keyplyr - 5:22 am on Feb 29, 2012 (gmt 0)
I guess if you don't use Ardamax Keylogger then its a 404. Trouble is, many inexperienced web masters leave these .exe files on the server instead of deleting them after installation. They CHMOD to absolute server path, thus why they're exploited.
I and many others block all Level 3 ranges.