1" 302 292 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
221.136.239.254 - - [07/Dec/2003:00:07:42 -0800] "GET / HTTP/1.1" 200 24493 "http://www.iansamateurs.com/console/newlover/index.html" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
|
Could you do me a favour and hit me up on ICQ 46762719? I'd like to get some more (200k or something) of logfiles and analyse it.
To me this looks like a pretty good written hitbot (it requests images in random order too), and if i'm correct, this guy has to be out of the biz asap
