Code:
115.74.223.54 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340284948736&msg=Fucked! HTTP/1.1" 404 2262
27.69.41.114 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202786993&msg=Fucked! HTTP/1.1" 404 2262
27.69.41.114 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202786993&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072116&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072116&msg=Fucked! HTTP/1.1" 404 2262
27.77.198.53 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203307891&msg=Fucked! HTTP/1.1" 404 2262
27.77.198.53 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203307891&msg=Fucked! HTTP/1.1" 404 2262
118.71.62.176 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202627057&msg=Fucked! HTTP/1.1" 404 2262
118.71.62.176 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202627057&msg=Fucked! HTTP/1.1" 404 2262
27.77.198.53 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203307897&msg=Fucked! HTTP/1.1" 404 2262
27.77.198.53 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203307897&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072122&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072122&msg=Fucked! HTTP/1.1" 404 2262
183.80.218.85 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340375974594&msg=Fucked! HTTP/1.1" 404 2262
183.80.218.85 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340375974594&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072128&msg=Fucked! HTTP/1.1" 404 2262
117.4.25.112 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340210072128&msg=Fucked! HTTP/1.1" 404 2262
171.243.147.79 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340296071470&msg=Fucked! HTTP/1.1" 404 2262
171.243.147.79 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340296071470&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777886139&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777886139&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777900213&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777900213&msg=Fucked! HTTP/1.1" 404 2262
123.21.224.243 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203131368&msg=Fucked! HTTP/1.1" 404 2262
123.21.224.243 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203131368&msg=Fucked! HTTP/1.1" 404 2262
27.69.41.114 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202799057&msg=Fucked! HTTP/1.1" 404 2262
27.69.41.114 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202799057&msg=Fucked! HTTP/1.1" 404 2262
203.93.28.166 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php?&time=0.1522221 HTTP/1.1" 404 2234
203.93.28.166 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php?&time=0.1522221 HTTP/1.1" 404 2234
118.71.62.176 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202627058&msg=Fucked! HTTP/1.1" 404 2262
118.71.62.176 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340202627058&msg=Fucked! HTTP/1.1" 404 2262
115.78.203.33 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203231552&msg=Fucked! HTTP/1.1" 404 2262
115.78.203.33 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1340203231552&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777901935&msg=Fucked! HTTP/1.1" 404 2262
115.78.197.224 - - [20/Jun/2012:20:42:28 +0400] "GET /@4rum/forum.php)?id=1337777901935&msg=Fucked! HTTP/1.1" 404 2262
Log ngày 20 này dạng iframe rồi khá quen thuộc.
Code:
220.181.124.68 - - [20/Jun/2012:20:42:30 +0400] "GET /@4rum/forum.php?&time=0.15528 HTTP/1.0" 404 2230
220.181.124.68 - - [20/Jun/2012:20:42:30 +0400] "GET /@4rum/forum.php?&time=0.15528 HTTP/1.0" 404 2230
cái này giống trong ký sự HVA nhỉ chắc ai cũng biết.
Còn nữa HTTP POST ATTACK
Code:
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:09 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
64.233.136.54 - - [20/Jun/2012:21:33:10 +0400] "POST /index.php/1.0" 404 1988
Còn cái log này lạ quá anh em phân tích phát 1 dạng slow chăng 
Code:
117.4.38.126 - - [21/Jun/2012:18:55:25 +0400] "-" 408 -
117.4.38.126 - - [21/Jun/2012:18:55:25 +0400] "-" 408 -
113.165.4.22 - - [21/Jun/2012:18:55:34 +0400] "-" 408 -
113.165.4.22 - - [21/Jun/2012:18:55:34 +0400] "-" 408 -
117.2.165.35 - - [21/Jun/2012:18:55:35 +0400] "-" 408 -
117.2.165.35 - - [21/Jun/2012:18:55:35 +0400] "-" 408 -
117.6.129.169 - - [21/Jun/2012:18:55:36 +0400] "-" 408 -
117.6.129.169 - - [21/Jun/2012:18:55:36 +0400] "-" 408 -
117.6.129.169 - - [21/Jun/2012:18:55:37 +0400] "-" 408 -
117.6.129.169 - - [21/Jun/2012:18:55:37 +0400] "-" 408 -
113.181.48.247 - - [21/Jun/2012:18:55:39 +0400] "-" 408 -
![[Rule]](/hvaonline/templates/viet/images/icon_mini_rule.gif "[Rule]"){kind=icon}
![[Home]](/hvaonline/templates/viet/images/icon_mini_groups.gif "[Home]"){kind=icon}
![[Portal]](/hvaonline/templates/viet/images/icon_mini_portal.gif "[Portal]"){kind=icon}
![[Members]](/hvaonline/templates/viet/images/icon_mini_members.gif "[Members]"){kind=icon}
![[Statistics]](/hvaonline/templates/viet/images/icon_mini_stats.gif "[Statistics]"){kind=icon}
![[Search]](/hvaonline/templates/viet/images/icon_mini_search.gif "[Search]"){kind=icon}
![[Reading Room]](/hvaonline/templates/viet/images/icon_mini_book.gif "[Reading Room]"){kind=icon}
![[Register]](/hvaonline/templates/viet/images/icon_mini_register.gif "[Register]"){kind=icon}
Register![[Login]](/hvaonline/templates/viet/images/icon_mini_login.gif "[Login]"){kind=icon}
Login [
Thảo luận bảo mật
![[Minus]](/hvaonline/templates/viet/images/minus.gif "[Minus]")
![[Plus]](/hvaonline/templates/viet/images/plus.gif "[Plus]")
![[Profile]](/hvaonline/templates/viet/images/en_US/icon_profile.gif "[Profile]"){kind=icon}
![[PM]](/hvaonline/templates/viet/images/en_US/icon_pm.gif "[PM]"){kind=icon}
![[Up]](/hvaonline/templates/viet/images/en_US/icon_up.gif "[Up]"){kind=icon}
![[Print Copy]](/hvaonline/templates/viet/images/en_US/icon_print.gif "[Print Copy]"){kind=icon}
![[Avatar]](/hvaonline/images/avatar/98f618be09e5535e8837a1b238a3663a.png "[Avatar]")
![[digg]](/hvaonline/templates/viet/images/digg.gif "[digg]")
![[delicious]](/hvaonline/templates/viet/images/delicious.gif "[delicious]")
![[google]](/hvaonline/templates/viet/images/google.gif "[google]")
![[yahoo]](/hvaonline/templates/viet/images/yahoo.gif "[yahoo]")
![[technorati]](/hvaonline/templates/viet/images/technorati.gif "[technorati]")
![[reddit]](/hvaonline/templates/viet/images/reddit.gif "[reddit]")
![[stumbleupon]](/hvaonline/templates/viet/images/stumbleupon.gif "[stumbleupon]")