bhstat ?

As you know, you can view Blackhole statistics with a public page if the owner gived you the url.
like:

http://sadmissed.com/bhstat.php?threadID=22&ruleID=33&key=0c382c13dbaca1490c207a89b61a2c53

but who need bhstat when these guys leave webalizer?

August 2011 'Sploit_Sutra':

September 2011 'Sploit_Sutra':

October 2011:

November 2011:

December 2011:

January 2012:

Can even download /stat/access.log.all
And what's we can see... :)

92.238.0.189 - - [25/Aug/2011:12:50:59 +0200] --> 5089 | 92.232.0.0/13 | NTL | UK | VIRGINMEDIA.COM | VIRGIN MEDIA LIMITED
72.209.35.240 - - [25/Aug/2011:22:50:51 +0200] --> 22773 | 72.209.0.0/18 | ASN-CXA-ALL-CCI-2277 | US | COX.COM | COX COMMUNICATIONS
92.238.0.189 - - [24/Aug/2011:12:49:23 +0200] -- http://78.46.76.106/adm.php?a=threads" "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.8.131 Version/11.11 --
41.234.229.210 - - [25/Aug/2011:00:11:15 +0200] -- 8452 | 41.232.0.0/13 | TE | EG | AFRINIC.NET | AFRINIC -- "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.8.131 Version/11.11"
213.171.207.19 - - [23/Aug/2011:11:55:51 +0200] -- 15418 | 213.171.192.0/19 | FASTHOSTS | UK | LIVEDNS.ORG.UK | FAST HOSTS LTD - "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.7.62 Version/11.00"
81.166.221.46 - - [21/Aug/2011:11:20:22 +0200]  -- 29695 | 81.166.0.0/15 | LYSE | NO | ALTIBOX.NO | ALTIBOX AS
183.88.88.201 - - [20/Aug/2011:13:47:58 +0200] -- 45758 | 183.88.0.0/16 | TRIPLETNET-AS | TH | 3BB.CO.TH | 3BB BROADBAND INTERNET SERVICE THAILANd
77.52.247.174 - - [18/Aug/2011:14:41:43 +0200] -- 21497 | 77.52.0.0/16 | UMC | UA | MTS.COM.UA | CJSC UKRAINIAN MOBILE COMMUNICATIONS

Even AV guys :)

149.bitdefender.com
onlinevir.dev.drweb.com
www.nanoav.ru
etc...

And about blackhole:

File come from whitems, by searching on it i've found some weird stuff (if someone know what are these?) :

fuckyeah Miria