Letter to Time Warner, aka Spectrum Representative, DELL (not to be confused with the computer company)


by Kenny Hendrick, Time Warner, aka Spectrum Customer/Claimant

    October 27, 11:02pm



Dear Sirs/Dell,

Please find the following acceptable to suffice the request made by you/your company this same aforetitled date, during a telephone conversation which culminated at 7pm (three hours ago).


I would have responded sooner but I'm at that age where I get a little sleepy following any ingestion, and well here I am back with that information you requested.

You requested some logs. 


Here's one which strangely enough, occurred during our conversation, but first let me explain something.

The machine that is on the Time Warner, aka Spectrum side is a "disposable", it indeed does have an exact replica of a server and website as the one we actually propagate (the Time Warner, aka Spectrum side / ip address propagates nowhere so the only finders of the address would be a chance encounter with a probe or bot, or of course my IP Provider...among other potentialities, of course).

I'll post one more piece of information for you because you had stated during our telephone conversation that my predicament was something you had never heard of before.   Here's a true tale found on the net:  http://www.securityfocus.com/news/353  ;but let's not forget our trojan roots history, including: http://www.springfield-repair.com/time%20warner/a%20necessary%20history.html

(bow your heads as our republic falls/fails)

So you asked for logs, I'll give you this one first, it occurred at exactly the time we were speaking on the phone:

95.215.9.222 - - [27/Oct/2015:18:54:54 -0400] "GET / HTTP/1.0" 200 24734 "-" "netscan.lekus.su"



I purposely have left a couple of common ports open (so as to obtain a log) and they are:  Port 80 (of course) and Port 139

So aside from the log that came exactly as we were speaking, it was a very lonely day with only these other log entries:


185.93.185.47 - - [27/Oct/2015:03:39:26 -0400] "GET /rom-0 HTTP/1.1" 404 20261 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
203.67.9.75 - - [27/Oct/2015:04:51:51 -0400] "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01" 400 166 "-" "-"
141.212.122.160 - - [27/Oct/2015:07:29:10 -0400] "GET / HTTP/1.1" 200 24734 "-" "Mozilla/5.0 zgrab/0.x"
203.67.9.75 - - [27/Oct/2015:16:11:27 -0400] "GET / HTTP/1.1" 400 568 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"


What is interesting about my logs now is that it's been relatively uneventful, until yesterday (the day I spoke with another of your representatives concerning the issue):

86.97.13.103 - - [26/Oct/2015:10:49:29 -0400] "c\x00\x00\x00$nF\xD9\xC0>\x05N\x88[\xDCx\xF6\xFC\xF4\xACk\xE7`\x1F\xE6k\x13\xDF\x5C8\xC1\x91_B\xCE\xC79f\x12\x09\x7F\xD7\x83N\xF1\x89\xE5\xA7a8\xDF\xE8Y\xEA*i\x1E;\x8A\xF0\xCB\xF4\xF0\xEBN`p\xF6\x06" 400 166 "-" "-"
86.97.13.103 - - [26/Oct/2015:10:49:30 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:50:15 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:51:00 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:51:45 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:52:31 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:53:16 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:54:01 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:54:46 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:55:32 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:56:17 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:57:02 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:57:47 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:58:33 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:10:59:18 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:00:03 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:00:48 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:01:34 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:02:19 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:03:04 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:03:49 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:04:35 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:05:20 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:06:05 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:06:51 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:07:36 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:08:21 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:09:06 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:09:52 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:10:37 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
86.97.13.103 - - [26/Oct/2015:11:11:22 -0400] "POST / HTTP/1.1" 405 568 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)"
27.115.121.36 - - [26/Oct/2015:14:21:14 -0400] "GET / HTTP/1.1" 200 24734 "-" "-"
203.67.9.75 - - [26/Oct/2015:17:22:11 -0400] "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01" 400 166 "-" "-"
169.57.5.20 - - [26/Oct/2015:23:14:56 -0400] "GET / HTTP/1.0" 200 24734 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
127.0.0.1 - - [26/Oct/2015:23:49:55 -0400] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:41.0) Gecko/20100101 Firefox/41.0"
127.0.0.1 - - [26/Oct/2015:23:51:16 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:53:31 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:53:41 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:54:54 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:55:04 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:55:04 -0400] "GET /solar_panel.html HTTP/1.1" 200 1636 "http://localhost/" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:41.0) Gecko/20100101 Firefox/41.0"
127.0.0.1 - - [26/Oct/2015:23:55:04 -0400] "GET /pitch.jpg HTTP/1.1" 200 35048 "http://localhost/solar_panel.html" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:41.0) Gecko/20100101 Firefox/41.0"
127.0.0.1 - - [26/Oct/2015:23:58:49 -0400] "GET /springfield%20computer%20repair.jpg HTTP/1.1" 304 0 "http://localhost/" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:41.0) Gecko/20100101 Firefox/41.0"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"
127.0.0.1 - - [26/Oct/2015:23:58:55 -0400] "-" 400 0 "-" "-"




And that's it....nothing else for 10/27/2015


However the day before (10/26/2015) brought some interesting logs:





Here's my logs with Time Warner, aka Spectrum's Connection since the day we moved our services to the AT&T side: