Авторизация  
kauhywka

Господа....

В теме 2 сообщения


развлекайтесь, может кому то надо)







======================================== 25.07.2011 ========================================



========================================

Bot ID:                       ACCOUNTING1_7875768F7408872E

Botnet:                       givememanymoney

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   25.07.2011 14:28:11

GMT:                          -6:00

Session time:                 08:00:04

Report time:                  25.07.2011 20:28:37

Country/Region/City/Postal code:US

IPv4:                         72.21.66.136

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 283



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bgidonsBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bgidons

q2oPassword=Bgia9911

_action=Login

q2_1=

q2_2=





========================================

Bot ID:                       CHW001_7875768FE82A3D1C

Botnet:                       NS2

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   25.07.2011 13:16:20

GMT:                          -5:00

Session time:                 273:53:09

Report time:                  25.07.2011 18:16:23

Country/Region/City/Postal code:US

IPv4:                         12.48.92.178

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure7.onli.../Login.aspx?c=1

Type:                         HTTPS request

Size (bytes):                 665



----------------------------------------

https://secure7.onli.../Login.aspx?c=1

Referer: https://secure7.onli.../Login.aspx?c=1

User input: CourtneySsoftball5488

POST data:



__EVENTTARGET=

__EVENTARGUMENT=

__VIEWSTATE=%2FwEPDwUKLTE3MTc5MzE3MmQYAQUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFgIFIWxvZ2luX2JvZHkkZm9yZ290UGFzc3dvcmRDaGVja0JveAUgbG9naW5fYm9keSRmaXJzdFRpbWVVc2VyQ2hlY2tCb3hdQ131i0yrdZUJan17mCmXQgNmXw%3D%3D

login_body%24LoginIdTextEdit=Courtney

login_body%24PasswordTextEdit=softball5488

login_body%24loginButton=Login

q2_1=pjR1KgbesLI%3D

q2_2=Ox2mtO9mduHdBp9j7xK7LmayanhrelwNrknjxAB4pxAuAHyVMlsLXA%3D%3D





========================================

Bot ID:                       MANUEL-PC_F623002A23C3C3EE

Botnet:                       NS1

Build:                        8

OS Version:                   Vista, SP 1

OS Language:                  1033

Local time:                   25.07.2011 15:27:40

GMT:                          -7:00

Session time:                 05:19:22

Report time:                  25.07.2011 22:40:42

Country/Region/City/Postal code:US

IPv4:                         76.205.220.158

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 449



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input:  bmw e36e30manuel0092bartbblosangeles

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=manuel0092

q2oPassword=losangeles

_action=Login

q2_1=hSNXhBPR8mM%253d

q2_2=Vn6ZOz3fJIVr4k30BLGvd3q%252f6ay13DPRY03ghHym4SnUc2KBjKSlDw%253d%253d

HereSoIeWillSubmitOnEnter=





========================================

Bot ID:                       MAUREENEDELMAN_B4DF76112F33F2FF

Botnet:                       worm

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   25.07.2011 08:19:57

GMT:                          -4:00

Session time:                 00:22:19

Report time:                  25.07.2011 13:13:37

Country/Region/City/Postal code:US

IPv4:                         64.111.140.1

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://customer1.se...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 292



----------------------------------------

https://customer1.se...tion/Login.aspx

Referer: http://www.selective.../Main/Home.aspx

User input: 02858aa02858melivewire1

POST data:



_publicPass=livewire1

_publicUser=a02858me

ScreenResolution=1024 x 768





======================================== 26.07.2011 ========================================



========================================

Bot ID:                       AIREY_7875768FD644BF5A

Botnet:                       worm

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   26.07.2011 08:21:05

GMT:                          -4:00

Session time:                 01:26:48

Report time:                  26.07.2011 12:32:26

Country/Region/City/Postal code:US

IPv4:                         64.111.140.1

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://customer1.se...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 384



----------------------------------------

https://customer1.se...tion/Login.aspx

Referer: http://www.selective.../Main/Home.aspx

User input: Garden Rock ConstructionGarden RockCL9 0648222 Summer18M & M Truck Service, Inc&M  BA 00000050125Ea02858rp-qSummer11

POST data:



_publicPass=Summer11

_publicUser=a02858rp

ScreenResolution=1024 x 768





========================================

Bot ID:                       LIBRARY-PC_4A07383459FE6D36

Botnet:                       NS2

Build:                        8

OS Version:                   Vista, SP 2

OS Language:                  1033

Local time:                   25.07.2011 19:19:02

GMT:                          -5:00

Session time:                 01:47:38

Report time:                  26.07.2011 00:19:46

Country/Region/City/Postal code:US

IPv4:                         96.8.207.10

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 275



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 451-66-6679gdm43198

POST data:



q2oLoginID=451-66-6679

q2oPassword=gdm43198

q2_1=

q2_2=

_action=submit





======================================== 27.07.2011 ========================================

Not founded.

======================================== 28.07.2011 ========================================



========================================

Bot ID:                       RYAN_7BF1A2E12ECB4151

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   28.07.2011 14:50:52

GMT:                          -5:00

Session time:                 280:18:42

Report time:                  28.07.2011 22:44:08

Country/Region/City/Postal code:US

IPv4:                         12.181.125.74

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure7.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 219



----------------------------------------

https://secure7.onli...tion/Login.aspx

Referer: https://www.fnbolathe.com/default.aspx

User input: midnightMidnighjtMidnight1

POST data:



user_id=midnight

password=Midnight1

x=0

y=0





======================================== 29.07.2011 ========================================

Not founded.

======================================== 30.07.2011 ========================================



========================================

Bot ID:                       RYAN_7BF1A2E12ECB4151

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   30.07.2011 04:05:34

GMT:                          -6:00

Session time:                 323:33:23

Report time:                  30.07.2011 20:40:29

Country/Region/City/Postal code:US

IPv4:                         12.181.125.74

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure7.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 210



----------------------------------------

https://secure7.onli...tion/Login.aspx

Referer: https://www.fnbolathe.com/default.aspx

User input: midnightMidnight1

POST data:



user_id=midnight

password=Midnight1

x=0

y=0





======================================== 31.07.2011 ========================================

Not founded.

======================================== 01.08.2011 ========================================



========================================

Bot ID:                       PHILLIPS-509893_7875768FA23DC37E

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   01.08.2011 16:28:31

GMT:                          -5:00

Session time:                 23:57:50

Report time:                  01.08.2011 22:03:45

Country/Region/City/Postal code:US

IPv4:                         173.174.225.230

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 297



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23

POST data:



q2oLoginID=453-95-4820

q2oPassword=oliver23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 16:28:38

Session time:                 23:57:57

Report time:                  01.08.2011 22:03:45

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 307



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23cougers23

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 16:28:48

Session time:                 23:58:07

Report time:                  01.08.2011 22:03:45

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 312



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23cougers23cougers

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 16:28:52

Session time:                 23:58:10

Report time:                  01.08.2011 22:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 312



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23cougers23cougers

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 16:28:58

Session time:                 23:58:17

Report time:                  01.08.2011 22:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 312



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23cougers23cougers

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 16:28:59

Session time:                 23:58:17

Report time:                  01.08.2011 22:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 314



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: yahoo.com45533-95-4820453-95-4820oliver23cougers23cougers

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers23

q2_1=

q2_2=

_action=submit





======================================== 02.08.2011 ========================================

Not founded.

======================================== 03.08.2011 ========================================



========================================

Bot ID:                       ACCOUNTING1_7875768F7408872E

Botnet:                       givememanymoney

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   03.08.2011 10:02:54

GMT:                          -7:00

Session time:                 169:35:17

Report time:                  03.08.2011 23:03:22

Country/Region/City/Postal code:US

IPv4:                         72.21.66.136

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 375



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:03:11

Session time:                 169:35:34

Report time:                  03.08.2011 23:03:22

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 383



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:04:04

Session time:                 169:36:27

Report time:                  03.08.2011 23:23:25

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 391



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:04:07

Session time:                 169:36:30

Report time:                  03.08.2011 23:23:25

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 391



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:04:31

Session time:                 169:36:54

Report time:                  03.08.2011 23:23:25

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 400



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911bBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:04:53

Session time:                 169:37:16

Report time:                  03.08.2011 23:23:26

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 399



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911bBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bigdons

_action=Login

q2oForgotPassword=1

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:05:52

Session time:                 169:38:15

Report time:                  03.08.2011 23:23:26

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 413



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911bBgia9911giBGIBgis9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bgidons

q2oPassword=Bgis9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   03.08.2011 10:06:06

Session time:                 169:38:29

Report time:                  03.08.2011 23:23:26

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 421



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bigdonsBgia9911Bgia9911Bgia9911bBgia9911giBGIBgis9911Bgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bgidons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





======================================== 04.08.2011 ========================================

Not founded.

======================================== 05.08.2011 ========================================



========================================

Bot ID:                       ACCOUNTING1_7875768F7408872E

Botnet:                       givememanymoney

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   04.08.2011 03:18:30

GMT:                          -7:00

Session time:                 186:50:52

Report time:                  05.08.2011 14:37:06

Country/Region/City/Postal code:US

IPv4:                         72.21.66.136

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 376



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1GbgidonsBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bgidons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Local time:                   04.08.2011 04:44:46

Session time:                 188:17:08

Report time:                  05.08.2011 14:57:09

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 375



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input: *1bgidonsBgia9911

POST data:



__VIEWSTATE=%2FwEPDwUHNjY3NDY5MmRk

q2oLoginID=*1bgidons

q2oPassword=Bgia9911

_action=Login

q2_1=jdMlcVUszAk%253d

q2_2=drnYQS6Xw%252fka7cuo1bpq%252bRnq3jf9fOGM7C76gF4%252bXCY0ceCwL693wQ%253d%253d





========================================

Bot ID:                       RYAN_7BF1A2E12ECB4151

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   04.08.2011 11:25:36

GMT:                          -6:00

Session time:                 450:53:24

Report time:                  05.08.2011 22:44:17

Country/Region/City/Postal code:US

IPv4:                         12.181.125.49

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure7.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 224



----------------------------------------

https://secure7.onli...tion/Login.aspx

Referer: https://www.fnbolathe.com/default.aspx

User input: baseball ex1midnightMidnight1

POST data:



user_id=midnight

password=Midnight1

x=31

y=14





======================================== 06.08.2011 ========================================



========================================

Bot ID:                       PHILLIPS-509893_7875768FA23DC37E

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   02.08.2011 16:30:38

GMT:                          -6:00

Session time:                 54:00:04

Report time:                  06.08.2011 13:03:46

Country/Region/City/Postal code:US

IPv4:                         173.174.225.230

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 277



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 453-95-4820cougers23

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   02.08.2011 16:30:50

Session time:                 54:00:16

Report time:                  06.08.2011 13:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 278



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 453-95-4820cougers23

POST data:



q2oLoginID=453-95-4820

q2oForgotPassword=true

q2_1=

q2_2=

_action=submit





========================================

Local time:                   02.08.2011 16:31:03

Session time:                 54:00:29

Report time:                  06.08.2011 13:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 284



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 453-95-4820cougers23landri23

POST data:



q2oLoginID=453-95-4820

q2oPassword=landri23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   02.08.2011 16:31:09

Session time:                 54:00:35

Report time:                  06.08.2011 13:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 292



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 453-95-4820cougers23landri23oliver23

POST data:



q2oLoginID=453-95-4820

q2oPassword=oliver23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   02.08.2011 16:31:23

Session time:                 54:00:48

Report time:                  06.08.2011 13:03:46

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 294



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: 453-95-4820cougers23landri23oliver23

POST data:



q2oLoginID=453-95-4820

q2oForgotPassword=true

q2_1=

q2_2=

_action=submit





========================================

Bot ID:                       RYAN_7BF1A2E12ECB4151

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   06.08.2011 11:15:58

GMT:                          -6:00

Session time:                 03:45:37

Report time:                  06.08.2011 22:16:23

Country/Region/City/Postal code:US

IPv4:                         12.181.125.49

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure7.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 312



----------------------------------------

https://secure7.onli...tion/Login.aspx

Referer: https://www.fnbolathe.com/default.aspx

User input:  

POST data:



user_id=midnight

password=Midnight1

x=0

y=0





======================================== 07.08.2011 ========================================

Not founded.

======================================== 08.08.2011 ========================================

Not founded.

======================================== 09.08.2011 ========================================



========================================

Bot ID:                       PHILLIPS-509893_7875768FA23DC37E

Botnet:                       NS1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   05.08.2011 10:40:54

GMT:                          -6:00

Session time:                 05:22:35

Report time:                  09.08.2011 19:11:42

Country/Region/City/Postal code:US

IPv4:                         173.174.225.230

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 273



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: www.453-95-4820

POST data:



q2oLoginID=453-95-4820

q2oForgotPassword=true

q2_1=

q2_2=

_action=submit





========================================

Local time:                   05.08.2011 10:41:20

Session time:                 05:23:00

Report time:                  09.08.2011 19:11:43

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 281



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: www.453-95-4820cougers23

POST data:



q2oLoginID=453-95-4820

q2oPassword=cougers23

q2_1=

q2_2=

_action=submit





========================================

Local time:                   05.08.2011 10:42:06

Session time:                 05:23:47

Report time:                  09.08.2011 19:11:43

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 282



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: www.453-95-4820cougers23

POST data:



q2oLoginID=453-95-4820

q2oForgotPassword=true

q2_1=

q2_2=

_action=submit





========================================

Local time:                   05.08.2011 10:42:10

Session time:                 05:23:51

Report time:                  09.08.2011 19:11:43

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 282



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: www.453-95-4820cougers23

POST data:



q2oLoginID=453-95-4820

q2oForgotPassword=true

q2_1=

q2_2=

_action=submit





========================================

Local time:                   05.08.2011 10:45:34

Session time:                 05:27:14

Report time:                  09.08.2011 19:11:43

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure9.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 299



----------------------------------------

https://secure9.onli...tion/Login.aspx

Referer: https://secure9.onli...tion/Login.aspx

User input: www.453-95-4820cougers23broadwaybraoadway1

POST data:



q2oLoginID=453-95-4820

q2oPassword=broadway1

q2_1=

q2_2=

_action=submit







======================================== EOF ========================================



Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты

принимаем пополнение





======================================== 25.07.2011 ========================================

Not founded.

======================================== 26.07.2011 ========================================



========================================

Bot ID:                       LENOVO-B36110BB_B4DF76114B2A1961

Botnet:                       sp2306

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   22.07.2011 14:35:42

GMT:                          -4:00

Session time:                 06:53:42

Report time:                  26.07.2011 11:11:19

Country/Region/City/Postal code:US

IPv4:                         75.150.58.21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 274



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922catfishcat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   25.07.2011 07:43:05

Session time:                 00:20:15

Report time:                  26.07.2011 11:11:21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





======================================== 27.07.2011 ========================================



========================================

Bot ID:                       BOB_7875768FD7614FC9

Botnet:                       july05hz1

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   26.07.2011 11:43:01

GMT:                          -7:00

Session time:                 331:48:33

Report time:                  27.07.2011 10:15:22

Country/Region/City/Postal code:US

IPv4:                         98.189.227.105

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure53.onl...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 300



----------------------------------------

https://secure53.onl...tion/Login.aspx

Referer: https://secure53.onl...tion/Login.aspx

User input:  [email protected]

POST data:



q2oLoginID=RCMATWS

q2oPassword=Bm452000

_action=submit





========================================

Bot ID:                       D32K6851_7875768F4D9E3EFF

Botnet:                       july051

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   27.07.2011 13:49:10

GMT:                          -4:00

Session time:                 346:27:22

Report time:                  27.07.2011 23:54:10

Country/Region/City/Postal code:US

IPv4:                         69.193.151.4

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 469



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: pfidanza1paPaula123!

POST data:



q2oLoginID=pfidanza1

q2oPassword=Paula123%21

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





========================================

Local time:                   27.07.2011 14:02:25

Session time:                 346:40:37

Report time:                  27.07.2011 23:54:12

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 469



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: [email protected]

POST data:



q2oLoginID=planetwings

[email protected]

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





========================================

Local time:                   27.07.2011 14:54:06

Session time:                 347:32:18

Report time:                  27.07.2011 23:54:18

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 469



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: [email protected]

POST data:



q2oLoginID=planetwings

[email protected]

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





========================================

Local time:                   27.07.2011 14:58:30

Session time:                 347:36:42

Report time:                  27.07.2011 23:54:18

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 451



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: planetwings

POST data:



q2oLoginID=planetwings

q2oPassword=

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





========================================

Local time:                   27.07.2011 14:58:38

Session time:                 347:36:50

Report time:                  27.07.2011 23:54:18

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 469



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: [email protected]

POST data:



q2oLoginID=planetwings

[email protected]

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





======================================== 28.07.2011 ========================================



========================================

Bot ID:                       LENOVO-B36110BB_B4DF76114B2A1961

Botnet:                       sp2306

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   28.07.2011 07:36:16

GMT:                          -4:00

Session time:                 00:26:52

Report time:                  28.07.2011 11:45:15

Country/Region/City/Postal code:US

IPv4:                         75.150.58.21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 283



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922catfish1curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   28.07.2011 07:47:20

Session time:                 00:37:56

Report time:                  28.07.2011 11:45:17

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 268



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat0023

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   28.07.2011 08:25:17

Session time:                 01:15:52

Report time:                  28.07.2011 12:25:27

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 268



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curtt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Bot ID:                       MMDENNYPC_4983EC5A4D2B9689

Botnet:                       raw2806-222

Build:                        8

OS Version:                   Vista, SP 2

OS Language:                  1033

Local time:                   28.07.2011 07:14:54

GMT:                          -5:00

Session time:                 190:48:59

Report time:                  28.07.2011 12:22:25

Country/Region/City/Postal code:US

IPv4:                         65.201.200.162

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ce on Thursday, July 28.I can  go up on August 1 by meselfyself, or take Ashley with me and we canwork on the bank info.and Let me know later what you think.taHow does this work?th147068125121125121joAshCan you send this to Glen?Thanks.125121th010351th1000001000010000Bostonpro propertyDennisThroneburgnystiljuljefNothing for me today, thanks, Julie.glscheduleI will bee go out of the office on July 25,26,27 and Augutsst 5, 8.Do I needd to prepare any worsheets pkrior to August 23?Thanks.We will palllan on making the distribution on August 2.th8906151141894.4807-21 deliveriesjoAlso, when you atr atre at the building nes x, look on the floor to the right of thefrig.  Ther e is a gap beteween the fring and the cabinets - anything yousuggest to cover that?Thanks.Thanks, Meghan.Thanks.125121th995168th743160125121db12211251217dThrone1221Here  yo goere you go.megSee me nestxt Thursday on this.FYIjefth860874megMegha,n,Use this for the distribution.Thanks.walmart in bostonpreru ilpharmacy 125121t

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 07:16:30

Session time:                 190:50:34

Report time:                  28.07.2011 12:22:26

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 280



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: hursday, July 28.I can  go up on August 1 by meselfyself, or take Ashley with me and we canwork on the bank info.and Let me know later what you think.taHow does this work?th147068125121125121joAshCan you send this to Glen?Thanks.125121th010351th1000001000010000Bostonpro propertyDennisThroneburgnystiljuljefNothing for me today, thanks, Julie.glscheduleI will bee go out of the office on July 25,26,27 and Augutsst 5, 8.Do I needd to prepare any worsheets pkrior to August 23?Thanks.We will palllan on making the distribution on August 2.th8906151141894.4807-21 deliveriesjoAlso, when you atr atre at the building nes x, look on the floor to the right of thefrig.  Ther e is a gap beteween the fring and the cabinets - anything yousuggest to cover that?Thanks.Thanks, Meghan.Thanks.125121th995168th743160125121db12211251217dThrone1221Here  yo goere you go.megSee me nestxt Thursday on this.FYIjefth860874megMegha,n,Use this for the distribution.Thanks.walmart in bostonpreru ilpharmacy 125121t597020t

POST data:



q2oLoginID=throne00de

q2oPassword=country

q2_1=

q2_2=

_action=submit





======================================== 29.07.2011 ========================================



========================================

Bot ID:                       LENOVO-B36110BB_B4DF76114B2A1961

Botnet:                       sp2306

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   28.07.2011 13:59:41

GMT:                          -4:00

Session time:                 02:18:17

Report time:                  29.07.2011 12:18:27

Country/Region/City/Postal code:US

IPv4:                         75.150.58.21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   28.07.2011 13:59:48

Session time:                 02:18:24

Report time:                  29.07.2011 12:18:27

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   28.07.2011 15:50:37

Session time:                 04:09:27

Report time:                  29.07.2011 12:18:28

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   28.07.2011 15:58:04

Session time:                 04:16:57

Report time:                  29.07.2011 12:18:29

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Bot ID:                       MMDENNYPC_4983EC5A4D2B9689

Botnet:                       raw2806-222

Build:                        8

OS Version:                   Vista, SP 2

OS Language:                  1033

Local time:                   28.07.2011 09:13:13

GMT:                          -5:00

Session time:                 192:47:18

Report time:                  29.07.2011 09:34:31

Country/Region/City/Postal code:US

IPv4:                         65.201.200.162

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ave the following concerns?:Numirror on bedroom dresserhot water?trim below bathroom vanitywasher/dryer not finishedif  door is not here, I would like to    put knob on exitsting dorror - I    will keep it ,pp, and replace when    other door comesoverhead doors not hooked up?I am calling toaday about the fireplace    partsCan you help with any of these?Thanks.Denny.asjef$$Have we mvoedoved teh he $1M from MW to ME yet?  If not, can we dothat today?Thanks.asjeff$$Just saw you already did tit - thanks!as$$Has Meghan put the $1M from MW into ME?Thanks.marPerryPerry emailed me and wanted fo to know if we had talekdledkedto Randy about the distribution.  Let me know if you needme to do anything.Thanks.tambillsI would like to pay some bills t0daoday - is that IKIOOK?Thanks.Thanks.megdistributionI think we should take the distributions out ofthe A/P.  Talk to me about it hithis morning.Thanks.Yes on my part..s.Our FEIN # i s 20-3036154.I do not know what that numbother nuember is.mberjulFYIth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 09:23:32

Session time:                 192:57:37

Report time:                  29.07.2011 09:34:36

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ns?:Numirror on bedroom dresserhot water?trim below bathroom vanitywasher/dryer not finishedif  door is not here, I would like to    put knob on exitsting dorror - I    will keep it ,pp, and replace when    other door comesoverhead doors not hooked up?I am calling toaday about the fireplace    partsCan you help with any of these?Thanks.Denny.asjef$$Have we mvoedoved teh he $1M from MW to ME yet?  If not, can we dothat today?Thanks.asjeff$$Just saw you already did tit - thanks!as$$Has Meghan put the $1M from MW into ME?Thanks.marPerryPerry emailed me and wanted fo to know if we had talekdledkedto Randy about the distribution.  Let me know if you needme to do anything.Thanks.tambillsI would like to pay some bills t0daoday - is that IKIOOK?Thanks.Thanks.megdistributionI think we should take the distributions out ofthe A/P.  Talk to me about it hithis morning.Thanks.Yes on my part..s.Our FEIN # i s 20-3036154.I do not know what that numbother nuember is.mberjulFYIth517792marquisethanol12th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 10:27:33

Session time:                 194:01:38

Report time:                  29.07.2011 09:35:09

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: er to wire the money.Thanks.DennypaymentCan't say that I'm surprised, but glad it's not terribleoo bad.Thanbks.Let me check.Sounds good - thanks.megHere you go.Thanks, FGay.NI do not .  If he was someone who had ndone really weell and you wanted to keeparound, that would  be fins.e  That does not appear to be the csease, so I wouldconsider him to be finished when you feel the "seasonal" time is completed.Thanks.usdebtmatMTTIn order to set up a checking account, I need the TEIFEIN numberand documetnnts showing it is an LLC.For now, MMGT can make any payments necessary;..Thanks.Freiied chicken salad, please.Thanks, Pat.perFayFay should receive wire today.I have ledfft a message with markM<ark top see if he had contacted ranRandy.Thanks. his paymenbttjopss2nd atrqtrOK, this is nuts.  GPRE had 9 ehtanotethaonl plnol plants, produced produces 740 mM gallaonsonsof ethnanol per year.  In 2nd atrqtr 2011, they had  reported net income of $5M.ME for same period - $12M.How do you figure?sForth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 12:46:48

Session time:                 196:20:53

Report time:                  29.07.2011 09:36:14

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input:  not appear to be the csease, so I wouldconsider him to be finished when you feel the "seasonal" time is completed.Thanks.usdebtmatMTTIn order to set up a checking account, I need the TEIFEIN numberand documetnnts showing it is an LLC.For now, MMGT can make any payments necessary;..Thanks.Freiied chicken salad, please.Thanks, Pat.perFayFay should receive wire today.I have ledfft a message with markM<ark top see if he had contacted ranRandy.Thanks. his paymenbttjopss2nd atrqtrOK, this is nuts.  GPRE had 9 ehtanotethaonl plnol plants, produced produces 740 mM gallaonsonsof ethnanol per year.  In 2nd atrqtr 2011, they had  reported net income of $5M.ME for same period - $12M.How do you figure?sForth6422961263718.7807-27 delivereiies125121db12211251217dThrone1221chipwalDOwejefDo we need to foolollowup on thid? sThanks.jefMG qtr reportsMarquis entities qtr reportsjefMarquis marMarinwe insurance issue - 2011patMEI wouyldld still like to get some ME clothing.6251061356125121db1221125121thth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 12:47:07

Session time:                 196:21:12

Report time:                  29.07.2011 09:36:14

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 280



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ot appear to be the csease, so I wouldconsider him to be finished when you feel the "seasonal" time is completed.Thanks.usdebtmatMTTIn order to set up a checking account, I need the TEIFEIN numberand documetnnts showing it is an LLC.For now, MMGT can make any payments necessary;..Thanks.Freiied chicken salad, please.Thanks, Pat.perFayFay should receive wire today.I have ledfft a message with markM<ark top see if he had contacted ranRandy.Thanks. his paymenbttjopss2nd atrqtrOK, this is nuts.  GPRE had 9 ehtanotethaonl plnol plants, produced produces 740 mM gallaonsonsof ethnanol per year.  In 2nd atrqtr 2011, they had  reported net income of $5M.ME for same period - $12M.How do you figure?sForth6422961263718.7807-27 delivereiies125121db12211251217dThrone1221chipwalDOwejefDo we need to foolollowup on thid? sThanks.jefMG qtr reportsMarquis entities qtr reportsjefMarquis marMarinwe insurance issue - 2011patMEI wouyldld still like to get some ME clothing.6251061356125121db1221125121ththth

POST data:



q2oLoginID=throne00de

q2oPassword=country

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 14:05:46

Session time:                 197:39:51

Report time:                  29.07.2011 09:36:41

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: et up a checking account, I need the TEIFEIN numberand documetnnts showing it is an LLC.For now, MMGT can make any payments necessary;..Thanks.Freiied chicken salad, please.Thanks, Pat.perFayFay should receive wire today.I have ledfft a message with markM<ark top see if he had contacted ranRandy.Thanks. his paymenbttjopss2nd atrqtrOK, this is nuts.  GPRE had 9 ehtanotethaonl plnol plants, produced produces 740 mM gallaonsonsof ethnanol per year.  In 2nd atrqtr 2011, they had  reported net income of $5M.ME for same period - $12M.How do you figure?sForth6422961263718.7807-27 delivereiies125121db12211251217dThrone1221chipwalDOwejefDo we need to foolollowup on thid? sThanks.jefMG qtr reportsMarquis entities qtr reportsjefMarquis marMarinwe insurance issue - 2011patMEI wouyldld still like to get some ME clothing.6251061356125121db1221125121thththdish82558255  [email protected][email protected]fth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   28.07.2011 15:16:43

Session time:                 198:50:48

Report time:                  29.07.2011 09:37:18

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: today.I have ledfft a message with markM<ark top see if he had contacted ranRandy.Thanks. his paymenbttjopss2nd atrqtrOK, this is nuts.  GPRE had 9 ehtanotethaonl plnol plants, produced produces 740 mM gallaonsonsof ethnanol per year.  In 2nd atrqtr 2011, they had  reported net income of $5M.ME for same period - $12M.How do you figure?sForth6422961263718.7807-27 delivereiies125121db12211251217dThrone1221chipwalDOwejefDo we need to foolollowup on thid? sThanks.jefMG qtr reportsMarquis entities qtr reportsjefMarquis marMarinwe insurance issue - 2011patMEI wouyldld still like to get some ME clothing.6251061356125121db1221125121thththdish82558255  [email protected][email protected]fth34709535356.03comm 7-20 to 7-26dennythroneburgethanol11dennythroneburgethanol11SassyMarieAssumTaylorvilleUniversity of IllinoisAQQuincy SchoolMW benchmark labor reportsME benchmark labor reportsashashglenglenmegmegth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





======================================== 31.07.2011 ========================================



========================================

Bot ID:                       D32K6851_7875768F4D9E3EFF

Botnet:                       july051

Build:                        8

OS Version:                   XP, SP 3

OS Language:                  1033

Local time:                   30.07.2011 08:04:51

GMT:                          -5:00

Session time:                 01:33:16

Report time:                  31.07.2011 22:18:24

Country/Region/City/Postal code:US

IPv4:                         69.193.151.4

Process name:                 C:Program FilesInternet Exploreriexplore.exe

Source:                       https://secure.onlin...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 470



----------------------------------------

https://secure.onlin...tion/Login.aspx

Referer: https://secure.onlin...tion/Login.aspx

User input: [email protected]

POST data:



q2oLoginID=planetwings

[email protected]

q2_1=V3

q2_2=4i4wsN3wKRE%253d%3DJCZs7rWONE%252fKE6vtzpNWQ0tjhUpk1Zmx2UCRatUJKwsgJQtkUGEQuw%253d%253d%3BH9k6w7htC%252bM%253d%3DVuwkYurUG8fJVOrMAooPBuhz3BIL8b3%252fBiWrdUStVZDh9FaoBohRNg%253d%253d%3B

_action=submit





======================================== 01.08.2011 ========================================



========================================

Bot ID:                       LENOVO-B36110BB_B4DF76114B2A1961

Botnet:                       sp2306

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   29.07.2011 08:40:28

GMT:                          -5:00

Session time:                 02:35:29

Report time:                  01.08.2011 12:06:55

Country/Region/City/Postal code:US

IPv4:                         75.150.58.21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 267



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   29.07.2011 09:07:44

Session time:                 03:02:38

Report time:                  01.08.2011 12:06:58

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 275



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURT1922curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   29.07.2011 09:18:07

Session time:                 03:13:02

Report time:                  01.08.2011 12:06:59

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 275



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURT1922curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   01.08.2011 03:22:11

Session time:                 00:45:50

Report time:                  01.08.2011 12:27:02

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 269



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: atcurt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   01.08.2011 10:07:17

Session time:                 07:31:11

Report time:                  01.08.2011 19:01:40

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 271



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURTcurt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   01.08.2011 10:41:14

Session time:                 08:05:13

Report time:                  01.08.2011 19:41:46

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 271



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURTcurt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   01.08.2011 11:02:31

Session time:                 08:26:33

Report time:                  01.08.2011 20:01:49

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 271



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURTcurt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Local time:                   01.08.2011 11:10:30

Session time:                 08:34:34

Report time:                  01.08.2011 20:21:53

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 291



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURTcurt1922cat003138.20curt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit





========================================

Bot ID:                       MMDENNYPC_4983EC5A4D2B9689

Botnet:                       raw2806-222

Build:                        8

OS Version:                   Vista, SP 2

OS Language:                  1033

Local time:                   29.07.2011 03:17:25

GMT:                          -6:00

Session time:                 216:51:29

Report time:                  01.08.2011 00:07:24

Country/Region/City/Postal code:US

IPv4:                         65.201.200.162

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 290



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: 125121thrth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 03:18:58

Session time:                 216:53:03

Report time:                  01.08.2011 00:07:26

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 299



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: 125121thrth598015th

POST data:



q2oLoginID=throne00de

q2oPassword=country

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 04:02:02

Session time:                 217:36:06

Report time:                  01.08.2011 00:08:00

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 552



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: 125121thrth598015thFried cod sandwich, hnonly, pleaese.Thanks, Papt.Let me check with Tammy regarding her schedule.Thanks.tamAre you interested?megETHow much ethanol did we ship in July?Thanks.lesMondayWho will be meeting me Monday, August 1, at 5:30?Thanks.perryfayperryth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 06:38:05

Session time:                 220:12:10

Report time:                  01.08.2011 00:09:17

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 139



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: 125121thrth598015thFried cod sandwich, hnonly, pleaese.Thanks, Papt.Let me check with Tammy regarding her schedule.Thanks.tamAre you interested?megETHow much ethanol did we ship in July?Thanks.lesMondayWho will be meeting me Monday, August 1, at 5:30?Thanks.perryfayperryth438240brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 07:15:39

Session time:                 220:49:44

Report time:                  01.08.2011 00:09:28

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input:  me Monday, August 1, at 5:30?Thanks.perryfayperryth438240brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 08:05:31

Session time:                 221:39:36

Report time:                  01.08.2011 00:09:46

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: nks.perryfayperryth438240brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 08:20:12

Session time:                 221:54:16

Report time:                  01.08.2011 00:09:50

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: yfayperryth438240brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 08:28:17

Session time:                 222:02:22

Report time:                  01.08.2011 00:09:53

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: yth438240brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 08:52:10

Session time:                 222:26:15

Report time:                  01.08.2011 00:09:57

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: 0brilsitlistBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 09:10:50

Session time:                 222:44:55

Report time:                  01.08.2011 00:10:01

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: listBrian,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 09:17:20

Session time:                 222:51:25

Report time:                  01.08.2011 00:10:04

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ,Coulsd you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th4068694th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 09:20:58

Session time:                 222:55:02

Report time:                  01.08.2011 00:10:07

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: you resaesend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th4068694th390712th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   29.07.2011 09:29:27

Session time:                 223:03:32

Report time:                  01.08.2011 00:10:09

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: esend the latest vendor list forTammy and I ro rto review?Thanks.potential OK , thanks.Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th4068694th390712th670701th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 00:08:59

Session time:                 285:41:02

Report time:                  01.08.2011 11:17:45

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: .Will check.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th4068694th390712th670701th023715sshharosbalancePlesase give me a call at your onconvenience.Thanks.Denny125121th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 00:14:29

Session time:                 285:46:32

Report time:                  01.08.2011 11:17:52

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 280



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: eck.Thanks for you email..   I will share your infromaormation with my wife and we willprayerfull consider your rwequewsst.Dennyy, Emily.tomAnything you  can tell me about this gal?Thanks.frebillFred,Please give me a call at your convenience.Thanks.DennyThansk.ks.Thanks.tammMaybe we can look at this together sometime.Thanks.jefArtThanks, Meghan.Thanks, Meghan.Keeep 'em coming!asC&AWe do owe the $999 - couls wd we get that paid in July?Thanbks.125121th011038deadeadeappraisalCould you give me the appraisal numbers again?Thanks.125121SudnayndayDo you have some ethougthoughts on how to satart our meetings on Sunday?Shoudl thI would usuggest the elders get ottogether for a few minutes beforewe bring the pastors in for freveiwiew.  I would assume it will take 30-40minutes per pastror.What do you think?Thanks.th250519960670.1407-28 deliveriesth651234th510083th610087th571749th4068694th390712th670701th023715sshharosbalancePlesase give me a call at your onconvenience.Thanks.Denny125121th286311th

POST data:



q2oLoginID=throne00de

q2oPassword=country

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 02:27:47

Session time:                 287:59:50

Report time:                  01.08.2011 13:39:58

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 662



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gleentitiesIs this at all helpful?Thanks.rogDDGWhat did you get for an  DDG inventory for 7/31/11?Thanks.OK, sorry, I guess, tohear that. Marquis INcnc/Marine appraisal - 2--011joeGrasserAlso, the bolt cover on the bgasebase of the toilet (white plastice)one of s wasis broken off and I would like a new one.Thanks.juliFYISure - also we received the pieece to go aboeve the sinek.th

POST data:



q2oLoginID=throne00de

q2oPassword=country

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 03:41:18

Session time:                 289:13:21

Report time:                  01.08.2011 15:00:50

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 809



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gleentitiesIs this at all helpful?Thanks.rogDDGWhat did you get for an  DDG inventory for 7/31/11?Thanks.OK, sorry, I guess, tohear that. Marquis INcnc/Marine appraisal - 2--011joeGrasserAlso, the bolt cover on the bgasebase of the toilet (white plastice)one of s wasis broken off and I would like a new one.Thanks.juliFYISure - also we received the pieece to go aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 03:43:48

Session time:                 289:15:51

Report time:                  01.08.2011 15:00:52

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 817



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gleentitiesIs this at all helpful?Thanks.rogDDGWhat did you get for an  DDG inventory for 7/31/11?Thanks.OK, sorry, I guess, tohear that. Marquis INcnc/Marine appraisal - 2--011joeGrasserAlso, the bolt cover on the bgasebase of the toilet (white plastice)one of s wasis broken off and I would like a new one.Thanks.juliFYISure - also we received the pieece to go aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th803129th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 03:49:04

Session time:                 289:21:07

Report time:                  01.08.2011 15:00:55

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 825



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gleentitiesIs this at all helpful?Thanks.rogDDGWhat did you get for an  DDG inventory for 7/31/11?Thanks.OK, sorry, I guess, tohear that. Marquis INcnc/Marine appraisal - 2--011joeGrasserAlso, the bolt cover on the bgasebase of the toilet (white plastice)one of s wasis broken off and I would like a new one.Thanks.juliFYISure - also we received the pieece to go aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th803129th115738th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 04:41:24

Session time:                 290:13:27

Report time:                  01.08.2011 16:01:33

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 164



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gleentitiesIs this at all helpful?Thanks.rogDDGWhat did you get for an  DDG inventory for 7/31/11?Thanks.OK, sorry, I guess, tohear that. Marquis INcnc/Marine appraisal - 2--011joeGrasserAlso, the bolt cover on the bgasebase of the toilet (white plastice)one of s wasis broken off and I would like a new one.Thanks.juliFYISure - also we received the pieece to go aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th803129th115738th602219Fried chicken salad, if tgheyhey have it.Thanks., pat.PYes, thanks.WE woule would like to hold off on any meetings for now.  Tammy is callingvendors everyday and will update the list of vednondors in the program.Let's wait fawhile to get abhback to gether.  Tanbkhanks.Denny I will call you when we arefurther along in the process.th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 05:48:13

Session time:                 291:20:16

Report time:                  01.08.2011 17:02:26

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: e to go aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th803129th115738th602219Fried chicken salad, if tgheyhey have it.Thanks., pat.PYes, thanks.WE woule would like to hold off on any meetings for now.  Tammy is callingvendors everyday and will update the list of vednondors in the program.Let's wait fawhile to get abhback to gether.  Tanbkhanks.Denny I will call you when we arefurther along in the process.th726864matomjasbenmarMTTTomoroorow we will be sending distribution; chekcscks from Marquis Holdings.  Please be advisedthat you will need to make an equity contribution to Marquis Texads Transport when thatentity LLC you begins operations.comes operational.The amounts will be similar to wthe contribuionttion mdadade to Marquis Wisconsin Holdings.If you have any questions, please contact me.Thanks.For you - $6000.Apparently they are not ewilling - unfortunate.125121th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 05:56:12

Session time:                 291:28:15

Report time:                  01.08.2011 17:02:31

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: aboeve the sinek.th1251212233OK, thanks.Yes, thanks.johblood workSt. marMargaret''s, Spsring Valley, not partcipatiticipating in the program, is thsaat right?Thanks.th803129th115738th602219Fried chicken salad, if tgheyhey have it.Thanks., pat.PYes, thanks.WE woule would like to hold off on any meetings for now.  Tammy is callingvendors everyday and will update the list of vednondors in the program.Let's wait fawhile to get abhback to gether.  Tanbkhanks.Denny I will call you when we arefurther along in the process.th726864matomjasbenmarMTTTomoroorow we will be sending distribution; chekcscks from Marquis Holdings.  Please be advisedthat you will need to make an equity contribution to Marquis Texads Transport when thatentity LLC you begins operations.comes operational.The amounts will be similar to wthe contribuionttion mdadade to Marquis Wisconsin Holdings.If you have any questions, please contact me.Thanks.For you - $6000.Apparently they are not ewilling - unfortunate.125121th051492th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 07:45:51

Session time:                 293:17:54

Report time:                  01.08.2011 19:03:24

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: ., pat.PYes, thanks.WE woule would like to hold off on any meetings for now.  Tammy is callingvendors everyday and will update the list of vednondors in the program.Let's wait fawhile to get abhback to gether.  Tanbkhanks.Denny I will call you when we arefurther along in the process.th726864matomjasbenmarMTTTomoroorow we will be sending distribution; chekcscks from Marquis Holdings.  Please be advisedthat you will need to make an equity contribution to Marquis Texads Transport when thatentity LLC you begins operations.comes operational.The amounts will be similar to wthe contribuionttion mdadade to Marquis Wisconsin Holdings.If you have any questions, please contact me.Thanks.For you - $6000.Apparently they are not ewilling - unfortunate.125121th051492th583309529169.9107-29, 07-30 delivereisies125121TuesdayChurch softball tounrnament gartme Tuesday at 6 pm, probably won'tmake it to prayer, but the team coudld use some!tambillsSorry, I did have some invoices on my desk.  Missed them?!th

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





========================================

Local time:                   01.08.2011 08:52:09

Session time:                 294:24:13

Report time:                  01.08.2011 20:04:04

Process name:                 C:Program FilesMozilla Firefoxfirefox.exe

Source:                       https://securecitize...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 1 279



----------------------------------------

https://securecitize...tion/Login.aspx

Referer: https://securecitize...tion/Login.aspx

User input: gs for now.  Tammy is callingvendors everyday and will update the list of vednondors in the program.Let's wait fawhile to get abhback to gether.  Tanbkhanks.Denny I will call you when we arefurther along in the process.th726864matomjasbenmarMTTTomoroorow we will be sending distribution; chekcscks from Marquis Holdings.  Please be advisedthat you will need to make an equity contribution to Marquis Texads Transport when thatentity LLC you begins operations.comes operational.The amounts will be similar to wthe contribuionttion mdadade to Marquis Wisconsin Holdings.If you have any questions, please contact me.Thanks.For you - $6000.Apparently they are not ewilling - unfortunate.125121th051492th583309529169.9107-29, 07-30 delivereisies125121TuesdayChurch softball tounrnament gartme Tuesday at 6 pm, probably won'tmake it to prayer, but the team coudld use some!tambillsSorry, I did have some invoices on my desk.  Missed them?!th863971`125121millrennium on earthquestopms iosnns about  heaventh

POST data:



q2oLoginID=thron838d

q2oPassword=ilriver

q2_1=

q2_2=

_action=submit





======================================== 02.08.2011 ========================================



========================================

Bot ID:                       LENOVO-B36110BB_B4DF76114B2A1961

Botnet:                       sp2306

Build:                        8

OS Version:                   XP, SP 2

OS Language:                  1033

Local time:                   02.08.2011 04:08:16

GMT:                          -5:00

Session time:                 01:26:47

Report time:                  02.08.2011 13:02:24

Country/Region/City/Postal code:US

IPv4:                         75.150.58.21

Process name:                 C:Program FilesInternet ExplorerIEXPLORE.EXE

Source:                       https://secure5.onli...tion/Login.aspx

Type:                         HTTPS request

Size (bytes):                 271



----------------------------------------

https://secure5.onli...tion/Login.aspx

Referer: https://secure5.onli...tion/Login.aspx

User input: CURTcurt1922cat003

POST data:



q2oLoginID=curt1922

q2oPassword=cat003

_action=submit



Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты

Для публикации сообщений создайте учётную запись или авторизуйтесь

Вы должны быть пользователем, чтобы оставить комментарий

Создать учетную запись

Зарегистрируйте новую учётную запись в нашем сообществе. Это очень просто!

Регистрация нового пользователя

Войти

Уже есть аккаунт? Войти в систему.

Войти
Авторизация