I am getting attacked by these people trying to post on my forum. I have delted the forum, blocked all IP's in the range...Or tried to I think.

IIS default site, denied 200.0.0.0 sub 255.0.0.0 That should block whole range correct?

2008-09-26 01:32:26 W3SVC1 SERVER2003 **.**.**.** GET /forum/toast.asp action=posts&sub=search&author=Wffmzogy&subject=ML iLCrsFSsf&message=comment4%2C+%3Ca+href%3D%22http% 3A%2F%2Fventevogel.net%2Fuploadfiles%2Fblog.php%3F p%3D13790%23%22%3Epublic+education+network%3C%2Fa% 3E%2C+http%3A%2F%2Fventevogel.net%2Fuploadfiles%2F blog.php%3Fp%3D13790%23+public+education+network%2 C++639312%2C+%3Ca+href%3D%22http%3A%2F%2Fmartinamo ravcova.com%2Farchive%2Fblog.php%3Fp%3D20505%23%22 %3Ework+at+home+recommended+by+bbb%3C%2Fa%3E%2C+ht tp%3A%2F%2Fmartinamoravcova.com%2Farchive%2Fblog.p hp%3Fp%3D20505%23+work+at+home+recommended+by+bbb% 2C++rtik%2C+%3Ca+href%3D%22http%3A%2F%2Fcoloradoac reage.com%2Fimages%2Fblog.php%3Fp%3D1633%23%22%3Ea ctor+alexis+cruz+a+minister%3C%2Fa%3E%2C+http%3A%2 F%2Fcoloradoacreage.com%2Fimages%2Fblog.php%3Fp%3D 1633%23+actor+alexis+cruz+a+minister%2C++yepy%2C+% 3Ca+href%3D%22http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23%22%3Eecha%2Bcutting %3C%2Fa%3E%2C+http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23+echa%2Bcutting%2C++ %25%5B%5B%5B%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneha miltonfineart.com%2Fimages%2Fblog.php%3Fp%3D17876% 23%22%3Enew+england+schools+offering+dental+hygene %3C%2Fa%3E%2C+http%3A%2F%2Fjanehamiltonfineart.com %2Fimages%2Fblog.php%3Fp%3D17876%23+new+england+sc hools+offering+dental+hygene%2C++vbnef%2C+%3Ca+hre f%3D%22http%3A%2F%2Fjanehamiltonfineart.com%2Fimag es%2Fblog.php%3Fp%3D16981%23%22%3Eruger+12+ga+engr aved+shotgun%3C%2Fa%3E%2C+http%3A%2F%2Fjanehamilto nfineart.com%2Fimages%2Fblog.php%3Fp%3D16981%23+ru ger+12+ga+engraved+shotgun%2C++seggq%2C+%3Ca+href% 3D%22http%3A%2F%2Fsoundorsilence.nl%2Fphoto%2Fblog .php%3Fp%3D6044%23%22%3Eenergy+of+meat+statistics% 3C%2Fa%3E%2C+http%3A%2F%2Fsoundorsilence.nl%2Fphot o%2Fblog.php%3Fp%3D6044%23+energy+of+meat+statisti cs%2C++jzaxid%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneh amiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D18275 %23%22%3Ereino+aventura%3C%2Fa%3E%2C+http%3A%2F%2F janehamiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D 18275%23+reino+aventura%2C++035310%2C+&submit=Subm it 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2228 156

I see they are getting HTTP Error 403 - Forbidden

I get a log file of 5 mb a day for all thesse attacks. What are they, who can I get rid of them totally?

After I wrote this

008-09-26 01:32:26 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Wffmzogy&subject=ML iLCrsFSsf&message=comment4%2C+%3Ca+href%3D%22http% 3A%2F%2Fventevogel.net%2Fuploadfiles%2Fblog.php%3F p%3D13790%23%22%3Epublic+education+network%3C%2Fa% 3E%2C+http%3A%2F%2Fventevogel.net%2Fuploadfiles%2F blog.php%3Fp%3D13790%23+public+education+network%2 C++639312%2C+%3Ca+href%3D%22http%3A%2F%2Fmartinamo ravcova.com%2Farchive%2Fblog.php%3Fp%3D20505%23%22 %3Ework+at+home+recommended+by+bbb%3C%2Fa%3E%2C+ht tp%3A%2F%2Fmartinamoravcova.com%2Farchive%2Fblog.p hp%3Fp%3D20505%23+work+at+home+recommended+by+bbb% 2C++rtik%2C+%3Ca+href%3D%22http%3A%2F%2Fcoloradoac reage.com%2Fimages%2Fblog.php%3Fp%3D1633%23%22%3Ea ctor+alexis+cruz+a+minister%3C%2Fa%3E%2C+http%3A%2 F%2Fcoloradoacreage.com%2Fimages%2Fblog.php%3Fp%3D 1633%23+actor+alexis+cruz+a+minister%2C++yepy%2C+% 3Ca+href%3D%22http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23%22%3Eecha%2Bcutting %3C%2Fa%3E%2C+http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23+echa%2Bcutting%2C++ %25%5B%5B%5B%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneha miltonfineart.com%2Fimages%2Fblog.php%3Fp%3D17876% 23%22%3Enew+england+schools+offering+dental+hygene %3C%2Fa%3E%2C+http%3A%2F%2Fjanehamiltonfineart.com %2Fimages%2Fblog.php%3Fp%3D17876%23+new+england+sc hools+offering+dental+hygene%2C++vbnef%2C+%3Ca+hre f%3D%22http%3A%2F%2Fjanehamiltonfineart.com%2Fimag es%2Fblog.php%3Fp%3D16981%23%22%3Eruger+12+ga+engr aved+shotgun%3C%2Fa%3E%2C+http%3A%2F%2Fjanehamilto nfineart.com%2Fimages%2Fblog.php%3Fp%3D16981%23+ru ger+12+ga+engraved+shotgun%2C++seggq%2C+%3Ca+href% 3D%22http%3A%2F%2Fsoundorsilence.nl%2Fphoto%2Fblog .php%3Fp%3D6044%23%22%3Eenergy+of+meat+statistics% 3C%2Fa%3E%2C+http%3A%2F%2Fsoundorsilence.nl%2Fphot o%2Fblog.php%3Fp%3D6044%23+energy+of+meat+statisti cs%2C++jzaxid%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneh amiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D18275 %23%22%3Ereino+aventura%3C%2Fa%3E%2C+http%3A%2F%2F janehamiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D 18275%23+reino+aventura%2C++035310%2C+&submit=Subm it 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2228 156
2008-09-26 01:34:14 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Eric&subject=uvgCgX OGIjAIjPD&message=believe+in+%2C+http%3A%2F%2Fdupl ika.cl%2Fformulario1%2Fint%2F_img%2Ff_ormulariod.h tml+fancifull+beauty%2C++92991%2C+http%3A%2F%2Fric hard-eitel-muenchen.de%2F8__ndexa_z.html+licking+vagina%2C++a ipvwy%2C+http%3A%2F%2Fbasentermalny.pl%2Fpa%2Ftiny mc%2F_kontakt.html+xavier+price+porn%2C++%3E%3A-PP%2C+http%3A%2F%2Fyourviphosting.com%2Fshoponline %2Faccount_history.php+non+nude+teenager%2C++02778 6%2C+http%3A%2F%2Fwww.eesil.com%2Fswf%2Fslideshow% 2Fkpersos07_.html+rate+breast+implants%2C++%3D-)%2C+http%3A%2F%2Faacentral.org%2Fadra%2Flanguage% 2Fscre_n.html+big+ol+booty+****ing%2C++jnyzxm%2C+h ttp%3A%2F%2Fnyudental.co.kr%2Fnotice%2Fpopups%2F_i mg%2Finsert_table2.html+young+schoolgirls+in+panti es%2C++388191%2C+http%3A%2F%2Fventure-outdoors.com%2Fbeach-mo3b%2Fohio-government.html+leia+fake+nude%2C++jle%2C+http%3A% 2F%2Fwww.rincondelcurioso.es%2Fjuegos%2Fenv__ar-_sudoku.html+first+*******%2C++urvak%2C+http%3A%2F %2Ftornveilgroup.com%2Fcal%2Fmini_calendar.html+nu de+physical+stories%2C++080940%2C+http%3A%2F%2Fcoo lbluestudio.com%2F2006+Bike+%26+Blues+BBQ+Fayettev ille+Arkansas%2Ftarget145.html+upstate+ny+speed+da ting%2C++cyj%2C+http%3A%2F%2Fwww.casadasaude.com.b r%2Flavori+in+corso%2F_info_shopping_cart.html+sco rpio+women+sexuality%2C++%3E%3A-%5D%2C+http%3A%2F%2Febook-edition-france.com%2Flib%2Ffonctions%2F_img%2Fu_pdat__rss. html+live+lesbeian+porn%2C++hdy%2C+http%3A%2F%2Fso utherntexastitle.com%2Forder%2F6cd_01.html+young+a sian+schoolgirls+naked%2C++8-O%2C+http%3A%2F%2Fwww.eesil.com%2Fmvercellin%2FPre sentation1.html+giant+horse+dick%2C++%3E%3A%5D%2C+ http%3A%2F%2Fwww.oiol.sk%2Fflash_files%2Fvolby_200 8_.html+dick+van+dyke+brother%2C++%25%5B%5B%2C+htt p%3A%2F%2Fviaromaa.freehostia.com%2Fin_exu.html+** **+at+ween+show%2C++8-)%2C+http%3A%2F%2Fmartekdirect.com%2Fcash-quote%2Findustries3.html+http%3A%2F%2Fmartekdirect .com%2Fcash-quote%2Findustries3.html%2C++%3A-((%2C+http%3A%2F%2Fwww.solsticelifestyle.com%2F_im ages%2Fofflineb_r1.html+nudist+pictures%2C++glqlot %2C+http%3A%2F%2Fcoolbluestudio.com%2F2006+Bike+%2 6+Blues+BBQ+Fayetteville+Arkansas%2Ftarget200.html +lesbian+squirting+girls%2C++fus%2C+http%3A%2F%2Fe book-edition-france.com%2Flib%2Ffonctions%2F_img%2Fyfactu_re__t ml.html+spike+buffy+****%2C++rxqbd%2C+&submit=Subm it 80 - 93.174.94.113 HTTP/1.1 Opera/6.02+(Windows+NT+4.0;+U)+[en] www.*******.com 404 0 3 1849 2501 124
2008-09-26 01:35:31 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Dpmmxqxm&subject=rZ sFXriWfrAlucwfjOK&message=comment6%2C+http%3A%2F%2 Fholicz.yourfreehosting.net%2Fyoung-grils-nude.html+arab+grils+nude%2C++%3A-%5B%5B%2C+http%3A%2F%2Fdahlheilm.hostevo.com%2Fgia ntess-butt-crush-forum.html+butt+cheek+her%2C++%25-)%2C+http%3A%2F%2Flaboissiere.007sites.com%2Fthe-art-of-male-masturbation.html+girl+in+masturbation%2C++uzscc%2 C+http%3A%2F%2Flickbaum.hothostcity.com%2Fbusty-island-babes.html+hayden+panettiere+busty%2C++08792%2C+ht tp%3A%2F%2Fskoursky.977mb.com%2Fmarinai-housewife.html+2x01+desperate+hdtv+housewife+tv+vt v%2C++%25-(%2C+http%3A%2F%2Fpipines.007sites.com%2Ftulsa-transexuals.html+medicinal+herbs+used+by+transexua ls+to+increase+br%2C++8-))%2C+http%3A%2F%2Fdemanch.free-site-host.com%2Ffamous-toons-porno.html+tied+toons%2C++xwau%2C+http%3A%2F%2Fwaz ewski.free-site-host.com%2Fms-photo-editor-downloads.html+free+underground+gay+porn+clip+down loads%2C++563%2C+http%3A%2F%2Fdemanch.free-site-host.com%2Fdrawing-toons.html+****+toons%2C++dokuz%2C+http%3A%2F%2Fho licz.yourfreehosting.net%2Fbig-big-black-butt-dick-grils-white.html+big+big+black+butt+dick+grils+white%2C+ +ttnalv%2C+http%3A%2F%2Friffaler.my3gb.com%2Fsex-with-debbie-eberle.html+sex+with+debbie+eberle%2C++%25PP%2C+ht tp%3A%2F%2Fpipines.007sites.com%2Ffamous-transexuals.html+hormones+for+transexuals%2C++0645 %2C+http%3A%2F%2Fhadnot.247ihost.com%2Fhe-fingered-my-wife.html+blow+cheating+job+wife%2C++ohl%2C+http%3 A%2F%2Fsmitzney.101freehost.com%2Fsuperb-boob.html+free+natural+big+boob+movie%2C++146%2C+h ttp%3A%2F%2Fhadnot.247ihost.com%2Farab-swapping-wife.html+arab+swapping+wife%2C++1250%2C+http%3A%2 F%2Fozengin.gigazu.com%2Fphoto-editing-special-effects.html+humor+photo%2C++vya%2C+http%3A%2F%2Fg elizi.hostaim.com%2Fhermaphrodite-sex-story.html+hermaphrodite+sex+story%2C++yvrmn%2C+ht tp%3A%2F%2Fdaskas.247ihost.com%2Fremington-nylon-66-manual.html+how+strong+are+nylon+fishing+lines%2C+ +olfqx%2C+http%3A%2F%2Flickbaum.hothostcity.com%2F busty-latino-teens.html+busty+direct%2C++02198%2C+http%3A%2F%2F laboissiere.007sites.com%2F*****-masturbation.html+masturbation+girl%2C++440%2C+htt p%3A%2F%2Fsynard.freehostplace.com%2Fburn-exercise-fat-stomach.html+fat+blonde+girls%2C++mozgs%2C+http%3A %2F%2Flaboissiere.007sites.com%2F*****-substitutes-for-masturbation.html+symbian+masturbation%2C++cdquvi% 2C+http%3A%2F%2Fskoursky.977mb.com%2Freal-housewife-anal.html+everyday+housewife%2C++%3E%3A(((%2C+http %3A%2F%2Fhadnot.247ihost.com%2Ftreating-wife-as-a-teen.html+****+wife+clips%2C++%3A-D%2C+http%3A%2F%2Fdiluzia.aokhost.com%2Ffree-upskirt-spycam.html+japanese+teen+upskirt%2C++6687%2C+http %3A%2F%2Fdiluzia.aokhost.com%2Fjapanese-schoolgirl-upskirt.html+japanese+schoolgirl+upskirt%2C++axxr% 2C+http%3A%2F%2Fshere.007gb.com%2Fbizarre-stretching-inserting.html+bizarre+stretching+inserting%2C++%3 A-)))%2C+http%3A%2F%2Fozengin.gigazu.com%2Fhard-photo.html+hard+photo%2C++skqpln%2C+&submit=Submit 80 - 89.248.162.197 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 3147 7203
2008-09-26 01:38:01 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Aaytilxq&subject=Go MZLQhiFCnFSj&message=%3Ca+href%3D+http%3A%2F%2Fwww .bebo.com%2FBuyD12+%3EOrder+Diamox%3C%2Fa%3E%2C+%3 D%5B%5B%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.c om%2FBuyA91+%3EOrder+Adalat%3C%2Fa%3E%2C+%3A-%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2 FBuyM55+%3EOrder+Mextil%3C%2Fa%3E%2C+qqeif%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN4+%3EOrde r+Nortriptyline%3C%2Fa%3E%2C+314%2C+%3Ca+href%3D+h ttp%3A%2F%2Fwww.bebo.com%2FBuyR6+%3EOrder+Rulide%3 C%2Fa%3E%2C+kmxlw%2C+%3Ca+href%3D+http%3A%2F%2Fwww .bebo.com%2FBuyF3+%3EOrder+Frumil%3C%2Fa%3E%2C+006 %2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN0 0+%3EOrder+Nolvadex%3C%2Fa%3E%2C+%3D-%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2 FBuyC7+%3EOrder+Combipres%3C%2Fa%3E%2C+%3A(%2C+%3C a+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA96+%3EOr der+Alkeran%3C%2Fa%3E%2C+%3A-P%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA 72+%3EOrder+Allopurinol%3C%2Fa%3E%2C+62282%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyS54+%3EOrd er+Singulair%3C%2Fa%3E%2C+0205%2C+%3Ca+href%3D+htt p%3A%2F%2Fwww.bebo.com%2FBuyP98+%3EOrder+Persantin e%3C%2Fa%3E%2C+467062%2C+%3Ca+href%3D+http%3A%2F%2 Fwww.bebo.com%2FBuyP1+%3EOrder+Pamelor%3C%2Fa%3E%2 C+%25OOO%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com %2FBuyL47+%3EOrder+Lioresal%3C%2Fa%3E%2C+222996%2C +%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyC22+% 3EOrder+Casodex%3C%2Fa%3E%2C+%25-DDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBu yE12+%3EOrder+Eldepryl%3C%2Fa%3E%2C+8-%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBu yN8+%3EOrder+Naprosyn%3C%2Fa%3E%2C+8-O%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyC 040+%3EOrder+Clarinex%3C%2Fa%3E%2C+%3A-%5D%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.co m%2FBuyE5+%3EOrder+Emulgel%3C%2Fa%3E%2C+ezkt%2C+%3 Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyP288+%3E Order+Prevacid%3C%2Fa%3E%2C+143617%2C+%3Ca+href%3D +http%3A%2F%2Fwww.bebo.com%2FBuyL79+%3EOrder+Levit ra%3C%2Fa%3E%2C+budm%2C+%3Ca+href%3D+http%3A%2F%2F www.bebo.com%2FBuyA87+%3EOrder+Arava%3C%2Fa%3E%2C+ zbx%2C+&submit=Submit 80 - 200.63.42.109 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2255 156
2008-09-26 01:38:01 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 193.34.144.22 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) *******.com 403 6 0 1763 170 140
2008-09-26 01:38:29 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Ycjectho&subject=Vz bTuLczdwIXP&message=comment6%2C+http%3A%2F%2Fwww.t hethingsiwant.com%2Ffvj73e%2Flist%2Farchive-control-mind-sex-story+Archive+control+mind+sex+story%2C++hjdn%2C+h ttp%3A%2F%2Fwww.thethingsiwant.com%2Ffs416h%2Flist %2Farchive-free-nasty-sex-story+Archive+free+nasty+sex+story%2C++gukuha%2C+h ttp%3A%2F%2Fwww.thethingsiwant.com%2Ff4qzpv%2Flist %2Farchive-free-kristin-sex-story+Archive+free+kristin+sex+story%2C++%3A-)%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffw1eqv% 2Flist%2Farama-portal-liseli-sex-lunarsouls+Arama+portal+liseli+sex+lunarsouls%2C++ ghhpn%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffym 0kc%2Flist%2Farama-portal-liseli-sex-etomicpower+Arama+portal+liseli+sex+etomicpower%2C ++71482%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ff 23fsn%2Flist%2Farchive-sex-story-free-wife+Archive+sex+story+free+wife%2C++%3D-O%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffl82et% 2Flist%2Farchive-erotic-nifty-sex-story+Archive+erotic+nifty+sex+story%2C++222%2C+&s ubmit=Submit 80 - 218.107.54.224 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1744 1262 562
2008-09-26 01:39:24 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Ehrghltq&subject=fm lwqZjJTQGnXediYiE&message=%3Ca+href%3D+http%3A%2F% 2Fwww.mylot.com%2FCheapMethotrexate+%3ECheap+Metho trexate%3C%2Fa%3E%2C+%3E%3A%5B%5B%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapNolvadex+%3EChea p+Nolvadex%3C%2Fa%3E%2C+ysw%2C+%3Ca+href%3D+http%3 A%2F%2Fwww.mylot.com%2FCheapCardarone+%3ECheap+Car darone%3C%2Fa%3E%2C+sdr%2C+%3Ca+href%3D+http%3A%2F %2Fwww.mylot.com%2FCheapCardizem+%3ECheap+Cardizem %3C%2Fa%3E%2C+%3E%3A-%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapCardizem+%3ECheap+Cardizem%3C%2Fa%3E%2C+wqax%2 C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapC oumadin+%3ECheap+Coumadin%3C%2Fa%3E%2C+%3D-DDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapLanoxin+%3ECheap+Lanoxin%3C%2Fa%3E%2C+975%2C+% 3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapMext il+%3ECheap+Mextil%3C%2Fa%3E%2C+2538%2C+%3Ca+href% 3D+http%3A%2F%2Fwww.mylot.com%2FCheapTenormin+%3EC heap+Tenormin%3C%2Fa%3E%2C+%3D%5B%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapMevacor+%3ECheap +Mevacor%3C%2Fa%3E%2C+%3D-%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapPravachol+%3ECheap+Pravachol%3C%2Fa%3E%2C+kxvq %2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FChea pZocor+%3ECheap+Zocor%3C%2Fa%3E%2C+fxu%2C+%3Ca+hre f%3D+http%3A%2F%2Fwww.mylot.com%2FCheapFurosemide+ %3ECheap+Furosemide%3C%2Fa%3E%2C+4075%2C+%3Ca+href %3D+http%3A%2F%2Fwww.mylot.com%2FCheapPilagan5ml+% 3ECheap+Pilagan5ml%3C%2Fa%3E%2C+xzsrpa%2C+%3Ca+hre f%3D+http%3A%2F%2Fwww.mylot.com%2FCheapAciphex+%3E Cheap+Aciphex%3C%2Fa%3E%2C+9022%2C+%3Ca+href%3D+ht tp%3A%2F%2Fwww.mylot.com%2FCheapCarafate+%3ECheap+ Carafate%3C%2Fa%3E%2C+6117%2C+%3Ca+href%3D+http%3A %2F%2Fwww.mylot.com%2FCheapColospa+%3ECheap+Colosp a%3C%2Fa%3E%2C+5681%2C+%3Ca+href%3D+http%3A%2F%2Fw ww.mylot.com%2FCheapDuphalac+%3ECheap+Duphalac%3C% 2Fa%3E%2C+%3AOOO%2C+%3Ca+href%3D+http%3A%2F%2Fwww. mylot.com%2FCheapImodium+%3ECheap+Imodium%3C%2Fa%3 E%2C+%3ADDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot .com%2FCheapNexium+%3ECheap+Nexium%3C%2Fa%3E%2C+cq t%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FChe apPepcid+%3ECheap+Pepcid%3C%2Fa%3E%2C+8802%2C+%3Ca +href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapPrevaci d+%3ECheap+Prevacid%3C%2Fa%3E%2C+2010%2C+%3Ca+href %3D+http%3A%2F%2Fwww.mylot.com%2FCheapPrilosec+%3E Cheap+Prilosec%3C%2Fa%3E%2C+23807%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapProtonix+%3EChea p+Protonix%3C%2Fa%3E%2C+cetgw%2C+%3Ca+href%3D+http %3A%2F%2Fwww.mylot.com%2FCheapReglan+%3ECheap+Regl an%3C%2Fa%3E%2C+rzx%2C+&submit=Submit 80 - 200.63.42.111 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2703 124
2008-09-26 01:39:27 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 78.157.143.186 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 174 234
2008-09-26 01:40:39 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Jvyutqls&subject=hc EQoTeaycRq&message=Where+it+is+possible+to+buy+the +%3F+It+is+very+necessary!+%2C+http%3A%2F%2Fvicodi n.yoarray.com%2Fthe-vicodin-song.html+the+vicodin+song%2C++prpmkd%2C+http%3A%2 F%2Fvicodin.yoarray.com%2Fvicodin-abuse.html+vicodin+abuse%2C++%3E%3A(%2C+http%3A%2F %2Fvicodin.yoarray.com%2Fdarvocet-vicodin-pain-relief.html+darvocet+vicodin+pain+relief%2C++feaz% 2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-detox.html+vicodin+detox%2C++8DD%2C+http%3A%2F%2Fv icodin.yoarray.com%2Fvicodin-and-ibuprofen.html+vicodin+and+ibuprofen%2C++%3A-%5B%5B%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicod in-hp.html+vicodin+hp%2C++23125%2C+http%3A%2F%2Fvicod in.yoarray.com%2Fvicodin-with-no-prescription.html+vicodin+with+no+prescription%2C+ +%3E%3A((%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fwi ll-vicodin-show-up-on-a-drug-test.html+will+vicodin+show+up+on+a+drug+test%2C++ %3E%3A(((%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvi codin-water-solubility.html+vicodin+water+solubility%2C++%3DOO O%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-%26amp%3B-zoloft.html+vicodin+%26amp%3B+zoloft%2C++xcim%2C+& submit=Submit 80 - 193.171.32.4 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+6.2;+SV1) www.*******.com 403 6 0 1763 1449 171
2008-09-26 01:41:10 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Everett&subject=CMn IdqAkzIBG&message=The+best+of+friends+must+part%2C +http%3A%2F%2Fwww.casadasaude.com.br%2Floja%2F_coo kie_usage.html+twilight+sexy+matures%2C++8-OOO%2C+http%3A%2F%2Fkreisspielleiter-donau.de%2F_images%2Fscreen_f.html+medic+sex%2C++% 25%5B%2C+http%3A%2F%2Fviaromaa.freehostia.com%2F_i mages%2F_index.html+imajin+romance%2C++954%2C+http %3A%2F%2Fdoingthesuitcases.com%2Fknowworld%2Fsexxy porn%2F400_6.html+elevation+in+counseling%2C++%3D% 5B%5B%2C+http%3A%2F%2Fwww.casaserrana.com.ar%2Fcut enews-e%2Fskins%2F_images%2F_default2.html+mature+adukt% 2C++8-%5B%5B%2C+http%3A%2F%2Fduplika.cl%2Forl%2Ff_ormula r_o.html+chubby+teens+sex+chat%2C++687%2C+http%3A% 2F%2Fwww.pendientesparati.com%2Fpedidos%2Fchoos_ec ategory.html+the+great+passion+play%2C++0427%2C+ht tp%3A%2F%2Fmartekdirect.com%2Fcash-quote%2Fcomp_ny.html+korea+sex+tours%2C++8-OOO%2C+http%3A%2F%2Fwww.apac-eureka.org%2Fenlaces%2F_Consejo_revista1.html+fema le+teenage+strips%2C++%3E%3A-)))%2C+http%3A%2F%2Fwww.living-water-villa.com%2Fhtml%2Fboard%2Fdefault-def_ult%5E%25%2593_%5E930%5E930F0960%25%25them_.ht ml+mtv+new+york+nude%2C++zrc%2C+http%3A%2F%2Fwww.c reocomunicazione.it%2Fsito%2Farea_riservata%2Fboo_ __k1.html+kim+director+sex+video%2C++%3D%5B%5B%5B% 2C+http%3A%2F%2Fagricolleges.com%2Ftest%2Fperl%2Ft _st_info1.html+stories+of+romance%2C++024037%2C+ht tp%3A%2F%2Fvapsen.dk%2F_borders%2Fdetgulekuld13.ht ml+exotic+erotic+stories+she+males%2C++173%2C+http %3A%2F%2Fmechanik-sc.pl%2Fwww%2Fjs%2F_backup%2FOrder_Info1.html+post r+your+beaver%2C++pwtha%2C+http%3A%2F%2Fwww.buhara dizayn.com%2Fflashsitelerrrrgfdchg886%40%40dfsd!!% 2F9advanced_search.html+joe+bang+official+site%2C+ +ppds%2C+http%3A%2F%2Fwww.spiele-werbung.de%2Fkoi-aufzucht%2F_i_ndex.html+love+and+theft+lyrics%2C++ 370%2C+http%3A%2F%2Fzelenival.com%2Ftwg163%2Fjs%2F _img%2F8_simple0.html+indian+school+girls+sex%2C++ 1684%2C+http%3A%2F%2Ftvekorea.org%2Fboard_test%2Fr egist.asp+erotic+jjeans+women+photos%2C++kuax%2C+h ttp%3A%2F%2Fwww.panelmat.com.ar%2Ftest%2Fphp%2Ftes _t9.html+muscled+gay+men%2C++tpcwi%2C+http%3A%2F%2 Fwww.iictechnologies.com%2FHIHWG%2Fcontactus_inc9. html+excite+sensual%2C++%25((%2C+http%3A%2F%2Fwww. fc-boveresses.ch%2FIndex_photos%2Fpages%2FDS_N1056_gi f.html+2002+ford+focus+mpg%2C++%3DO%2C+http%3A%2F% 2Fwww.3townpaintball.pl%2F_jgfw_%2Fjs%2Foff_ine.ht ml+my+boobs+got+bigger%2C++754463%2C+http%3A%2F%2F www.deep-blue.com.ar%2Fcv%2F_img%2Fgr_cias.html+huge+round+ butts%2C++56651%2C+http%3A%2F%2Felsalvadorya.com%2 Fmarinadecentroamerica%2Fdispla__mes__ages.html+po rnstar+milf+deepthroat+famous%2C++%25%5B%5B%5B%2C+ http%3A%2F%2Fwww.loc-imagens.com.br%2Fsistema%2F_2a.html+sex+product+di stributor%2C++430607%2C+http%3A%2F%2Fforestpozega. com%2Fenglish%2Fosalon_drd1.html+http%3A%2F%2Ffore stpozega.com%2Fenglish%2Fosalon_drd1.html%2C++kay% 2C+http%3A%2F%2Fwww.fassadengestaltung-ehst.de%2Fhtml%2Flogin%2F_img%2F5wdvc-schiene.html+pov+panty+sex+movies%2C++121956%2C+ht tp%3A%2F%2Ftodopcweb.com%2Fcddv_.html+popular+song s+for+swing%2C++883391%2C+http%3A%2F%2Fdharmacon.n et%2Fmain%2Fdescargas_v%2F6screen.html+brazilian+p ics+nude%2C++8-OOO%2C+&submit=Submit 80 - 93.174.94.113 HTTP/1.1 Mozilla/5.0+(X11;+U;+Linux+i686;+en-US;+rv:1.0.1)+Gecko/20020826 www.*******.com 404 0 3 1849 3350 234
2008-09-26 01:41:42 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Hcbobbiy&subject=Lw IDxOxibHDNQo&message=comment2%2C+%3Ca+href%3D%22ht tp%3A%2F%2Fwww.realtimesu.com%2Fgallery%2Fdocs%2F7 %2Fblog.php%3Fp%3D2266%231%22%3Eriverridgewhitetai ls%3C%2Fa%3E%2C+http%3A%2F%2Fwww.realtimesu.com%2F gallery%2Fdocs%2F7%2Fblog.php%3Fp%3D2266%231+river ridgewhitetails%2C++puli%2C+%3Ca+href%3D%22http%3A %2F%2Fwww.radioum.com.br%2Fformulario%2F9%2Fblog.p hp%3Fp%3D18028%231%22%3Eboat+jobs+offer+emplio%3C% 2Fa%3E%2C+http%3A%2F%2Fwww.radioum.com.br%2Fformul ario%2F9%2Fblog.php%3Fp%3D18028%231+boat+jobs+offe r+emplio%2C++775237%2C+%3Ca+href%3D%22http%3A%2F%2 Fwww.kadirlitrac.org%2Fdosyalar%2F1%2Fblog.php%3Fp %3D15677%231%22%3Ebridlington+environment%3C%2Fa%3 E%2C+http%3A%2F%2Fwww.kadirlitrac.org%2Fdosyalar%2 F1%2Fblog.php%3Fp%3D15677%231+bridlington+environm ent%2C++1296%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.re fzene.sk%2Fflash%2F4%2Fblog.php%3Fp%3D8719%231%22% 3Ebridgette+hull%3C%2Fa%3E%2C+http%3A%2F%2Fwww.ref zene.sk%2Fflash%2F4%2Fblog.php%3Fp%3D8719%231+brid gette+hull%2C++%3A-)%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.radioum.com.b r%2Fformulario%2F6%2Fblog.php%3Fp%3D15476%231%22%3 Erandy+orton+lotion+in+bag+roche%3C%2Fa%3E%2C+http %3A%2F%2Fwww.radioum.com.br%2Fformulario%2F6%2Fblo g.php%3Fp%3D15476%231+randy+orton+lotion+in+bag+ro che%2C++fyn%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.joi eriacliment.com%2Fjoieria%2Famfphp%2F9%2Fblog.php% 3Fp%3D14130%231%22%3Erefers+to+self+in+third+perso n+psychology%3C%2Fa%3E%2C+http%3A%2F%2Fwww.joieria climent.com%2Fjoieria%2Famfphp%2F9%2Fblog.php%3Fp% 3D14130%231+refers+to+self+in+third+person+psychol ogy%2C++57630%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.i nfoebit.com%2Fprofiles%2Fdefault%2F2%2Fblog.php%3F p%3D21801%231%22%3Ereggae+melody%3C%2Fa%3E%2C+http %3A%2F%2Fwww.infoebit.com%2Fprofiles%2Fdefault%2F2 %2Fblog.php%3Fp%3D21801%231+reggae+melody%2C++%25-DDD%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.refzene.sk% 2Fflash%2F3%2Fblog.php%3Fp%3D7659%231%22%3Erampage +stock%3C%2Fa%3E%2C+http%3A%2F%2Fwww.refzene.sk%2F flash%2F3%2Fblog.php%3Fp%3D7659%231+rampage+stock% 2C++071366%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.info ebit.com%2Fprofiles%2Fdefault%2F1%2Fblog.php%3Fp%3 D20092%231%22%3Ebuffalo+ny+nursing+jobs%3C%2Fa%3E% 2C+http%3A%2F%2Fwww.infoebit.com%2Fprofiles%2Fdefa ult%2F1%2Fblog.php%3Fp%3D20092%231+buffalo+ny+nurs ing+jobs%2C++51117%2C+&submit=Submit 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2531 156
2008-09-26 01:43:41 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Vxqqzufk&subject=sT nocHToqA&message=comment5%2C+http%3A%2F%2Fioepiytx .freeweb-hosting.org%2Fused-metal-fabricating-equipment-659.html+used+metal+fabricating+equipment%2C++0502 06%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fdog-joint-health-207.html+dog+joint+health%2C++rjzeao%2C+http%3A%2F %2Fioepiytx.freeweb-hosting.org%2Fazn-dreamers-fixing-a-broken-heart-263.html+azn+dreamers+fixing+a+broken+heart%2C++8-(%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Frichmond-ca-ymca-475.html+richmond+ca+ymca%2C++%3D(%2C+http%3A%2F%2 Fioepiytx.freeweb-hosting.org%2Fstarhub-maxonline-262.html+starhub+maxonline%2C++%3AOOO%2C+http%3A%2 F%2Fioepiytx.freeweb-hosting.org%2Fruth-frendo-444.html+ruth+frendo%2C++%3D-%5D%5D%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fla-livin-loca-lyric-martin-ricky-vida-13.html+la+livin+loca+lyric+martin+ricky+vida%2C++ 0069%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fhouse-christian-radio-286.html+house+christian+radio%2C++07203%2C+http%3 A%2F%2Fioepiytx.freeweb-hosting.org%2Fagencije-za-nekretnine-zagreb-279.html+agencije+za+nekretnine+zagreb%2C++%3D-O%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fchristian-marriage-service-602.html+christian+marriage+service%2C++ljwhi%2C+h ttp%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fcroatia-travel-packages-278.html+croatia+travel+packages%2C++jvk%2C+http%3 A%2F%2Fioepiytx.freeweb-hosting.org%2Fnancy-eaton-death-24.html+nancy+eaton+death%2C++%3D-%5B%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fdirect-line-rim-781.html+direct+line+rim%2C++dyrkxf%2C+http%3A%2F% 2Fioepiytx.freeweb-hosting.org%2Fby-a-long-shot-550.html+by+a+long+shot%2C++zvobc%2C+http%3A%2F%2F ioepiytx.freeweb-hosting.org%2Fbob-marley-ringtone-rtttl-557.html+bob+marley+ringtone+rtttl%2C++%3E%3A-PP%2C+&submit=Submit 80 - 200.144.17.74 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2058 374
2008-09-26 01:43:59 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Tphjyjuz&subject=QY KVUuRWgLdLzYzq&message=Help+to+find+in+the+Interne t+the+!+Write+on+e-mail.+%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicod in-and-adderall-taken-together.html+vicodin+and+adderall+taken+together% 2C++llnl%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fhow-to-shoot-vicodin.html+how+to+shoot+vicodin%2C++316%2C+http% 3A%2F%2Fvicodin.yoarray.com%2Fvicodin-m357.html+vicodin+m357%2C++5596%2C+http%3A%2F%2Fvi codin.yoarray.com%2Fbest-way-to-get-high-on-vicodin.html+best+way+to+get+high+on+vicodin%2C++p nolr%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-percoset.html+vicodin+percoset%2C++jntuvs%2C+http% 3A%2F%2Fvicodin.yoarray.com%2Fvicodin-spanish.html+vicodin+spanish%2C++hzhnbh%2C+http%3A %2F%2Fvicodin.yoarray.com%2Fvicodin-water-solubility.html+vicodin+water+solubility%2C++%3D-%5B%5B%5B%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fbu ying-vicodin-without-a-prescription.html+buying+vicodin+without+a+prescri ption%2C++pxlh%2C+http%3A%2F%2Fvicodin.yoarray.com %2Fvicodin-1000mg.html+vicodin+1000mg%2C++zqejod%2C+http%3A%2 F%2Fvicodin.yoarray.com%2Fcan-you-get-high-off-vicodin.html+can+you+get+high+off+vicodin%2C++akmf n%2C+&submit=Submit 80 - 212.118.158.68 HTTP/1.1 Opera/9.24+(Windows+NT+5.1;+U;+en) www.*******.com 403 6 0 1744 1435 234
2008-09-26 01:45:09 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Xeiosqok&subject=UI KfrQBrRLdetya&message=comment5%2C+http%3A%2F%2Fwww .blogigo.ch%2Ff5i15p8+nude+lesbians+sample+videos% 2C++%3E%3A%5D%5D%5D%2C+http%3A%2F%2Fwww.blogigo.de %2Ffzqn42d+jeannie+pepper+videos%2C++%3A-DD%2C+http%3A%2F%2Fwww.blogigo.ch%2Ffu8hyqu+crunch +workout+videos%2C++052286%2C+http%3A%2F%2Fwww.blo gigo.de%2Ffp1kx6b+travis+pastrana+fmx+videos%2C++1 2290%2C+http%3A%2F%2Fwww.blogigo.com%2Ffrwcgu7+vid eos+of+b%2C++15250%2C+http%3A%2F%2Fwww.blogigo.com %2Ffkci797+sexual+harrassment+training+videos%2C++ %3A-P%2C+http%3A%2F%2Fwww.blogigo.co.uk%2Ffkbnq17+stre aming+bondage+videos%2C++vpcj%2C+http%3A%2F%2Fwww. blogigo.ch%2Ffyos3dn+posting+videos%2C++tsnfkc%2C+ http%3A%2F%2Fwww.blogigo.cn%2Ffr6ck1b+crime+scene+ investigation+videos%2C++ssylk%2C+http%3A%2F%2Fwww .blogigo.co.uk%2Ff3elewl+top+aolo+girl+videos%2C++ 8534%2C+&submit=Submit 80 - 83.59.219.60 HTTP/1.0 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 1093 11265
2008-09-26 01:47:59 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Euqappey&subject=Sd LxBlruEIXSIpzwm&message=%3Ca+href%3D+http%3A%2F%2F www.bebo.com%2FBuyC501+%3EOrder+Cardarone%3C%2Fa%3 E%2C+651%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com %2FBuyF2+%3EOrder+Furosemide%3C%2Fa%3E%2C+747%2C+% 3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyB6+%3EO rder+Biaxin%3C%2Fa%3E%2C+uydilp%2C+%3Ca+href%3D+ht tp%3A%2F%2Fwww.bebo.com%2FBuyO4+%3EOrder+Ovral%3C% 2Fa%3E%2C+hkq%2C+%3Ca+href%3D+http%3A%2F%2Fwww.beb o.com%2FBuyC14+%3EOrder+Cytoxan%3C%2Fa%3E%2C+6009% 2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA30 3+%3EOrder+Actos%3C%2Fa%3E%2C+oil%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.bebo.com%2FBuyA309+%3EOrder+Aldac tone%3C%2Fa%3E%2C+qdmr%2C+%3Ca+href%3D+http%3A%2F% 2Fwww.bebo.com%2FBuyM75+%3EOrder+Methotrexate%3C%2 Fa%3E%2C+830399%2C+%3Ca+href%3D+http%3A%2F%2Fwww.b ebo.com%2FBuyS24+%3EOrder+Sumycin%3C%2Fa%3E%2C+084 %2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyG7 +%3EOrder+Glucophage%3C%2Fa%3E%2C+%25PPP%2C+%3Ca+h ref%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA18+%3EOrder +Amaryl%3C%2Fa%3E%2C+%3DP%2C+%3Ca+href%3D+http%3A% 2F%2Fwww.bebo.com%2FBuyC66+%3EOrder+Celecoxib%3C%2 Fa%3E%2C+%3A%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fww w.bebo.com%2FBuyR8+%3EOrder+Risperdal%3C%2Fa%3E%2C +kkq%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FB uyF22+%3EOrder+Feldene%3C%2Fa%3E%2C+ihosot%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN70+%3EOrd er+Norvasc%3C%2Fa%3E%2C+511639%2C+%3Ca+href%3D+htt p%3A%2F%2Fwww.bebo.com%2FBuyC42+%3EOrder+Claritin% 3C%2Fa%3E%2C+60926%2C+%3Ca+href%3D+http%3A%2F%2Fww w.bebo.com%2FBuyT0+%3EOrder+Tenormin%3C%2Fa%3E%2C+ 72385%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2F BuyM08+%3EOrder+Mobic%3C%2Fa%3E%2C+%3A%5B%2C+%3Ca+ href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN2+%3EOrder +Nexium%3C%2Fa%3E%2C+xoohlc%2C+%3Ca+href%3D+http%3 A%2F%2Fwww.bebo.com%2FBuyC26+%3EOrder+Cozaar%3C%2F a%3E%2C+%25)))%2C+%3Ca+href%3D+http%3A%2F%2Fwww.be bo.com%2FBuyV11+%3EOrder+Verapamil%3C%2Fa%3E%2C+25 35%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuy X51+%3EOrder+Xenical%3C%2Fa%3E%2C+8-))%2C+&submit=Submit 80 - 200.63.42.109 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2232 140
2008-09-26 01:48:08 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 193.34.144.22 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) *******.com 403 6 0 1763 170 499

5Mb daily? OMG, on my site I get 100Mb of logs daily with regular requests. I guess that responding with 403 or 404 is quite OK since you cannot physically affect those people.

And please tell me for what reason did you post this load of sht here?

This is a new domain. I have googled it and only find where it points to my site. I just wanted to know how to stop it. They are only getting worse. This is only 5 days old, 5mb, what will it be like in a month? I have blocked the following ip's already.

58.0.0.0-62.255.255.25
77.0.0.0-91.255.255.255
121.0.0.0-126.255.255.255
189.0.0.0-190.255.255.255
193.0.0.0-195.255.255.255
200.0.0.0-203.255.255.255
210.0.0.0-213.255.255.255
217.0.0.0-222.255.255.255

Why I posted this sht is hoping someone whould know a way to make it stop....

It don't look much like an attack to me.
Just a spam bot trying to flood your forum. Try to change your forum from GET requests to POST requests. A simple get to the url with all that stuff will become inoperative after that.

Beside, blocking the whole block of IP like you have done will block regular users too.

Originally Posted by tripy

It don't look much like an attack to me.
Just a spam bot trying to flood your forum. Try to change your forum from GET requests to POST requests. A simple get to the url with all that stuff will become inoperative after that.

Beside, blocking the whole block of IP like you have done will block regular users too.

All the ip's are from foriegn countries. I only want my guy to be able to access the server when they are on the road. US travelers only. The thing is, I dont even have a forum running. It there a way to block the bots all together?

Robots.txt?
Dissalow?
I figured after so long they will quit after geting nothing but 403 and 404 errors. Or is that just wishful thinking?
Thanks, if you can not tell I am new to all of this.

Or is that just wishful thinking?

Yep, it's wishful thinking...
If you don't even have a page on /forum/toast.asp, then don't bother.
You cannot do much anyaway, and 90% chances are that the bot posts blindly, without even caring to check the http return code.

They might eventually get bored...
I don't know for windows, but on linux, they are admin tools that read log files, and can dynamically create/modify an exclusion list based on the ip's.
I'm thinking about the mod_evasive module for apache here: http://www.zdziarski.com/projects/mod_evasive/.

mod_evasive is an evasive maneuvers module for Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool, and can be easily configured to talk to ipchains, firewalls, routers, and etcetera. mod_evasive presently reports abuses via email and syslog facilities.

Detection is performed by creating an internal dynamic hash table of IP Addresses and URIs, and denying any single IP address from any of the following:

• Requesting the same page more than a few times per second
• Making more than 50 concurrent requests on the same child per second
• Making any requests while temporarily blacklisted (on a blocking list)

This method has worked well in both single-server script attacks as well as distributed attacks, but just like other evasive tools, is only as useful to the point of bandwidth and processor consumption (e.g. the amount of bandwidth and processor required to receive/process/respond to invalid requests), which is why it's a good idea to integrate this with your firewalls and routers for maximum protection.

This module instantiates for each listener individually, and therefore has a built-in cleanup mechanism and scaling capabilities. Because of this per-child design, legitimate requests are never compromised (even from proxies and NAT addresses) but only scripted attacks. Even a user repeatedly clicking on 'reload' should not be affected unless they do it maliciously. mod_evasive is fully tweakable through the Apache configuration file, easy to incorporate into your web server, and easy to use.

But I don't know if there is/what is the pendant to IIS.