2005-10-17 12:13:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:41: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1000000002.css 2005-10-17 12:13:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:41: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/helppane___9080000001F.js 2005-10-17 12:13:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:42: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1021000204.js 2005-10-17 12:13:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:43: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.154.54:/pidl/93894879/benn_681.jpg 2005-10-17 12:13:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:43: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.178.61:/ADSAdClient31.dll?GetAd?PG=HOTA42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 12:13:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:43: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.178.61:/ADSAdClient31.dll?GetAd?PG=HOTB42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 12:13:55 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:43: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fcompose%3f%26curmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3dc97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3&PI=44363&DI=1059&PS=9621 2005-10-17 12:13:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:44: %PIX-5-304001: 10.0.0.10 Accessed URL 12.130.60.5:/action/msn_hm_en_US_sent_mail_confirmation 2005-10-17 12:13:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:44: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001300x250xHOTM4300003muk/direct;wi.300;hi.250/01 2005-10-17 12:13:57 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:46: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/HoTMaiL?curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=c97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3 2005-10-17 12:13:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:47: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/VON/iview/msnkxvuk0040000006von/direct/01/1241516714?click= 2005-10-17 12:13:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:47: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fpremail%2f7417&PI=44363&DI=1059&PS=74561 2005-10-17 12:13:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:48: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:13:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:48: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.27.16:/adscgen/sta.php?survey_num=205083&site=msnkxvuk0040000006von&code=8174478&ut_sys=atlas 2005-10-17 12:14:00 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:48: %PIX-5-304001: 10.0.0.10 Accessed URL 212.72.49.67:/b/UKMUKMSNUCOB/reflect_160_600_msn_Hfs_001.gif 2005-10-17 12:14:02 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:51: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/getmsg?msg=02D95C7D-C41D-4DC3-91D4-FA0C198A2F1A&start=0&len=39871&imgsafe=n&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=c97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 206.24.172.62:/ads/8315/0000008315_000000000000000221096.gif 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.214:/images/htdocs/tesco/2005/cci_wk34_news/cci_banner_wk34news_01.gif 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.214:/images/htdocs/spacer.gif 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.210:/od/TP96V6/P3OZ3/R3WVCA 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.210:/hd/TP96V6/P3OZ3/R3WVCA/EWFN/YT 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/ 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fHoTMaiL%3fcurmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3dc97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3&PI=44363&DI=1059&PS=8317 2005-10-17 12:14:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:52: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:14:05 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:53: %PIX-5-304001: 10.0.0.10 Accessed URL 64.56.194.108:/UK-msncpa160/?c=http://clk.atdmt.com/go/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600;ai.8680576.8864289;ct.1/01?href= 2005-10-17 12:14:05 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:53: %PIX-5-304001: 10.0.0.10 Accessed URL 64.56.194.106:/images/tz_logo_156x36.gif 2005-10-17 12:14:05 Local1.Notice 10.0.0.253 Oct 17 2005 11:07:53: %PIX-5-304001: 10.0.0.10 Accessed URL 64.56.194.106:/images/pixel1x1.gif 2005-10-17 12:14:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:00: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/compose?type=f&msg=02D95C7D-C41D-4DC3-91D4-FA0C198A2F1A&start=0&len=39871&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=c97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3 2005-10-17 12:14:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:01: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/rte___10000003.asp 2005-10-17 12:14:14 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:02: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/rte_res___908070.js 2005-10-17 12:14:14 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:02: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=&PI=44363&DI=1059&PS=8318 2005-10-17 12:14:14 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:02: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/rte___1000000003.js 2005-10-17 12:14:16 Local1.Notice 10.0.0.253 Oct 17 2005 11:08:04: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/ 2005-10-17 12:15:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:41: %PIX-5-304001: 10.0.0.10 Accessed URL 12.130.60.5:/action/msn_hm_en_US_sent_mail_confirmation 2005-10-17 12:15:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:41: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.178.61:/ADSAdClient31.dll?GetAd?PG=HOTA42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 12:15:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:41: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.178.61:/ADSAdClient31.dll?GetAd?PG=HOTB42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 12:15:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:41: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fcompose%3ftype%3df%26msg%3d02D95C7D%2dC41D%2d4DC3%2d91D4%2dFA0C198A2F1A%26start%3d0%26len%3d39871%26curmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3dc97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3&PI=44363&DI=1059&PS=9621 2005-10-17 12:15:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:42: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001300x250xHOTM4300003muk/direct;wi.300;hi.250/01 2005-10-17 12:15:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:42: %PIX-5-304001: 10.0.0.10 Accessed URL 64.56.194.108:/UK-msncpa300/?c=http://clk.atdmt.com/go/msnnkmuk001300x250xHOTM4300003muk/direct;wi.300;hi.250;ai.8680637.8864288;ct.1/01?href= 2005-10-17 12:15:54 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:43: %PIX-5-304001: 10.0.0.10 Accessed URL 64.56.194.86:/images/tz_logo_105x24.gif 2005-10-17 12:15:55 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:43: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fpremail%2f7417&PI=44363&DI=1059&PS=74561 2005-10-17 12:15:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:44: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:15:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:44: %PIX-5-304001: 10.0.0.10 Accessed URL 212.72.49.67:/b/M3MNCE2SAE2S/msn_p_program_160x600_gen_02.09.05.gif 2005-10-17 12:16:00 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:49: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.210:/od/TP96V6/P3OZ3/R3WVCA 2005-10-17 12:16:00 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:49: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.210:/hd/TP96V6/P3OZ3/R3WVCA/EWFN/YT 2005-10-17 12:16:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:49: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby104fd%2ebay104%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fHoTMaiL%3fcurmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3dc97aaa113f66cae9ca3c18f1c3fca73e3d23bdd7862908ca3a8e3af8f51992e3&PI=44363&DI=1059&PS=8317 2005-10-17 12:16:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:49: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/REP/iview/msnkxwwa0170000050rep/direct/01/16927372?click= 2005-10-17 12:16:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:49: %PIX-5-304001: 10.0.0.10 Accessed URL 209.67.78.4:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:16:02 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:50: %PIX-5-304001: 10.0.0.10 Accessed URL 64.158.223.128:/ad/bn/710-4992-3075-201?mpt= 2005-10-17 12:16:02 Local1.Notice 10.0.0.253 Oct 17 2005 11:09:51: %PIX-5-304001: 10.0.0.10 Accessed URL 213.253.135.38:/ads/710/4992/160x600_top10_v3.gif 2005-10-17 12:16:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:10:00: %PIX-5-304001: 10.0.0.10 Accessed URL 64.28.75.210:/h/ONOPX/P3OZ3/Z8/R3WVCA 2005-10-17 12:16:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:10:00: %PIX-5-304001: 10.0.0.10 Accessed URL 212.140.189.10:/r/e.asp?redir=/winestore/controller.aspx?Bc=0&sid=106A280822AF&Btt=rocky&R=6021934&Btk=Descriptors&edid=R3WVCA-M9X1B1-P3OZ3-ONOPX 2005-10-17 12:16:15 Local1.Notice 10.0.0.253 Oct 17 2005 11:10:03: %PIX-5-304001: 10.0.0.10 Accessed URL 212.140.189.10:/winestore/javascript/util.js 2005-10-17 12:19:36 Local1.Notice 10.0.0.253 Oct 17 2005 11:13:24: %PIX-5-304001: 10.2.0.18 Accessed URL 10.0.0.22:/tsweb/ 2005-10-17 12:19:38 Local1.Notice 10.0.0.253 Oct 17 2005 11:13:26: %PIX-5-304001: 10.2.0.18 Accessed URL 10.0.0.22:/tsweb/win2000l.gif 2005-10-17 12:19:38 Local1.Notice 10.0.0.253 Oct 17 2005 11:13:26: %PIX-5-304001: 10.2.0.18 Accessed URL 10.0.0.22:/tsweb/win2000r.gif 2005-10-17 12:19:40 Local1.Notice 10.0.0.253 Oct 17 2005 11:13:28: %PIX-5-304001: 10.2.0.18 Accessed URL 10.0.0.22:/tsweb/bluebarh.gif 2005-10-17 12:19:40 Local1.Notice 10.0.0.253 Oct 17 2005 11:13:28: %PIX-5-304001: 10.2.0.18 Accessed URL 10.0.0.22:/tsweb/bluebarv.gif 2005-10-17 12:25:57 Local1.Warning 10.0.0.253 Oct 17 2005 11:19:45: %PIX-4-106023: Deny icmp src outside:203.122.12.142 dst inside:213.83.98.5 (type 8, code 0) by access-group "acl_outside" 2005-10-17 12:29:49 Local1.Notice 10.0.0.253 Oct 17 2005 11:23:37: %PIX-5-304001: 10.1.0.14 Accessed URL 10.0.0.22:/tsweb/Default.htm 2005-10-17 12:34:28 Local1.Notice 10.0.0.253 Oct 17 2005 11:28:16: %PIX-5-502103: User priv level changed: Uname: kcceng From: 1 To: 15 2005-10-17 12:34:28 Local1.Notice 10.0.0.253 Oct 17 2005 11:28:16: %PIX-5-111008: User 'kcceng' executed the 'enable' command. 2005-10-17 12:35:37 Local1.Warning 10.0.0.253 Oct 17 2005 11:29:25: %PIX-4-106023: Deny tcp src outside:218.14.92.73/61114 dst inside:213.83.98.5/4899 by access-group "acl_outside" 2005-10-17 12:42:29 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:17: %PIX-5-304001: 10.0.0.15 Accessed URL 216.219.72.36:/ 2005-10-17 12:42:31 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:19: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.179.192:/login.srf?id=2&svc=mail&msppjph=1&tw=0&fs=1&fsa=1&fsat=1296000&lc=2057&_lang=EN 2005-10-17 12:42:36 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:24: %PIX-5-304001: 10.0.0.15 Accessed URL 165.193.120.166:/hm/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 12:42:36 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:24: %PIX-5-304001: 10.0.0.15 Accessed URL 165.193.120.166:/hm/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 12:42:38 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:26: %PIX-5-304001: 10.0.0.15 Accessed URL 165.193.120.166:/hm/footer.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 12:42:38 Local1.Warning 10.0.0.253 Oct 17 2005 11:36:26: %PIX-4-410001: Dropped UDP DNS reply from outside:195.12.1.1/53 to inside:213.83.98.5/1049; packet length 532 bytes exceeds configured limit of 512 bytes 2005-10-17 12:42:38 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:27: %PIX-5-304001: 10.0.0.15 Accessed URL 206.24.172.62:/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 12:42:38 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:27: %PIX-5-304001: 10.0.0.15 Accessed URL 206.24.172.62:/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 12:42:41 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:29: %PIX-5-304001: 10.0.0.15 Accessed URL 207.68.177.126:/c.gif?na=1137&nc=9523&ps=8312&di=936&pi=44363&xtpid=1005&TP=http%3a%2f%2fx.cb2.msn.com%2ffooter.armx&RF=http%3a%2f%2flogin.passport.net%2fuilogin.srf%3flc%3d2057%26id%3d2 2005-10-17 12:42:57 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:45: %PIX-5-304001: 10.0.0.15 Accessed URL 64.4.32.7:/cgi-bin/sbox?t=7*LWxffItDomGzTJb0UbbQjES8SbrgAiEwhivp2c64KA!VwbS8jpYGw2aYPZCftqml*64sDRz08Mwog!g30Arvi6OtwqMWEQsQi4futtdqhJ7tDA8R!wTrwA$$&p=7jgLFPyP*E9Z5JcWEA1ee2qZ*Sl84lq1wxzpRy0haGAbJ*KzTtuYefbA*hTqFwu1GTfnjXSxOnIW0sBg*ztaX6tsgIO8z5ouo5BgfWaxcrdgqpvv1R4JIt3K640QPcTQMfzrDtEkvkatC58Bvz8S6ly58UqXiv896waBRUDtPM!uktyBT7Wyg73hOHJiBDfBu0YV4YmFXueUNYjFF1841TTObn0XeJ9Z9Z&lc=1033&id=2 2005-10-17 12:42:58 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:46: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/hmhome?fti=yes&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=b530236e56af04d0bb34de879e4a480cb8c2b7137e46572460e94aac9094ed3e 2005-10-17 12:42:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:47: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/dasp/EN/hotmail___1000000002.css 2005-10-17 12:42:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:47: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/dasp/EN/helppane___9080000001F.js 2005-10-17 12:42:59 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:48: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/dasp/EN/hotmail___1021000204.js 2005-10-17 12:43:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:49: %PIX-5-304001: 10.0.0.15 Accessed URL 207.68.177.125:/c.gif?RF=&PI=44363&DI=1059&PS=8313 2005-10-17 12:43:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:49: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTB42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=0006400083962101?UC=127 2005-10-17 12:43:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:49: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTA42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=0006400083962101?UC=127 2005-10-17 12:43:02 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:50: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/MUK/iview/msnnkmuk001300x250xHOTH4400003muk/direct;wi.300;hi.250/01 2005-10-17 12:43:02 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:50: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/HoTMaiL?curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=b530236e56af04d0bb34de879e4a480cb8c2b7137e46572460e94aac9094ed3e&fti=yes 2005-10-17 12:43:03 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:52: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/VON/iview/msnkxvuk0040000005von/direct/01/1495990328?click= 2005-10-17 12:43:03 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:52: %PIX-5-304001: 10.0.0.15 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby105fd%2ebay105%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fhmhome%3ffti%3dyes%26curmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3db530236e56af04d0bb34de879e4a480cb8c2b7137e46572460e94aac9094ed3e&PI=44363&DI=1059&PS=74565 2005-10-17 12:43:04 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:52: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:43:05 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:53: %PIX-5-304001: 10.0.0.15 Accessed URL 209.62.176.63:/adi/ebay.uk.msn/;sz=160x600;ord=5885606161648060? 2005-10-17 12:43:11 Local1.Notice 10.0.0.253 Oct 17 2005 11:36:59: %PIX-5-304001: 10.0.0.15 Accessed URL 65.54.224.250:/cgi-bin/getmsg?msg=F359767C-4ED3-4540-8036-DE707E4AC6E7&start=0&len=7523&imgsafe=n&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=b530236e56af04d0bb34de879e4a480cb8c2b7137e46572460e94aac9094ed3e 2005-10-17 12:43:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:00: %PIX-5-304001: 10.0.0.15 Accessed URL 207.68.177.125:/c.gif?RF=http%3a%2f%2fby105fd%2ebay105%2ehotmail%2emsn%2ecom%2fcgi%2dbin%2fHoTMaiL%3fcurmbox%3d00000000%252d0000%252d0000%252d0000%252d000000000001%26a%3db530236e56af04d0bb34de879e4a480cb8c2b7137e46572460e94aac9094ed3e%26fti%3dyes&PI=44363&DI=1059&PS=8317 2005-10-17 12:43:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:00: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/MUK/iview/msnnkmuk001728x90Xhotj4200019muk/direct;wi.728;hi.90/01/1647904964?click= 2005-10-17 12:43:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:01: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/MUK/iview/msnnkmuk001160x600xHOTS4300006muk/direct;wi.160;hi.600/01 2005-10-17 12:43:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:01: %PIX-5-304001: 10.0.0.15 Accessed URL 209.225.0.32:/site=682057/size=728090/bnum=49912840/bins=1/rich=0 2005-10-17 12:43:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:01: %PIX-5-304001: 10.0.0.15 Accessed URL 209.225.0.32:/site=683981/size=160600/bnum=28349560/bins=1/rich=0 2005-10-17 12:43:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:01: %PIX-5-304001: 10.0.0.15 Accessed URL 213.86.246.154:/ad/N530.Advertising.com/B1718010.3;sz=728x90;ord=1301415181 2005-10-17 12:43:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:01: %PIX-5-304001: 10.0.0.15 Accessed URL 213.86.246.154:/viewad/953661/guernsey_target_728_static.gif 2005-10-17 12:43:13 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:02: %PIX-5-304001: 10.0.0.15 Accessed URL 209.67.78.8:/REP/view/dvrtuo2s1140000050rep/direct/01/7491194321 2005-10-17 12:43:16 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:04: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/m/om.cfm/eu/E97C1837-F1FF-9349-E39978C46B26A828/rp/73650 2005-10-17 12:43:17 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:05: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/index.cfm?cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_cb=FE672874-1143-E01E-338B61AD63EB5789&action=showmessage&messageuuid=E976E91C-F1F6-865E-11D39FD5CBABD6C1&threaduuid=E97C17E9-F1FF-9349-E66DC16B660E7ED9 2005-10-17 12:43:18 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:07: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/stylesheets/default.css 2005-10-17 12:43:19 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:07: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/functions.js 2005-10-17 12:43:19 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:07: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.13:/images_resized/B6/2B/B62B5F9E-1143-FD90-EEA5834322EAA42D.jpg 2005-10-17 12:43:19 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:07: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.13:/images_resized/30/E2/30E2DEB8-1143-FD90-EEFF72F6491560CE.jpg 2005-10-17 12:43:21 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:09: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=67937 2005-10-17 12:43:31 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:19: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=87514 2005-10-17 12:43:40 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:28: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/index.cfm?cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_cb=FE67293F-1143-E01E-3342E56627F6ADB1&action=show_match&lookedatplayeruuid=15BC9789-C03D-4441-835251E673463CD8&lookedatplayerid=169664 2005-10-17 12:43:42 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:30: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=20473 2005-10-17 12:43:47 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:35: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/images/show_match.gif 2005-10-17 12:43:48 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:36: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/images/nowtoreadthiscontact_300x23.gif 2005-10-17 12:43:50 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:38: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=79983 2005-10-17 12:44:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:37:49: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=23139 2005-10-17 12:44:12 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:01: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=33293 2005-10-17 12:44:24 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:12: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=90880 2005-10-17 12:44:27 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:15: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=78140 2005-10-17 12:44:32 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:20: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=33124 2005-10-17 12:44:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:27: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=54289 2005-10-17 12:44:41 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:29: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.114:/index.cfm?cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_cb=FE685E65-1143-E01E-3389BA9DB2B59319&action=show_match&lookedatplayeruuid=4853E784-2855-4824-8057EE9216100D26&lookedatplayerid=213167 2005-10-17 12:44:46 Local1.Notice 10.0.0.253 Oct 17 2005 11:38:34: %PIX-5-304001: 10.0.0.15 Accessed URL 217.169.62.102:/pd_icCheck.cfm?no_isloggedin=1&cr_u=FE4F449A-5A27-4A1A-AE4ADC47BB8B7799&cr_p=7C1ED01E-9445-465D-85A751B6E51AEAF1&refresh=5520 2005-10-17 12:45:46 Local1.Notice 10.0.0.253 Oct 17 2005 11:39:34: %PIX-5-502103: User priv level changed: Uname: kcceng From: 1 To: 15 2005-10-17 12:45:46 Local1.Notice 10.0.0.253 Oct 17 2005 11:39:34: %PIX-5-111008: User 'kcceng' executed the 'enable' command. 2005-10-17 12:47:19 Local1.Notice 10.0.0.253 Oct 17 2005 11:41:07: %PIX-5-611103: User logged out: Uname: kcceng 2005-10-17 12:49:14 Local1.Notice 10.0.0.253 Oct 17 2005 11:43:02: %PIX-5-304001: 10.1.0.22 Accessed URL 10.0.0.22:/tsweb/ 2005-10-17 12:49:57 Local1.Notice 10.0.0.253 Oct 17 2005 11:43:46: %PIX-5-304001: 10.1.0.22 Accessed URL 10.0.0.22:/tsweb/ 2005-10-17 12:55:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:49:27: %PIX-5-611103: User logged out: Uname: kcceng 2005-10-17 13:00:05 Local1.Notice 10.0.0.253 Oct 17 2005 11:53:53: %PIX-5-304001: 10.0.0.22 Accessed URL 213.253.135.40:/Products/CommonUpdater/catalog.z 2005-10-17 13:00:20 Local1.Warning 10.0.0.253 Oct 17 2005 11:54:08: %PIX-4-106023: Deny udp src outside:61.233.40.209/42636 dst inside:213.83.98.5/1028 by access-group "acl_outside" 2005-10-17 13:03:33 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:21: %PIX-5-304001: 10.0.0.10 Accessed URL 207.46.20.30:/isapi/redir.dll?prd=ie&pver=6&ar=msnhome 2005-10-17 13:03:33 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:21: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.154.54:/ 2005-10-17 13:03:34 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:22: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/adj/N2806.MSN.ilevel/B1720136.3;abr=!ie;sz=300x250;ord=18392? 2005-10-17 13:03:34 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:22: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/adi/N2806.MSN.ilevel/B1720136.3;sz=300x250;ord=18392? 2005-10-17 13:03:34 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:23: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.150.86:/c.gif?DI=179&PI=7441&TP=http://www.msn.co.uk/Default.asp&PS=70635&NA=1154&NC=10009 2005-10-17 13:03:34 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:23: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/1042493/orange_freeSIM_300x250.swf?clickTag=http%3A//ad.uk.doubleclick.net/click%253Bh%3Dv5%7C3314%7C3%7C0%7C%252a%7Ck%253B22230173%253B0-0%253B0%253B12009782%253B4307-300%7C250%253B12644693%7C12662589%7C1%253B%253B%257Esscs%253D%253fhttp%3A//www.orange.co.uk/freesimpack 2005-10-17 13:03:37 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:25: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.148.125:/0nwengb0/00/02??PS=70635&NC=10009&CE=11&CP=1252&HL=HOTMAIL 2005-10-17 13:03:37 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:25: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.183.192:/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&lc=2057&ru=http%3A%2F%2Fwww%2Ehotmail%2Emsn%2Ecom%2Fcgi%2Dbin%2Fsbox%3F%5Flang%3DEN%266c6f7264%3Dhttp%3A%2F%2Fwww%2Emsn%2Eco%2Euk 2005-10-17 13:03:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:27: %PIX-5-304001: 10.0.0.10 Accessed URL 66.35.214.30:/hm/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:03:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:27: %PIX-5-304001: 10.0.0.10 Accessed URL 66.35.214.30:/hm/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:03:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:28: %PIX-5-304001: 10.0.0.10 Accessed URL 66.35.214.30:/hm/footer.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:03:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:28: %PIX-5-304001: 10.0.0.10 Accessed URL 206.24.172.62:/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:03:39 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:28: %PIX-5-304001: 10.0.0.10 Accessed URL 206.24.172.62:/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:03:40 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:28: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.126:/c.gif?na=1137&nc=9523&ps=8312&di=936&pi=44363&xtpid=1005&TP=http%3a%2f%2fx.cb2.msn.com%2ffooter.armx&RF=http%3a%2f%2flogin.passport.net%2fuilogin.srf%3flc%3d2057%26id%3d2 2005-10-17 13:03:48 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:36: %PIX-5-304001: 10.0.0.10 Accessed URL 64.4.33.7:/cgi-bin/sbox?t=7TUz9nGBdHECmjYYnQQZA7SKkg3F4BTLcopzrLZ*84sVy9JShcQ1NztdQ9dGwUOR37KAIvWEPHX1462uy1aGddhIQVx8uFGjqrcqgC5kb2GKf5Xd87tA8wyV5pBI4tH4E3&p=7a1coCV5mGEItOmHpbYrBh4WUcmXTgiqCisUYE7ElVg1xvddcW24ORl1SbhCIraRqXTfyRb0suXAqAZIaF17urBmx9jPjrGDFAdspV2Igelb*TpioeTuswBQhXi!chxvGPV5eZLYuRCq!!yuidu8izHd9IFQU3Ey2cRYQwLDQmtVLTNLrkpt9E01AAUsKDLstaBJTeU3eiyZximlVMr753UA$$&_lang=EN&6c6f7264=http://www.msn.co.uk 2005-10-17 13:03:50 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:38: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/hmhome?fti=yes&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=c97aaa113f66cae9ca3c18f1c3fca73ecc53e16c0cc8eec9da2563885aacbb65 2005-10-17 13:03:51 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:39: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1000000002.css 2005-10-17 13:03:52 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:40: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/helppane___9080000001F.js 2005-10-17 13:03:53 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:41: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1021000204.js 2005-10-17 13:03:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:44: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.124:/c.gif?RF=&PI=44363&DI=1059&PS=8313 2005-10-17 13:03:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:45: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTA42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 13:03:56 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:45: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTB42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 13:04:00 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:49: %PIX-5-304001: 10.0.0.10 Accessed URL 195.154.195.154:/ad/N1379.MSN.ES/B1598525.2;sz=300x250;ord=35211633? 2005-10-17 13:04:01 Local1.Notice 10.0.0.253 Oct 17 2005 11:57:49: %PIX-5-304001: 10.0.0.10 Accessed URL 195.154.195.154:/viewad/455396/0_10percent300x250anim.gif 2005-10-17 13:06:40 Local1.Warning 10.0.0.253 Oct 17 2005 12:00:28: %PIX-4-410001: Dropped UDP DNS reply from outside:195.12.1.1/53 to inside:213.83.98.5/1049; packet length 844 bytes exceeds configured limit of 512 bytes 2005-10-17 13:06:41 Local1.Notice 10.0.0.253 Oct 17 2005 12:00:29: %PIX-5-304001: 10.0.0.15 Accessed URL 68.142.84.180:/pub/adobe/acrobat/js/6.x/rdr/win/enu/DataScript.js 2005-10-17 13:06:42 Local1.Notice 10.0.0.253 Oct 17 2005 12:00:30: %PIX-5-304001: 10.0.0.15 Accessed URL 68.142.84.180:/pub/adobe/acrobat/js/6.x/rdr/win/enu/CodeScript.js 2005-10-17 13:06:43 Local1.Notice 10.0.0.253 Oct 17 2005 12:00:31: %PIX-5-304001: 10.0.0.15 Accessed URL 68.142.84.180:/pub/adobe/acrobat/js/6.x/rdr/win/enu/UIScript.js 2005-10-17 13:06:44 Local1.Notice 10.0.0.253 Oct 17 2005 12:00:33: %PIX-5-304001: 10.0.0.15 Accessed URL 68.142.84.180:/pub/adobe/acrobat/js/6.x/rdr/win/enu/ResourceScript.js 2005-10-17 13:07:11 Local1.Warning 10.0.0.253 Oct 17 2005 12:00:59: %PIX-4-106023: Deny icmp src outside:203.122.12.142 dst inside:213.83.98.5 (type 8, code 0) by access-group "acl_outside" 2005-10-17 13:15:31 Local1.Warning 10.0.0.253 Oct 17 2005 12:09:20: %PIX-4-106023: Deny udp src outside:218.204.97.118/35753 dst inside:213.83.98.5/1028 by access-group "acl_outside" 2005-10-17 13:15:31 Local1.Warning 10.0.0.253 Oct 17 2005 12:09:20: %PIX-4-106023: Deny udp src outside:218.204.97.118/35753 dst inside:213.83.98.5/1030 by access-group "acl_outside" 2005-10-17 13:15:31 Local1.Warning 10.0.0.253 Oct 17 2005 12:09:20: %PIX-4-106023: Deny udp src outside:218.204.97.118/35753 dst inside:213.83.98.5/1029 by access-group "acl_outside" 2005-10-17 13:28:13 Local1.Notice 10.0.0.253 Oct 17 2005 12:22:01: %PIX-5-304001: 10.0.0.7 Accessed URL 66.102.9.99:/ 2005-10-17 13:28:40 Local1.Notice 10.0.0.253 Oct 17 2005 12:22:28: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/ 2005-10-17 13:28:41 Local1.Notice 10.0.0.253 Oct 17 2005 12:22:29: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/images/trans_spacer.gif 2005-10-17 13:29:33 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:21: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/comfort.htm 2005-10-17 13:29:35 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:23: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/images/lounge1.jpg 2005-10-17 13:30:02 Local1.Warning 10.0.0.253 Oct 17 2005 12:23:50: %PIX-4-410001: Dropped UDP DNS reply from outside:195.12.1.1/53 to inside:213.83.98.5/1049; packet length 528 bytes exceeds configured limit of 512 bytes 2005-10-17 13:30:03 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:51: %PIX-5-304001: 10.0.0.10 Accessed URL 207.46.19.60:/isapi/redir.dll?prd=ie&pver=6&ar=msnhome 2005-10-17 13:30:04 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:53: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.154.54:/ 2005-10-17 13:30:06 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:54: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.150.86:/c.gif?DI=179&PI=7441&TP=http://www.msn.co.uk/Default.asp&PS=70635&NA=1154&NC=10009 2005-10-17 13:30:10 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:58: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/adj/N2806.MSN.ilevel/B1720136.3;abr=!ie;sz=300x250;ord=23216? 2005-10-17 13:30:10 Local1.Notice 10.0.0.253 Oct 17 2005 12:23:58: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/adi/N2806.MSN.ilevel/B1720136.3;sz=300x250;ord=23216? 2005-10-17 13:30:11 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:00: %PIX-5-304001: 10.0.0.10 Accessed URL 213.86.246.154:/1042493/orange_freeSIM_300x250.swf?clickTag=http%3A//ad.uk.doubleclick.net/click%253Bh%3Dv5%7C3314%7C3%7C0%7C%252a%7Ck%253B22230173%253B0-0%253B0%253B12009782%253B4307-300%7C250%253B12644693%7C12662589%7C1%253B%253B%257Esscs%253D%253fhttp%3A//www.orange.co.uk/freesimpack 2005-10-17 13:30:12 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:00: %PIX-5-304001: 10.0.0.10 Accessed URL 213.199.148.125:/0nwengb0/00/02??PS=70635&NC=10009&CE=11&CP=1252&HL=HOTMAIL 2005-10-17 13:30:14 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:02: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.179.192:/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&lc=2057&ru=http%3A%2F%2Fwww%2Ehotmail%2Emsn%2Ecom%2Fcgi%2Dbin%2Fsbox%3F%5Flang%3DEN%266c6f7264%3Dhttp%3A%2F%2Fwww%2Emsn%2Eco%2Euk 2005-10-17 13:30:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:07: %PIX-5-304001: 10.0.0.10 Accessed URL 212.162.1.125:/hm/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:30:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:07: %PIX-5-304001: 10.0.0.10 Accessed URL 212.162.1.125:/hm/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:30:20 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:09: %PIX-5-304001: 10.0.0.10 Accessed URL 212.162.1.125:/hm/footer.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:30:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:09: %PIX-5-304001: 10.0.0.10 Accessed URL 206.24.172.62:/header.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:30:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:09: %PIX-5-304001: 10.0.0.10 Accessed URL 206.24.172.62:/signup.armx?lid=2057&cbpage=login&lc=2057&x=3.100.2368.0 2005-10-17 13:30:23 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:11: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.140.158:/c.gif?na=1137&nc=9523&ps=8312&di=936&pi=44363&xtpid=1005&TP=http%3a%2f%2fx.cb2.msn.com%2ffooter.armx&RF=http%3a%2f%2flogin.passport.net%2fuilogin.srf%3flc%3d2057%26id%3d2 2005-10-17 13:30:26 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:14: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/consultation.htm 2005-10-17 13:30:27 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:15: %PIX-5-304001: 10.0.0.7 Accessed URL 212.78.78.18:/images/consult.gif 2005-10-17 13:30:27 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:15: %PIX-5-304001: 10.0.0.10 Accessed URL 64.4.33.7:/cgi-bin/sbox?t=74klEreh1HPW9d9goxKXPK8w9dovdxt5V63kNyZORh8ss*EEjw3oGG*7Nih5Cq3rAjbrfeN8pPMwfj7kRm53Sn7XLA6LgkY!AYHJebe73I!5ittkIiZFLrrHh9zKaW*jjw&p=7ncwwKHnxGopknBeAJS*edraCAPz3ndw7RFQuAnq1YnY5Grk2FEVOlkPUloX98JkoTGagtbt1hPsT4k8mzrwkpkTGi*ZUMhap!rGo6wtBH!pluVGFS1oqGc!62wNBPsas5jlW4j6UW3Z9laqTx1izv6EA!QG1f9O6SQBx60uLNEhvYiwZRzx5lv1nhFgdifCdTFeM4rGceArdtjEGlWFW47w$$&_lang=EN&6c6f7264=http://www.msn.co.uk 2005-10-17 13:30:29 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:18: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/hmhome?fti=yes&curmbox=00000000%2d0000%2d0000%2d0000%2d000000000001&a=c97aaa113f66cae9ca3c18f1c3fca73e6a989beb84479d5c71fb0eb4fb2456bd 2005-10-17 13:30:31 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:19: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1000000002.css 2005-10-17 13:30:31 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:19: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/helppane___9080000001F.js 2005-10-17 13:30:32 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:21: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.175.250:/cgi-bin/dasp/EN/hotmail___1021000204.js 2005-10-17 13:30:35 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:23: %PIX-5-304001: 10.0.0.10 Accessed URL 207.68.177.124:/c.gif?RF=&PI=44363&DI=1059&PS=8313 2005-10-17 13:30:36 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:24: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTB42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 13:30:36 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:24: %PIX-5-304001: 10.0.0.10 Accessed URL 65.54.194.118:/ADSAdClient31.dll?GetAd?PG=HOTA42?AP=1447?TF=adframe?SC=1447?LOC=I?ID=00067FFE8F5C9BE1?UC=127 2005-10-17 13:30:39 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:28: %PIX-5-304001: 10.0.0.10 Accessed URL 12.130.12.31:/ix.e?jss&s=561586&u=&n=1211238637 2005-10-17 13:30:42 Local1.Notice 10.0.0.253 Oct 17 2005 12:24:30: %PIX-5-304001: 10.0.0.10 Accessed URL 213.253.135.40://adv/pandguk/^6654/^439877/url-Pringles_300x250_maglass_005.swf?siteid=561586&adid=439877&cltk=&xtrack=xxxtrackxx&mb=http://ak.bluestreak.com//adv/pandguk/^6654/^439877/&cp=http://s0b.bluestreak.com/flashtracking/tracking_&url=http%3A%2F%2Fs0b%2Ebluestreak%2Ecom%2Fix%2Ee%3Ftr%26s%3D561586%26a%3D439877%26u%3Dhttp%3A%2F%2Fwww%2Eminipringles%2Eco%2Euk 2005-10-17 13:31:52 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:40: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/ 2005-10-17 13:31:55 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:43: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/common/style/style.css 2005-10-17 13:32:05 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:54: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/mkt/05oct/home_bcol_gradient2.jpg 2005-10-17 13:32:05 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:54: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/mkt/05oct/home_acol_inspirator_111005.jpg 2005-10-17 13:32:11 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:59: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/icons/htl_32x24.gif 2005-10-17 13:32:11 Local1.Notice 10.0.0.253 Oct 17 2005 12:25:59: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/icons/cars_32x24.gif 2005-10-17 13:32:11 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:00: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/spaceit.gif 2005-10-17 13:32:13 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:01: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_corner1.gif 2005-10-17 13:32:13 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:02: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/6699CCdot.gif 2005-10-17 13:32:14 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:03: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_corner2.gif 2005-10-17 13:32:15 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:03: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/tellmemore.gif 2005-10-17 13:32:16 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:04: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_corner3.gif 2005-10-17 13:32:17 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:05: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_corner4.gif 2005-10-17 13:32:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:07: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_line_l.gif 2005-10-17 13:32:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:08: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/common/booking-engine/blu_line_r.gif 2005-10-17 13:32:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:09: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/mkt/05oct/citybreak.jpg 2005-10-17 13:32:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:09: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/mkt/05oct/wintersun.jpg 2005-10-17 13:32:22 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:10: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/mkt/05oct/skideal.jpg 2005-10-17 13:32:22 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:10: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/next_cal.gif 2005-10-17 13:32:23 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:11: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s82096353772155?[AQB]&ndh=1&t=17/9/2005%2013%3A32%3A21%201%20-60&ce=ISO8859-1&pageName=Home%20Page&g=http%3A//www.expedia.co.uk/default.aspx&c1=Expedia.co.uk%20Travel%20%3E%20Book%20cheap%20flights%2C%20travel%2C%20hotels%20%26%20package%20holidays&c12=16e5a1c4caaf48ebb5818dc855820727&s=800x600&c=32&j=1.3&v=Y&k=Y&bw=800&bh=435&ct=lan&hp=N&[AQE] 2005-10-17 13:32:26 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:14: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s82096353772155?[AQB]&pccr=true&&ndh=1&t=17/9/2005%2013%3A32%3A21%201%20-60&ce=ISO8859-1&pageName=Home%20Page&g=http%3A//www.expedia.co.uk/default.aspx&c1=Expedia.co.uk%20Travel%20%3E%20Book%20cheap%20flights%2C%20travel%2C%20hotels%20%26%20package%20holidays&c12=16e5a1c4caaf48ebb5818dc855820727&s=800x600&c=32&j=1.3&v=Y&k=Y&bw=800&bh=435&ct=lan&hp=N&[AQE] 2005-10-17 13:32:46 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:35: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/months/w6d31.gif 2005-10-17 13:33:11 Local1.Notice 10.0.0.253 Oct 17 2005 12:26:59: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/pub/agent.dll?qscr=cmsh&CMBTX_0_rgnm=frankfurt&dsct=&dnam=frankfurt&dlvl=&rtmn=&rtmx=&dcty=London+%28LON+%2D+All+Airports%29&ddpt1=1/12/2005&tdpt1=362&drtn1=6/12/2005&trtn1=362&cadu1=5&cSei1=0&cSen=0&cmbt=2&rfrr=-13027&&zz=1129552389912& 2005-10-17 13:33:14 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:02: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/pub/agent.dll?qscr=cach&hfnm=styleall.htx&flag=j&zz=7 2005-10-17 13:33:18 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:06: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/ads/UK/UK-Iberia/051010_iberia_468x60.gif 2005-10-17 13:33:18 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:06: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/brand/2005/bg_header.jpg 2005-10-17 13:33:18 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:06: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/pub/agent.dll?qscr=cach&hfnm=jscali.htx&flag=j&zz=2 2005-10-17 13:33:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:09: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/bullet.gif 2005-10-17 13:33:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:09: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/holidays/acol_family_hotels.gif 2005-10-17 13:33:23 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:11: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/holidayshop/images/icon_flight_hotel.jpg 2005-10-17 13:33:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:12: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s84050030481428?[AQB]&ndh=1&t=17/9/2005%2013%3A33%3A24%201%20-60&ce=ISO8859-1&pageName=HTX_CMBSRCH&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26CMBTX_0_rgnm%3Dfrankfurt%26dsct%3D%26dnam%3Dfrankfurt%26dlvl%3D%26rtmn%3D%26rtmx%3D%26dcty%3DLondon%2B%2528LON%2B%252D%2BAll%2BAirports%2529%26ddpt1%3D1/12/2005%26tdpt1%3D362%26drtn1%3D6/12/2005%26trtn1%3D362%26cadu1%3D5%26cSei1%3D0%26cSen%3D0%26cmb 2005-10-17 13:34:05 Local1.Notice 10.0.0.253 Oct 17 2005 12:27:53: %PIX-5-304001: 10.0.0.9 Accessed URL 66.102.9.104:/ 2005-10-17 13:34:17 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:05: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/ratings/hotstar30.gif 2005-10-17 13:34:17 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:05: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/20000/17100/17093/17093_15_t.jpg 2005-10-17 13:34:18 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:06: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/ratings/hotstar50.gif 2005-10-17 13:34:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:07: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/tip_icon.gif 2005-10-17 13:34:19 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:07: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/30000/22900/22851/22851_5_t.jpg 2005-10-17 13:34:20 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:08: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/920000/912800/912770/912770_1_t.jpg 2005-10-17 13:34:20 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:08: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s86531703568032?[AQB]&ndh=1&t=17/9/2005%2013%3A34%3A19%201%20-60&ce=ISO8859-1&pageName=HTX_CMBFIND&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26itty%3D%26itid%3D%26itdx%3D%26ecid%3D&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26CMBTX_0_rgnm%3Dfrankfurt%26dsct%3D%26dnam%3Dfrankfurt%26dlvl%3D%26rtmn%3D%26rtmx%3D%26dcty%3DLondon%2B%2528LON%2B%252D%2BAll%2BAirports%2529%26ddpt1%3D1 2005-10-17 13:34:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:09: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/90000/83400/83359/83359_3_t.jpg 2005-10-17 13:34:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:09: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/20000/11600/11572/11572_11_t.jpg 2005-10-17 13:34:22 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:10: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/560000/552100/552062/552062_9_t.jpg 2005-10-17 13:34:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:12: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/20000/10500/10446/10446_10_t.jpg 2005-10-17 13:34:25 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:13: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/2000000/1060000/1057200/1057181/1057181_9_t.jpg 2005-10-17 13:34:26 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:14: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/1000000/40000/34400/34375/34375_1_t.jpg 2005-10-17 13:34:28 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:16: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/hotels/2000000/1270000/1268300/1268289/1268289_5_t.jpg 2005-10-17 13:34:44 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:33: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/MoneyTaxAndBenefits/BenefitsTaxCreditsAndOtherSupport/fs/en 2005-10-17 13:34:45 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:33: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/css/core_alternate.css 2005-10-17 13:34:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:36: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/img/department_logo_print.gif 2005-10-17 13:34:49 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:37: %PIX-5-304001: 10.0.0.9 Accessed URL 212.100.250.8:/im/1B2F0ABD5A6ABAA649CDEF1185E1FA06/1351_Directgov/1351_2.js 2005-10-17 13:34:59 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:47: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s82701517454132?[AQB]&ndh=1&t=17/9/2005%2013%3A34%3A59%201%20-60&ce=ISO8859-1&pageName=HTX_COMBO_DESTINATION_DISAMBIG&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26itid%3D%26itty%3D%26ecid%3D&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26itty%3D%26itid%3D%26itdx%3D%26ecid%3D&ch=vacation%20packages&server=www.expedia.co.uk&h1=HTX%2Cvacation%20packages&c12=16E5A1C4CAAF48EBB5818DC8 2005-10-17 13:35:00 Local1.Notice 10.0.0.253 Oct 17 2005 12:28:48: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/err_tl.gif 2005-10-17 13:35:15 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:04: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s81179190480077?[AQB]&ndh=1&t=17/9/2005%2013%3A35%3A15%201%20-60&ce=ISO8859-1&pageName=HTX_COMBO_DESTINATION_DISAMBIG&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26qsfr%3D%26itid%3D%26itdx%3D%26itty%3D%26ecid%3D%26dsct%3D%26fpri%3D0%26aasl%3D1%26subm%3D1&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26itid%3D%26itty%3D%26ecid%3D&ch=vacation%20packages&server=www.expedia.co.uk&h1=H 2005-10-17 13:35:21 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:09: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s8282315369782?[AQB]&ndh=1&t=17/9/2005%2013%3A35%3A21%201%20-60&ce=ISO8859-1&pageName=HTX_COMBO_DESTINATION_DISAMBIG&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26qsfr%3D%26itid%3D%26itdx%3D%26itty%3D%26ecid%3D%26dsct%3D%26fpri%3D0%26aasl%3D1%26subm%3D1&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26itid%3D%26itty%3D%26ecid%3D&pe=lnk_e&pev1=http%3A//www.expedia.co.uk/pub/agent.dl 2005-10-17 13:35:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:12: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/common/promos/banner.asp?banner_type=holidays 2005-10-17 13:35:25 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:13: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s83376105601215?[AQB]&ndh=1&t=17/9/2005%2013%3A35%3A25%201%20-60&ce=ISO8859-1&pageName=HTX_CMBSRCH&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh%26qsfr%3D%26itid%3D%26itdx%3D%26itty%3D%26ecid%3D%26dsct%3D%26fpri%3D0%26aasl%3D1%26subm%3D1&ch=vacation%20packages&server=www.expedia.co.uk&h1=HTX%2Cvacation%20packages&c12=16E5A1C4CAAF48EBB581 2005-10-17 13:35:28 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:16: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/ads/UK/UK-Lufthansa/051005_lufthansa_flights_468x60.gif 2005-10-17 13:35:29 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:17: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/ads/UK/UK-Iberia/051010_iberia_120x60.gif 2005-10-17 13:35:29 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:18: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/common/promos/banner.asp?banner_type=flights 2005-10-17 13:35:31 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:19: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/eta/oneway.gif 2005-10-17 13:35:32 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:20: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s87079667142863?[AQB]&ndh=1&t=17/9/2005%2013%3A35%3A31%201%20-60&ce=ISO8859-1&pageName=HTX_FLTSRCH_RT&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dfltw%26shps%3D1%26rfrr%3D-409&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dcmsh&ch=flights&server=www.expedia.co.uk&h1=HTX%2Cflights&c12=16E5A1C4CAAF48EBB5818DC855820727&c16=-409&s=800x600&c=32&j=1.3&v=Y&k=Y&bw=800&bh=435&ct=lan&hp=N&[AQE] 2005-10-17 13:35:43 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:31: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/MoneyTaxAndBenefits/BenefitsTaxCreditsAndOtherSupport/TaxCredits/fs/en 2005-10-17 13:35:44 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:32: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/MoneyTaxAndBenefits/BenefitsTaxCreditsAndOtherSupport/TaxCredits/fs/("/pages/css/standard_fix_ie51mac.css") 2005-10-17 13:35:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:39: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/MoneyTaxAndBenefits/BenefitsTaxCreditsAndOtherSupport/TaxCredits/TaxCreditsArticles/fs/("/pages/css/standard_fix_ie51mac.css") 2005-10-17 13:35:52 Local1.Notice 10.0.0.253 Oct 17 2005 12:29:41: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/default/img/link_external.gif 2005-10-17 13:36:22 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:10: %PIX-5-304001: 10.0.0.7 Accessed URL 12.130.60.5:/action/expedia_flight_search_ssl 2005-10-17 13:36:22 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:10: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/pub/agent.dll?qscr=cach&hfnm=jspopupi.htx&flag=j&zz=1 2005-10-17 13:36:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:12: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/pubspec/images/airlines/smBA.gif 2005-10-17 13:36:25 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:13: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s8932216134981?[AQB]&ndh=1&t=17/9/2005%2013%3A36%3A25%201%20-60&ce=ISO8859-1&pageName=HTX_FLTBP1&g=http%3A//www.expedia.co.uk/pub/agent.dll%3Ftovr%3D-1294757293%26ps3u%3D&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Fqscr%3Dfltw%26shps%3D1%26rfrr%3D-409&ch=flights&server=www.expedia.co.uk&h1=HTX%2Cflights&c12=16E5A1C4CAAF48EBB5818DC855820727&s=800x600&c=32&j=1.3&v=Y&k=Y&bw=800&bh=435&ct=lan&hp=N&[AQE] 2005-10-17 13:36:28 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:16: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/Bfsl1/BenefitsAndFinancialSupport/BenefitsAndFinancialSupportArticles/fs/en?CONTENT_ID=10018929&chk=UPfIRv 2005-10-17 13:36:28 Local1.Notice 10.0.0.253 Oct 17 2005 12:30:17: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/Bfsl1/BenefitsAndFinancialSupport/BenefitsAndFinancialSupportArticles/fs/("/pages/css/standard_fix_ie51mac.css") 2005-10-17 13:37:23 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:11: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/css-p/layout_102.css 2005-10-17 13:37:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:12: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/default/img/dot_ff6600.gif 2005-10-17 13:37:33 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:21: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/MoneyTaxAndBenefits/BenefitsTaxCreditsAndOtherSupport/TaxCredits/TaxCreditsArticles/fs/("/pages/css/standard_fix_ie51mac.css") 2005-10-17 13:37:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:38: %PIX-5-304001: 10.0.0.9 Accessed URL 195.33.102.83:/pages/default/img/link_external.gif 2005-10-17 13:37:51 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:39: %PIX-5-304001: 10.0.0.9 Accessed URL 195.171.114.178:/enq/main.htm 2005-10-17 13:37:53 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:41: %PIX-5-304001: 10.0.0.9 Accessed URL 195.171.114.170:/enq/main.htm 2005-10-17 13:37:54 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:42: %PIX-5-304001: 10.0.0.9 Accessed URL 195.171.114.170:/styles.css 2005-10-17 13:37:54 Local1.Notice 10.0.0.253 Oct 17 2005 12:31:42: %PIX-5-304001: 10.0.0.9 Accessed URL 195.171.114.170:/ir_supp.css 2005-10-17 13:38:12 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:00: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/places/?rfrr=-358 2005-10-17 13:38:13 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:02: %PIX-5-304001: 10.0.0.7 Accessed URL 216.251.114.82:/daily/home/includes/seostyle/style.css 2005-10-17 13:38:17 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:05: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/graphics/places/boxtop_destofweek.gif 2005-10-17 13:38:17 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:05: %PIX-5-304001: 10.0.0.7 Accessed URL 217.163.16.153:/media/content/expuk/images/124x125/RF/thumb_anu.jpg 2005-10-17 13:38:18 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:06: %PIX-5-304001: 10.0.0.7 Accessed URL 213.254.248.4:/pub/flashplayer/update/current/xml/version_en_win_ax.xml 2005-10-17 13:38:20 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:08: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s86109334841383?[AQB]&ndh=1&t=17/9/2005%2013%3A38%3A19%201%20-60&ce=ISO8859-1&pageName=daily/places/default&g=http%3A//www.expedia.co.uk/daily/places/%3Frfrr%3D-358&r=http%3A//www.expedia.co.uk/pub/agent.dll%3Ftovr%3D-1294757293%26ps3u%3D&ch=Destinations&events=event1&c1=Expedia.co.uk%20Travel%20%3E%20Last%20minute%20bargains%20on%20Hotels%2C%20Flights%20%26%20Car%20hire&h1=daily%2Cplaces%2C&c12=16E5A1C4 2005-10-17 13:38:24 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:12: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s81154760808317?[AQB]&ndh=1&t=17/9/2005%2013%3A38%3A23%201%20-60&ce=ISO8859-1&pageName=daily/airports/default&g=http%3A//www.expedia.co.uk/daily/airports/%3Frfrr%3D-1467&r=http%3A//www.expedia.co.uk/daily/places/%3Frfrr%3D-358&ch=Destinations&events=event1&c1=Expedia.co.uk%20Travel%20%3E%20Airport%20Guides&h1=daily%2Cairports%2C&c12=16E5A1C4CAAF48EBB5818DC855820727&c16=-1467&s=800x600&c=32&j=1.3&v=Y&k=Y& 2005-10-17 13:38:37 Local1.Notice 10.0.0.253 Oct 17 2005 12:32:25: %PIX-5-304001: 10.0.0.7 Accessed URL 216.52.17.236:/b/ss/expedia3/1/G.7-Pd-R/s87059967652959?[AQB]&ndh=1&t=17/9/2005%2013%3A38%3A36%201%20-60&ce=ISO8859-1&pageName=daily/airports/p45912&g=http%3A//www.expedia.co.uk/daily/airports/P45912.asp&r=http%3A//www.expedia.co.uk/daily/airports/%3Frfrr%3D-1467&ch=Destinations&events=event1&c1=Expedia.co.uk%20Travel%20Airport%20Guide%20-%20Frankfurt%20Airport&h1=daily%2Cairports%2C&c12=16E5A1C4CAAF48EBB5818DC855820727&s=800x600&c=32&j=1.3&v= 2005-10-17 13:39:38 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:26: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/ 2005-10-17 13:39:39 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:27: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/default/rubrik/2/2222.htm 2005-10-17 13:39:40 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:28: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/style.css 2005-10-17 13:39:42 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:30: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/include/util.js 2005-10-17 13:39:43 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:31: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/include/expressflugsuche.js 2005-10-17 13:39:45 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:33: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/images/bullet_nav_000099.gif 2005-10-17 13:39:45 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:33: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/images/bullet_nav_339999.gif 2005-10-17 13:39:46 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:34: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/images/bullet_nav_657CA4.gif 2005-10-17 13:39:46 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:34: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/images/bullet_nav_999999.gif 2005-10-17 13:39:46 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:35: %PIX-5-304001: 10.0.0.7 Accessed URL 212.172.60.154:/adj/flughafen-frankfurt.de/homepage;dcopt=ist;sz=468x60;ord=9? 2005-10-17 13:39:47 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:35: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/frankfurt-airport.de/images/bullet_nav_ff6600.gif 2005-10-17 13:39:47 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/abfliegen/rubrik/3/3589.abfliegen-frankfurt-airport~de_svg_mainnav~xsl.jpg 2005-10-17 13:39:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 212.172.60.154:/imp;v3;j;22013839;1-0;0;7281291;0|0;12520842|12538738|1;;cs=g%3fhttp://ad.de.doubleclick.net/dot.gif?2563303 2005-10-17 13:39:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 62.26.220.2:/sel?cmd=jsc&kid=205725&dat=451663&xl=468&yl=60&opt=0&cntadd=1&cnturl=http://ad.de.doubleclick.net/click%3Bh=v5|3314|3|0|%2a|a%3B22202473%3B0-0%3B0%3B7281291%3B1-468|60%3B12674283|12692179|1%3B%3B%7Esscs%3D%3f[url_plain]&rdm=2563303? 2005-10-17 13:39:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 80.85.194.225:/extern/?AffiliateID=X100208&ActionID=42-817421-12-21-11706&IWL=741&Template=landing/otto_des_monats 2005-10-17 13:39:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/abfliegen/rubrik/3/3589.abfliegen-frankfurt-airport~de_svg_mainnav-active~xsl.jpg 2005-10-17 13:39:48 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:36: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/ankommen/rubrik/3/3590.ankommen-frankfurt-airport~de_svg_mainnav~xsl.jpg 2005-10-17 13:39:49 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:37: %PIX-5-304001: 10.0.0.7 Accessed URL 212.172.60.154:/dot.gif?2563303 2005-10-17 13:39:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:38: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/ankommen/rubrik/3/3590.ankommen-frankfurt-airport~de_svg_mainnav-active~xsl.jpg 2005-10-17 13:39:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:38: %PIX-5-304001: 10.0.0.7 Accessed URL 217.110.112.94:/cms/umsteigen/rubrik/3/3591.umsteigen-frankfurt-airport~de_svg_mainnav~xsl.jpg 2005-10-17 13:39:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:38: %PIX-5-304001: 10.0.0.7 Accessed URL 62.26.121.2:/dat/bgf/200510/13/051011_lh_149_468x60_herbstaktion_kont_mb.swf?clicktag=http%3A//as1.falkag.de/server/link.asp%3Fcmd%3Durl%26auc%3D1%26iid%3D451663%26kid%3D205725%26bid%3D755588%26dmn%3Dmob008-26784-net-adsl-04.altohiway.com%26dlv%3D252%2C33103%2C451663%2C205725%2C755588%26sta%3D%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C0%2C6%2C0%2C41049%2C7153%2C6429%2C596%2C0%26flg%3D1%26cnturl%3Dhttp%253A%252F%252Fad.de.doubleclick.net%252Fclick%253Bh%253 2005-10-17 13:39:50 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:38: %PIX-5-304001: 10.0.0.7 Accessed URL 62.26.220.5:/dat/bgf/trpix.gif?kid=205725&bid=755588&iid=451663&uid=1&bls3=111111A&dlv=252,33103,451663,205725,755588&dmn=mob008-26784-net-adsl-04.altohiway.com&sta=,,,,,,,,,,0,6,0,41049,7153,6429,596,0&rdm=6397.913022959238&scx=800&scy=600&scc=32&jav=1 2005-10-17 13:39:51 Local1.Notice 10.0.0.253 Oct 17 2005 12:33:39: %PIX-5-304001: 10.0.0.7 Accessed URL 62.80.2.70:/cnt.php?java=y