Tycoon Talk
Become a Big fish!
The number 1 forum for online business!
Post topics, ask questions, share your knowledge.
Tycoon Talk is part of Freelancer.com - find skilled workers online at a fraction of the cost.

Website and Server Administration Forum


You are currently viewing our Website and Server Administration Forum as a guest. Please register to participate.
Login



Reply
Help - What is this? Why?
Old 09-25-2008, 10:46 PM Question Help - What is this? Why?
Junior Talker

Posts: 4
Name: Jason
Trades: 0
I am getting attacked by these people trying to post on my forum. I have delted the forum, blocked all IP's in the range...Or tried to I think.

IIS default site, denied 200.0.0.0 sub 255.0.0.0 That should block whole range correct?

2008-09-26 01:32:26 W3SVC1 SERVER2003 **.**.**.** GET /forum/toast.asp action=posts&sub=search&author=Wffmzogy&subject=ML iLCrsFSsf&message=comment4%2C+%3Ca+href%3D%22http% 3A%2F%2Fventevogel.net%2Fuploadfiles%2Fblog.php%3F p%3D13790%23%22%3Epublic+education+network%3C%2Fa% 3E%2C+http%3A%2F%2Fventevogel.net%2Fuploadfiles%2F blog.php%3Fp%3D13790%23+public+education+network%2 C++639312%2C+%3Ca+href%3D%22http%3A%2F%2Fmartinamo ravcova.com%2Farchive%2Fblog.php%3Fp%3D20505%23%22 %3Ework+at+home+recommended+by+bbb%3C%2Fa%3E%2C+ht tp%3A%2F%2Fmartinamoravcova.com%2Farchive%2Fblog.p hp%3Fp%3D20505%23+work+at+home+recommended+by+bbb% 2C++rtik%2C+%3Ca+href%3D%22http%3A%2F%2Fcoloradoac reage.com%2Fimages%2Fblog.php%3Fp%3D1633%23%22%3Ea ctor+alexis+cruz+a+minister%3C%2Fa%3E%2C+http%3A%2 F%2Fcoloradoacreage.com%2Fimages%2Fblog.php%3Fp%3D 1633%23+actor+alexis+cruz+a+minister%2C++yepy%2C+% 3Ca+href%3D%22http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23%22%3Eecha%2Bcutting %3C%2Fa%3E%2C+http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23+echa%2Bcutting%2C++ %25%5B%5B%5B%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneha miltonfineart.com%2Fimages%2Fblog.php%3Fp%3D17876% 23%22%3Enew+england+schools+offering+dental+hygene %3C%2Fa%3E%2C+http%3A%2F%2Fjanehamiltonfineart.com %2Fimages%2Fblog.php%3Fp%3D17876%23+new+england+sc hools+offering+dental+hygene%2C++vbnef%2C+%3Ca+hre f%3D%22http%3A%2F%2Fjanehamiltonfineart.com%2Fimag es%2Fblog.php%3Fp%3D16981%23%22%3Eruger+12+ga+engr aved+shotgun%3C%2Fa%3E%2C+http%3A%2F%2Fjanehamilto nfineart.com%2Fimages%2Fblog.php%3Fp%3D16981%23+ru ger+12+ga+engraved+shotgun%2C++seggq%2C+%3Ca+href% 3D%22http%3A%2F%2Fsoundorsilence.nl%2Fphoto%2Fblog .php%3Fp%3D6044%23%22%3Eenergy+of+meat+statistics% 3C%2Fa%3E%2C+http%3A%2F%2Fsoundorsilence.nl%2Fphot o%2Fblog.php%3Fp%3D6044%23+energy+of+meat+statisti cs%2C++jzaxid%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneh amiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D18275 %23%22%3Ereino+aventura%3C%2Fa%3E%2C+http%3A%2F%2F janehamiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D 18275%23+reino+aventura%2C++035310%2C+&submit=Subm it 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2228 156

I see they are getting HTTP Error 403 - Forbidden

I get a log file of 5 mb a day for all thesse attacks. What are they, who can I get rid of them totally?

Last edited by jrb22250; 09-25-2008 at 10:47 PM..
jrb22250 is offline
Reply With Quote
View Public Profile
 
 
Register now for full access!
Old 09-25-2008, 10:56 PM Re: Help - What is this? Why?
Junior Talker

Posts: 4
Name: Jason
Trades: 0
After I wrote this

008-09-26 01:32:26 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Wffmzogy&subject=ML iLCrsFSsf&message=comment4%2C+%3Ca+href%3D%22http% 3A%2F%2Fventevogel.net%2Fuploadfiles%2Fblog.php%3F p%3D13790%23%22%3Epublic+education+network%3C%2Fa% 3E%2C+http%3A%2F%2Fventevogel.net%2Fuploadfiles%2F blog.php%3Fp%3D13790%23+public+education+network%2 C++639312%2C+%3Ca+href%3D%22http%3A%2F%2Fmartinamo ravcova.com%2Farchive%2Fblog.php%3Fp%3D20505%23%22 %3Ework+at+home+recommended+by+bbb%3C%2Fa%3E%2C+ht tp%3A%2F%2Fmartinamoravcova.com%2Farchive%2Fblog.p hp%3Fp%3D20505%23+work+at+home+recommended+by+bbb% 2C++rtik%2C+%3Ca+href%3D%22http%3A%2F%2Fcoloradoac reage.com%2Fimages%2Fblog.php%3Fp%3D1633%23%22%3Ea ctor+alexis+cruz+a+minister%3C%2Fa%3E%2C+http%3A%2 F%2Fcoloradoacreage.com%2Fimages%2Fblog.php%3Fp%3D 1633%23+actor+alexis+cruz+a+minister%2C++yepy%2C+% 3Ca+href%3D%22http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23%22%3Eecha%2Bcutting %3C%2Fa%3E%2C+http%3A%2F%2Fcoloradoacreage.com%2Fi mages%2Fblog.php%3Fp%3D1469%23+echa%2Bcutting%2C++ %25%5B%5B%5B%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneha miltonfineart.com%2Fimages%2Fblog.php%3Fp%3D17876% 23%22%3Enew+england+schools+offering+dental+hygene %3C%2Fa%3E%2C+http%3A%2F%2Fjanehamiltonfineart.com %2Fimages%2Fblog.php%3Fp%3D17876%23+new+england+sc hools+offering+dental+hygene%2C++vbnef%2C+%3Ca+hre f%3D%22http%3A%2F%2Fjanehamiltonfineart.com%2Fimag es%2Fblog.php%3Fp%3D16981%23%22%3Eruger+12+ga+engr aved+shotgun%3C%2Fa%3E%2C+http%3A%2F%2Fjanehamilto nfineart.com%2Fimages%2Fblog.php%3Fp%3D16981%23+ru ger+12+ga+engraved+shotgun%2C++seggq%2C+%3Ca+href% 3D%22http%3A%2F%2Fsoundorsilence.nl%2Fphoto%2Fblog .php%3Fp%3D6044%23%22%3Eenergy+of+meat+statistics% 3C%2Fa%3E%2C+http%3A%2F%2Fsoundorsilence.nl%2Fphot o%2Fblog.php%3Fp%3D6044%23+energy+of+meat+statisti cs%2C++jzaxid%2C+%3Ca+href%3D%22http%3A%2F%2Fjaneh amiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D18275 %23%22%3Ereino+aventura%3C%2Fa%3E%2C+http%3A%2F%2F janehamiltonfineart.com%2Fimages%2Fblog.php%3Fp%3D 18275%23+reino+aventura%2C++035310%2C+&submit=Subm it 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2228 156
2008-09-26 01:34:14 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Eric&subject=uvgCgX OGIjAIjPD&message=believe+in+%2C+http%3A%2F%2Fdupl ika.cl%2Fformulario1%2Fint%2F_img%2Ff_ormulariod.h tml+fancifull+beauty%2C++92991%2C+http%3A%2F%2Fric hard-eitel-muenchen.de%2F8__ndexa_z.html+licking+vagina%2C++a ipvwy%2C+http%3A%2F%2Fbasentermalny.pl%2Fpa%2Ftiny mc%2F_kontakt.html+xavier+price+porn%2C++%3E%3A-PP%2C+http%3A%2F%2Fyourviphosting.com%2Fshoponline %2Faccount_history.php+non+nude+teenager%2C++02778 6%2C+http%3A%2F%2Fwww.eesil.com%2Fswf%2Fslideshow% 2Fkpersos07_.html+rate+breast+implants%2C++%3D-)%2C+http%3A%2F%2Faacentral.org%2Fadra%2Flanguage% 2Fscre_n.html+big+ol+booty+****ing%2C++jnyzxm%2C+h ttp%3A%2F%2Fnyudental.co.kr%2Fnotice%2Fpopups%2F_i mg%2Finsert_table2.html+young+schoolgirls+in+panti es%2C++388191%2C+http%3A%2F%2Fventure-outdoors.com%2Fbeach-mo3b%2Fohio-government.html+leia+fake+nude%2C++jle%2C+http%3A% 2F%2Fwww.rincondelcurioso.es%2Fjuegos%2Fenv__ar-_sudoku.html+first+*******%2C++urvak%2C+http%3A%2F %2Ftornveilgroup.com%2Fcal%2Fmini_calendar.html+nu de+physical+stories%2C++080940%2C+http%3A%2F%2Fcoo lbluestudio.com%2F2006+Bike+%26+Blues+BBQ+Fayettev ille+Arkansas%2Ftarget145.html+upstate+ny+speed+da ting%2C++cyj%2C+http%3A%2F%2Fwww.casadasaude.com.b r%2Flavori+in+corso%2F_info_shopping_cart.html+sco rpio+women+sexuality%2C++%3E%3A-%5D%2C+http%3A%2F%2Febook-edition-france.com%2Flib%2Ffonctions%2F_img%2Fu_pdat__rss. html+live+lesbeian+porn%2C++hdy%2C+http%3A%2F%2Fso utherntexastitle.com%2Forder%2F6cd_01.html+young+a sian+schoolgirls+naked%2C++8-O%2C+http%3A%2F%2Fwww.eesil.com%2Fmvercellin%2FPre sentation1.html+giant+horse+dick%2C++%3E%3A%5D%2C+ http%3A%2F%2Fwww.oiol.sk%2Fflash_files%2Fvolby_200 8_.html+dick+van+dyke+brother%2C++%25%5B%5B%2C+htt p%3A%2F%2Fviaromaa.freehostia.com%2Fin_exu.html+** **+at+ween+show%2C++8-)%2C+http%3A%2F%2Fmartekdirect.com%2Fcash-quote%2Findustries3.html+http%3A%2F%2Fmartekdirect .com%2Fcash-quote%2Findustries3.html%2C++%3A-((%2C+http%3A%2F%2Fwww.solsticelifestyle.com%2F_im ages%2Fofflineb_r1.html+nudist+pictures%2C++glqlot %2C+http%3A%2F%2Fcoolbluestudio.com%2F2006+Bike+%2 6+Blues+BBQ+Fayetteville+Arkansas%2Ftarget200.html +lesbian+squirting+girls%2C++fus%2C+http%3A%2F%2Fe book-edition-france.com%2Flib%2Ffonctions%2F_img%2Fyfactu_re__t ml.html+spike+buffy+****%2C++rxqbd%2C+&submit=Subm it 80 - 93.174.94.113 HTTP/1.1 Opera/6.02+(Windows+NT+4.0;+U)+[en] www.*******.com 404 0 3 1849 2501 124
2008-09-26 01:35:31 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Dpmmxqxm&subject=rZ sFXriWfrAlucwfjOK&message=comment6%2C+http%3A%2F%2 Fholicz.yourfreehosting.net%2Fyoung-grils-nude.html+arab+grils+nude%2C++%3A-%5B%5B%2C+http%3A%2F%2Fdahlheilm.hostevo.com%2Fgia ntess-butt-crush-forum.html+butt+cheek+her%2C++%25-)%2C+http%3A%2F%2Flaboissiere.007sites.com%2Fthe-art-of-male-masturbation.html+girl+in+masturbation%2C++uzscc%2 C+http%3A%2F%2Flickbaum.hothostcity.com%2Fbusty-island-babes.html+hayden+panettiere+busty%2C++08792%2C+ht tp%3A%2F%2Fskoursky.977mb.com%2Fmarinai-housewife.html+2x01+desperate+hdtv+housewife+tv+vt v%2C++%25-(%2C+http%3A%2F%2Fpipines.007sites.com%2Ftulsa-transexuals.html+medicinal+herbs+used+by+transexua ls+to+increase+br%2C++8-))%2C+http%3A%2F%2Fdemanch.free-site-host.com%2Ffamous-toons-porno.html+tied+toons%2C++xwau%2C+http%3A%2F%2Fwaz ewski.free-site-host.com%2Fms-photo-editor-downloads.html+free+underground+gay+porn+clip+down loads%2C++563%2C+http%3A%2F%2Fdemanch.free-site-host.com%2Fdrawing-toons.html+****+toons%2C++dokuz%2C+http%3A%2F%2Fho licz.yourfreehosting.net%2Fbig-big-black-butt-dick-grils-white.html+big+big+black+butt+dick+grils+white%2C+ +ttnalv%2C+http%3A%2F%2Friffaler.my3gb.com%2Fsex-with-debbie-eberle.html+sex+with+debbie+eberle%2C++%25PP%2C+ht tp%3A%2F%2Fpipines.007sites.com%2Ffamous-transexuals.html+hormones+for+transexuals%2C++0645 %2C+http%3A%2F%2Fhadnot.247ihost.com%2Fhe-fingered-my-wife.html+blow+cheating+job+wife%2C++ohl%2C+http%3 A%2F%2Fsmitzney.101freehost.com%2Fsuperb-boob.html+free+natural+big+boob+movie%2C++146%2C+h ttp%3A%2F%2Fhadnot.247ihost.com%2Farab-swapping-wife.html+arab+swapping+wife%2C++1250%2C+http%3A%2 F%2Fozengin.gigazu.com%2Fphoto-editing-special-effects.html+humor+photo%2C++vya%2C+http%3A%2F%2Fg elizi.hostaim.com%2Fhermaphrodite-sex-story.html+hermaphrodite+sex+story%2C++yvrmn%2C+ht tp%3A%2F%2Fdaskas.247ihost.com%2Fremington-nylon-66-manual.html+how+strong+are+nylon+fishing+lines%2C+ +olfqx%2C+http%3A%2F%2Flickbaum.hothostcity.com%2F busty-latino-teens.html+busty+direct%2C++02198%2C+http%3A%2F%2F laboissiere.007sites.com%2F*****-masturbation.html+masturbation+girl%2C++440%2C+htt p%3A%2F%2Fsynard.freehostplace.com%2Fburn-exercise-fat-stomach.html+fat+blonde+girls%2C++mozgs%2C+http%3A %2F%2Flaboissiere.007sites.com%2F*****-substitutes-for-masturbation.html+symbian+masturbation%2C++cdquvi% 2C+http%3A%2F%2Fskoursky.977mb.com%2Freal-housewife-anal.html+everyday+housewife%2C++%3E%3A(((%2C+http %3A%2F%2Fhadnot.247ihost.com%2Ftreating-wife-as-a-teen.html+****+wife+clips%2C++%3A-D%2C+http%3A%2F%2Fdiluzia.aokhost.com%2Ffree-upskirt-spycam.html+japanese+teen+upskirt%2C++6687%2C+http %3A%2F%2Fdiluzia.aokhost.com%2Fjapanese-schoolgirl-upskirt.html+japanese+schoolgirl+upskirt%2C++axxr% 2C+http%3A%2F%2Fshere.007gb.com%2Fbizarre-stretching-inserting.html+bizarre+stretching+inserting%2C++%3 A-)))%2C+http%3A%2F%2Fozengin.gigazu.com%2Fhard-photo.html+hard+photo%2C++skqpln%2C+&submit=Submit 80 - 89.248.162.197 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 3147 7203
2008-09-26 01:38:01 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Aaytilxq&subject=Go MZLQhiFCnFSj&message=%3Ca+href%3D+http%3A%2F%2Fwww .bebo.com%2FBuyD12+%3EOrder+Diamox%3C%2Fa%3E%2C+%3 D%5B%5B%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.c om%2FBuyA91+%3EOrder+Adalat%3C%2Fa%3E%2C+%3A-%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2 FBuyM55+%3EOrder+Mextil%3C%2Fa%3E%2C+qqeif%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN4+%3EOrde r+Nortriptyline%3C%2Fa%3E%2C+314%2C+%3Ca+href%3D+h ttp%3A%2F%2Fwww.bebo.com%2FBuyR6+%3EOrder+Rulide%3 C%2Fa%3E%2C+kmxlw%2C+%3Ca+href%3D+http%3A%2F%2Fwww .bebo.com%2FBuyF3+%3EOrder+Frumil%3C%2Fa%3E%2C+006 %2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN0 0+%3EOrder+Nolvadex%3C%2Fa%3E%2C+%3D-%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2 FBuyC7+%3EOrder+Combipres%3C%2Fa%3E%2C+%3A(%2C+%3C a+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA96+%3EOr der+Alkeran%3C%2Fa%3E%2C+%3A-P%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA 72+%3EOrder+Allopurinol%3C%2Fa%3E%2C+62282%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyS54+%3EOrd er+Singulair%3C%2Fa%3E%2C+0205%2C+%3Ca+href%3D+htt p%3A%2F%2Fwww.bebo.com%2FBuyP98+%3EOrder+Persantin e%3C%2Fa%3E%2C+467062%2C+%3Ca+href%3D+http%3A%2F%2 Fwww.bebo.com%2FBuyP1+%3EOrder+Pamelor%3C%2Fa%3E%2 C+%25OOO%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com %2FBuyL47+%3EOrder+Lioresal%3C%2Fa%3E%2C+222996%2C +%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyC22+% 3EOrder+Casodex%3C%2Fa%3E%2C+%25-DDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBu yE12+%3EOrder+Eldepryl%3C%2Fa%3E%2C+8-%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBu yN8+%3EOrder+Naprosyn%3C%2Fa%3E%2C+8-O%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyC 040+%3EOrder+Clarinex%3C%2Fa%3E%2C+%3A-%5D%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.co m%2FBuyE5+%3EOrder+Emulgel%3C%2Fa%3E%2C+ezkt%2C+%3 Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyP288+%3E Order+Prevacid%3C%2Fa%3E%2C+143617%2C+%3Ca+href%3D +http%3A%2F%2Fwww.bebo.com%2FBuyL79+%3EOrder+Levit ra%3C%2Fa%3E%2C+budm%2C+%3Ca+href%3D+http%3A%2F%2F www.bebo.com%2FBuyA87+%3EOrder+Arava%3C%2Fa%3E%2C+ zbx%2C+&submit=Submit 80 - 200.63.42.109 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2255 156
2008-09-26 01:38:01 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 193.34.144.22 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) *******.com 403 6 0 1763 170 140
2008-09-26 01:38:29 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Ycjectho&subject=Vz bTuLczdwIXP&message=comment6%2C+http%3A%2F%2Fwww.t hethingsiwant.com%2Ffvj73e%2Flist%2Farchive-control-mind-sex-story+Archive+control+mind+sex+story%2C++hjdn%2C+h ttp%3A%2F%2Fwww.thethingsiwant.com%2Ffs416h%2Flist %2Farchive-free-nasty-sex-story+Archive+free+nasty+sex+story%2C++gukuha%2C+h ttp%3A%2F%2Fwww.thethingsiwant.com%2Ff4qzpv%2Flist %2Farchive-free-kristin-sex-story+Archive+free+kristin+sex+story%2C++%3A-)%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffw1eqv% 2Flist%2Farama-portal-liseli-sex-lunarsouls+Arama+portal+liseli+sex+lunarsouls%2C++ ghhpn%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffym 0kc%2Flist%2Farama-portal-liseli-sex-etomicpower+Arama+portal+liseli+sex+etomicpower%2C ++71482%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ff 23fsn%2Flist%2Farchive-sex-story-free-wife+Archive+sex+story+free+wife%2C++%3D-O%2C+http%3A%2F%2Fwww.thethingsiwant.com%2Ffl82et% 2Flist%2Farchive-erotic-nifty-sex-story+Archive+erotic+nifty+sex+story%2C++222%2C+&s ubmit=Submit 80 - 218.107.54.224 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1744 1262 562
2008-09-26 01:39:24 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Ehrghltq&subject=fm lwqZjJTQGnXediYiE&message=%3Ca+href%3D+http%3A%2F% 2Fwww.mylot.com%2FCheapMethotrexate+%3ECheap+Metho trexate%3C%2Fa%3E%2C+%3E%3A%5B%5B%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapNolvadex+%3EChea p+Nolvadex%3C%2Fa%3E%2C+ysw%2C+%3Ca+href%3D+http%3 A%2F%2Fwww.mylot.com%2FCheapCardarone+%3ECheap+Car darone%3C%2Fa%3E%2C+sdr%2C+%3Ca+href%3D+http%3A%2F %2Fwww.mylot.com%2FCheapCardizem+%3ECheap+Cardizem %3C%2Fa%3E%2C+%3E%3A-%5B%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapCardizem+%3ECheap+Cardizem%3C%2Fa%3E%2C+wqax%2 C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapC oumadin+%3ECheap+Coumadin%3C%2Fa%3E%2C+%3D-DDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapLanoxin+%3ECheap+Lanoxin%3C%2Fa%3E%2C+975%2C+% 3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapMext il+%3ECheap+Mextil%3C%2Fa%3E%2C+2538%2C+%3Ca+href% 3D+http%3A%2F%2Fwww.mylot.com%2FCheapTenormin+%3EC heap+Tenormin%3C%2Fa%3E%2C+%3D%5B%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapMevacor+%3ECheap +Mevacor%3C%2Fa%3E%2C+%3D-%5D%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FC heapPravachol+%3ECheap+Pravachol%3C%2Fa%3E%2C+kxvq %2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FChea pZocor+%3ECheap+Zocor%3C%2Fa%3E%2C+fxu%2C+%3Ca+hre f%3D+http%3A%2F%2Fwww.mylot.com%2FCheapFurosemide+ %3ECheap+Furosemide%3C%2Fa%3E%2C+4075%2C+%3Ca+href %3D+http%3A%2F%2Fwww.mylot.com%2FCheapPilagan5ml+% 3ECheap+Pilagan5ml%3C%2Fa%3E%2C+xzsrpa%2C+%3Ca+hre f%3D+http%3A%2F%2Fwww.mylot.com%2FCheapAciphex+%3E Cheap+Aciphex%3C%2Fa%3E%2C+9022%2C+%3Ca+href%3D+ht tp%3A%2F%2Fwww.mylot.com%2FCheapCarafate+%3ECheap+ Carafate%3C%2Fa%3E%2C+6117%2C+%3Ca+href%3D+http%3A %2F%2Fwww.mylot.com%2FCheapColospa+%3ECheap+Colosp a%3C%2Fa%3E%2C+5681%2C+%3Ca+href%3D+http%3A%2F%2Fw ww.mylot.com%2FCheapDuphalac+%3ECheap+Duphalac%3C% 2Fa%3E%2C+%3AOOO%2C+%3Ca+href%3D+http%3A%2F%2Fwww. mylot.com%2FCheapImodium+%3ECheap+Imodium%3C%2Fa%3 E%2C+%3ADDD%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot .com%2FCheapNexium+%3ECheap+Nexium%3C%2Fa%3E%2C+cq t%2C+%3Ca+href%3D+http%3A%2F%2Fwww.mylot.com%2FChe apPepcid+%3ECheap+Pepcid%3C%2Fa%3E%2C+8802%2C+%3Ca +href%3D+http%3A%2F%2Fwww.mylot.com%2FCheapPrevaci d+%3ECheap+Prevacid%3C%2Fa%3E%2C+2010%2C+%3Ca+href %3D+http%3A%2F%2Fwww.mylot.com%2FCheapPrilosec+%3E Cheap+Prilosec%3C%2Fa%3E%2C+23807%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.mylot.com%2FCheapProtonix+%3EChea p+Protonix%3C%2Fa%3E%2C+cetgw%2C+%3Ca+href%3D+http %3A%2F%2Fwww.mylot.com%2FCheapReglan+%3ECheap+Regl an%3C%2Fa%3E%2C+rzx%2C+&submit=Submit 80 - 200.63.42.111 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2703 124
2008-09-26 01:39:27 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 78.157.143.186 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 174 234
2008-09-26 01:40:39 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Jvyutqls&subject=hc EQoTeaycRq&message=Where+it+is+possible+to+buy+the +%3F+It+is+very+necessary!+%2C+http%3A%2F%2Fvicodi n.yoarray.com%2Fthe-vicodin-song.html+the+vicodin+song%2C++prpmkd%2C+http%3A%2 F%2Fvicodin.yoarray.com%2Fvicodin-abuse.html+vicodin+abuse%2C++%3E%3A(%2C+http%3A%2F %2Fvicodin.yoarray.com%2Fdarvocet-vicodin-pain-relief.html+darvocet+vicodin+pain+relief%2C++feaz% 2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-detox.html+vicodin+detox%2C++8DD%2C+http%3A%2F%2Fv icodin.yoarray.com%2Fvicodin-and-ibuprofen.html+vicodin+and+ibuprofen%2C++%3A-%5B%5B%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicod in-hp.html+vicodin+hp%2C++23125%2C+http%3A%2F%2Fvicod in.yoarray.com%2Fvicodin-with-no-prescription.html+vicodin+with+no+prescription%2C+ +%3E%3A((%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fwi ll-vicodin-show-up-on-a-drug-test.html+will+vicodin+show+up+on+a+drug+test%2C++ %3E%3A(((%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvi codin-water-solubility.html+vicodin+water+solubility%2C++%3DOO O%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-%26amp%3B-zoloft.html+vicodin+%26amp%3B+zoloft%2C++xcim%2C+& submit=Submit 80 - 193.171.32.4 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+6.2;+SV1) www.*******.com 403 6 0 1763 1449 171
2008-09-26 01:41:10 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Everett&subject=CMn IdqAkzIBG&message=The+best+of+friends+must+part%2C +http%3A%2F%2Fwww.casadasaude.com.br%2Floja%2F_coo kie_usage.html+twilight+sexy+matures%2C++8-OOO%2C+http%3A%2F%2Fkreisspielleiter-donau.de%2F_images%2Fscreen_f.html+medic+sex%2C++% 25%5B%2C+http%3A%2F%2Fviaromaa.freehostia.com%2F_i mages%2F_index.html+imajin+romance%2C++954%2C+http %3A%2F%2Fdoingthesuitcases.com%2Fknowworld%2Fsexxy porn%2F400_6.html+elevation+in+counseling%2C++%3D% 5B%5B%2C+http%3A%2F%2Fwww.casaserrana.com.ar%2Fcut enews-e%2Fskins%2F_images%2F_default2.html+mature+adukt% 2C++8-%5B%5B%2C+http%3A%2F%2Fduplika.cl%2Forl%2Ff_ormula r_o.html+chubby+teens+sex+chat%2C++687%2C+http%3A% 2F%2Fwww.pendientesparati.com%2Fpedidos%2Fchoos_ec ategory.html+the+great+passion+play%2C++0427%2C+ht tp%3A%2F%2Fmartekdirect.com%2Fcash-quote%2Fcomp_ny.html+korea+sex+tours%2C++8-OOO%2C+http%3A%2F%2Fwww.apac-eureka.org%2Fenlaces%2F_Consejo_revista1.html+fema le+teenage+strips%2C++%3E%3A-)))%2C+http%3A%2F%2Fwww.living-water-villa.com%2Fhtml%2Fboard%2Fdefault-def_ult%5E%25%2593_%5E930%5E930F0960%25%25them_.ht ml+mtv+new+york+nude%2C++zrc%2C+http%3A%2F%2Fwww.c reocomunicazione.it%2Fsito%2Farea_riservata%2Fboo_ __k1.html+kim+director+sex+video%2C++%3D%5B%5B%5B% 2C+http%3A%2F%2Fagricolleges.com%2Ftest%2Fperl%2Ft _st_info1.html+stories+of+romance%2C++024037%2C+ht tp%3A%2F%2Fvapsen.dk%2F_borders%2Fdetgulekuld13.ht ml+exotic+erotic+stories+she+males%2C++173%2C+http %3A%2F%2Fmechanik-sc.pl%2Fwww%2Fjs%2F_backup%2FOrder_Info1.html+post r+your+beaver%2C++pwtha%2C+http%3A%2F%2Fwww.buhara dizayn.com%2Fflashsitelerrrrgfdchg886%40%40dfsd!!% 2F9advanced_search.html+joe+bang+official+site%2C+ +ppds%2C+http%3A%2F%2Fwww.spiele-werbung.de%2Fkoi-aufzucht%2F_i_ndex.html+love+and+theft+lyrics%2C++ 370%2C+http%3A%2F%2Fzelenival.com%2Ftwg163%2Fjs%2F _img%2F8_simple0.html+indian+school+girls+sex%2C++ 1684%2C+http%3A%2F%2Ftvekorea.org%2Fboard_test%2Fr egist.asp+erotic+jjeans+women+photos%2C++kuax%2C+h ttp%3A%2F%2Fwww.panelmat.com.ar%2Ftest%2Fphp%2Ftes _t9.html+muscled+gay+men%2C++tpcwi%2C+http%3A%2F%2 Fwww.iictechnologies.com%2FHIHWG%2Fcontactus_inc9. html+excite+sensual%2C++%25((%2C+http%3A%2F%2Fwww. fc-boveresses.ch%2FIndex_photos%2Fpages%2FDS_N1056_gi f.html+2002+ford+focus+mpg%2C++%3DO%2C+http%3A%2F% 2Fwww.3townpaintball.pl%2F_jgfw_%2Fjs%2Foff_ine.ht ml+my+boobs+got+bigger%2C++754463%2C+http%3A%2F%2F www.deep-blue.com.ar%2Fcv%2F_img%2Fgr_cias.html+huge+round+ butts%2C++56651%2C+http%3A%2F%2Felsalvadorya.com%2 Fmarinadecentroamerica%2Fdispla__mes__ages.html+po rnstar+milf+deepthroat+famous%2C++%25%5B%5B%5B%2C+ http%3A%2F%2Fwww.loc-imagens.com.br%2Fsistema%2F_2a.html+sex+product+di stributor%2C++430607%2C+http%3A%2F%2Fforestpozega. com%2Fenglish%2Fosalon_drd1.html+http%3A%2F%2Ffore stpozega.com%2Fenglish%2Fosalon_drd1.html%2C++kay% 2C+http%3A%2F%2Fwww.fassadengestaltung-ehst.de%2Fhtml%2Flogin%2F_img%2F5wdvc-schiene.html+pov+panty+sex+movies%2C++121956%2C+ht tp%3A%2F%2Ftodopcweb.com%2Fcddv_.html+popular+song s+for+swing%2C++883391%2C+http%3A%2F%2Fdharmacon.n et%2Fmain%2Fdescargas_v%2F6screen.html+brazilian+p ics+nude%2C++8-OOO%2C+&submit=Submit 80 - 93.174.94.113 HTTP/1.1 Mozilla/5.0+(X11;+U;+Linux+i686;+en-US;+rv:1.0.1)+Gecko/20020826 www.*******.com 404 0 3 1849 3350 234
2008-09-26 01:41:42 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Hcbobbiy&subject=Lw IDxOxibHDNQo&message=comment2%2C+%3Ca+href%3D%22ht tp%3A%2F%2Fwww.realtimesu.com%2Fgallery%2Fdocs%2F7 %2Fblog.php%3Fp%3D2266%231%22%3Eriverridgewhitetai ls%3C%2Fa%3E%2C+http%3A%2F%2Fwww.realtimesu.com%2F gallery%2Fdocs%2F7%2Fblog.php%3Fp%3D2266%231+river ridgewhitetails%2C++puli%2C+%3Ca+href%3D%22http%3A %2F%2Fwww.radioum.com.br%2Fformulario%2F9%2Fblog.p hp%3Fp%3D18028%231%22%3Eboat+jobs+offer+emplio%3C% 2Fa%3E%2C+http%3A%2F%2Fwww.radioum.com.br%2Fformul ario%2F9%2Fblog.php%3Fp%3D18028%231+boat+jobs+offe r+emplio%2C++775237%2C+%3Ca+href%3D%22http%3A%2F%2 Fwww.kadirlitrac.org%2Fdosyalar%2F1%2Fblog.php%3Fp %3D15677%231%22%3Ebridlington+environment%3C%2Fa%3 E%2C+http%3A%2F%2Fwww.kadirlitrac.org%2Fdosyalar%2 F1%2Fblog.php%3Fp%3D15677%231+bridlington+environm ent%2C++1296%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.re fzene.sk%2Fflash%2F4%2Fblog.php%3Fp%3D8719%231%22% 3Ebridgette+hull%3C%2Fa%3E%2C+http%3A%2F%2Fwww.ref zene.sk%2Fflash%2F4%2Fblog.php%3Fp%3D8719%231+brid gette+hull%2C++%3A-)%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.radioum.com.b r%2Fformulario%2F6%2Fblog.php%3Fp%3D15476%231%22%3 Erandy+orton+lotion+in+bag+roche%3C%2Fa%3E%2C+http %3A%2F%2Fwww.radioum.com.br%2Fformulario%2F6%2Fblo g.php%3Fp%3D15476%231+randy+orton+lotion+in+bag+ro che%2C++fyn%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.joi eriacliment.com%2Fjoieria%2Famfphp%2F9%2Fblog.php% 3Fp%3D14130%231%22%3Erefers+to+self+in+third+perso n+psychology%3C%2Fa%3E%2C+http%3A%2F%2Fwww.joieria climent.com%2Fjoieria%2Famfphp%2F9%2Fblog.php%3Fp% 3D14130%231+refers+to+self+in+third+person+psychol ogy%2C++57630%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.i nfoebit.com%2Fprofiles%2Fdefault%2F2%2Fblog.php%3F p%3D21801%231%22%3Ereggae+melody%3C%2Fa%3E%2C+http %3A%2F%2Fwww.infoebit.com%2Fprofiles%2Fdefault%2F2 %2Fblog.php%3Fp%3D21801%231+reggae+melody%2C++%25-DDD%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.refzene.sk% 2Fflash%2F3%2Fblog.php%3Fp%3D7659%231%22%3Erampage +stock%3C%2Fa%3E%2C+http%3A%2F%2Fwww.refzene.sk%2F flash%2F3%2Fblog.php%3Fp%3D7659%231+rampage+stock% 2C++071366%2C+%3Ca+href%3D%22http%3A%2F%2Fwww.info ebit.com%2Fprofiles%2Fdefault%2F1%2Fblog.php%3Fp%3 D20092%231%22%3Ebuffalo+ny+nursing+jobs%3C%2Fa%3E% 2C+http%3A%2F%2Fwww.infoebit.com%2Fprofiles%2Fdefa ult%2F1%2Fblog.php%3Fp%3D20092%231+buffalo+ny+nurs ing+jobs%2C++51117%2C+&submit=Submit 80 - 200.63.42.77 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2531 156
2008-09-26 01:43:41 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Vxqqzufk&subject=sT nocHToqA&message=comment5%2C+http%3A%2F%2Fioepiytx .freeweb-hosting.org%2Fused-metal-fabricating-equipment-659.html+used+metal+fabricating+equipment%2C++0502 06%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fdog-joint-health-207.html+dog+joint+health%2C++rjzeao%2C+http%3A%2F %2Fioepiytx.freeweb-hosting.org%2Fazn-dreamers-fixing-a-broken-heart-263.html+azn+dreamers+fixing+a+broken+heart%2C++8-(%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Frichmond-ca-ymca-475.html+richmond+ca+ymca%2C++%3D(%2C+http%3A%2F%2 Fioepiytx.freeweb-hosting.org%2Fstarhub-maxonline-262.html+starhub+maxonline%2C++%3AOOO%2C+http%3A%2 F%2Fioepiytx.freeweb-hosting.org%2Fruth-frendo-444.html+ruth+frendo%2C++%3D-%5D%5D%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fla-livin-loca-lyric-martin-ricky-vida-13.html+la+livin+loca+lyric+martin+ricky+vida%2C++ 0069%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fhouse-christian-radio-286.html+house+christian+radio%2C++07203%2C+http%3 A%2F%2Fioepiytx.freeweb-hosting.org%2Fagencije-za-nekretnine-zagreb-279.html+agencije+za+nekretnine+zagreb%2C++%3D-O%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fchristian-marriage-service-602.html+christian+marriage+service%2C++ljwhi%2C+h ttp%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fcroatia-travel-packages-278.html+croatia+travel+packages%2C++jvk%2C+http%3 A%2F%2Fioepiytx.freeweb-hosting.org%2Fnancy-eaton-death-24.html+nancy+eaton+death%2C++%3D-%5B%2C+http%3A%2F%2Fioepiytx.freeweb-hosting.org%2Fdirect-line-rim-781.html+direct+line+rim%2C++dyrkxf%2C+http%3A%2F% 2Fioepiytx.freeweb-hosting.org%2Fby-a-long-shot-550.html+by+a+long+shot%2C++zvobc%2C+http%3A%2F%2F ioepiytx.freeweb-hosting.org%2Fbob-marley-ringtone-rtttl-557.html+bob+marley+ringtone+rtttl%2C++%3E%3A-PP%2C+&submit=Submit 80 - 200.144.17.74 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2058 374
2008-09-26 01:43:59 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Tphjyjuz&subject=QY KVUuRWgLdLzYzq&message=Help+to+find+in+the+Interne t+the+!+Write+on+e-mail.+%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicod in-and-adderall-taken-together.html+vicodin+and+adderall+taken+together% 2C++llnl%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fhow-to-shoot-vicodin.html+how+to+shoot+vicodin%2C++316%2C+http% 3A%2F%2Fvicodin.yoarray.com%2Fvicodin-m357.html+vicodin+m357%2C++5596%2C+http%3A%2F%2Fvi codin.yoarray.com%2Fbest-way-to-get-high-on-vicodin.html+best+way+to+get+high+on+vicodin%2C++p nolr%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fvicodin-percoset.html+vicodin+percoset%2C++jntuvs%2C+http% 3A%2F%2Fvicodin.yoarray.com%2Fvicodin-spanish.html+vicodin+spanish%2C++hzhnbh%2C+http%3A %2F%2Fvicodin.yoarray.com%2Fvicodin-water-solubility.html+vicodin+water+solubility%2C++%3D-%5B%5B%5B%2C+http%3A%2F%2Fvicodin.yoarray.com%2Fbu ying-vicodin-without-a-prescription.html+buying+vicodin+without+a+prescri ption%2C++pxlh%2C+http%3A%2F%2Fvicodin.yoarray.com %2Fvicodin-1000mg.html+vicodin+1000mg%2C++zqejod%2C+http%3A%2 F%2Fvicodin.yoarray.com%2Fcan-you-get-high-off-vicodin.html+can+you+get+high+off+vicodin%2C++akmf n%2C+&submit=Submit 80 - 212.118.158.68 HTTP/1.1 Opera/9.24+(Windows+NT+5.1;+U;+en) www.*******.com 403 6 0 1744 1435 234
2008-09-26 01:45:09 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Xeiosqok&subject=UI KfrQBrRLdetya&message=comment5%2C+http%3A%2F%2Fwww .blogigo.ch%2Ff5i15p8+nude+lesbians+sample+videos% 2C++%3E%3A%5D%5D%5D%2C+http%3A%2F%2Fwww.blogigo.de %2Ffzqn42d+jeannie+pepper+videos%2C++%3A-DD%2C+http%3A%2F%2Fwww.blogigo.ch%2Ffu8hyqu+crunch +workout+videos%2C++052286%2C+http%3A%2F%2Fwww.blo gigo.de%2Ffp1kx6b+travis+pastrana+fmx+videos%2C++1 2290%2C+http%3A%2F%2Fwww.blogigo.com%2Ffrwcgu7+vid eos+of+b%2C++15250%2C+http%3A%2F%2Fwww.blogigo.com %2Ffkci797+sexual+harrassment+training+videos%2C++ %3A-P%2C+http%3A%2F%2Fwww.blogigo.co.uk%2Ffkbnq17+stre aming+bondage+videos%2C++vpcj%2C+http%3A%2F%2Fwww. blogigo.ch%2Ffyos3dn+posting+videos%2C++tsnfkc%2C+ http%3A%2F%2Fwww.blogigo.cn%2Ffr6ck1b+crime+scene+ investigation+videos%2C++ssylk%2C+http%3A%2F%2Fwww .blogigo.co.uk%2Ff3elewl+top+aolo+girl+videos%2C++ 8534%2C+&submit=Submit 80 - 83.59.219.60 HTTP/1.0 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 1093 11265
2008-09-26 01:47:59 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp action=posts&sub=search&author=Euqappey&subject=Sd LxBlruEIXSIpzwm&message=%3Ca+href%3D+http%3A%2F%2F www.bebo.com%2FBuyC501+%3EOrder+Cardarone%3C%2Fa%3 E%2C+651%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com %2FBuyF2+%3EOrder+Furosemide%3C%2Fa%3E%2C+747%2C+% 3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyB6+%3EO rder+Biaxin%3C%2Fa%3E%2C+uydilp%2C+%3Ca+href%3D+ht tp%3A%2F%2Fwww.bebo.com%2FBuyO4+%3EOrder+Ovral%3C% 2Fa%3E%2C+hkq%2C+%3Ca+href%3D+http%3A%2F%2Fwww.beb o.com%2FBuyC14+%3EOrder+Cytoxan%3C%2Fa%3E%2C+6009% 2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA30 3+%3EOrder+Actos%3C%2Fa%3E%2C+oil%2C+%3Ca+href%3D+ http%3A%2F%2Fwww.bebo.com%2FBuyA309+%3EOrder+Aldac tone%3C%2Fa%3E%2C+qdmr%2C+%3Ca+href%3D+http%3A%2F% 2Fwww.bebo.com%2FBuyM75+%3EOrder+Methotrexate%3C%2 Fa%3E%2C+830399%2C+%3Ca+href%3D+http%3A%2F%2Fwww.b ebo.com%2FBuyS24+%3EOrder+Sumycin%3C%2Fa%3E%2C+084 %2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyG7 +%3EOrder+Glucophage%3C%2Fa%3E%2C+%25PPP%2C+%3Ca+h ref%3D+http%3A%2F%2Fwww.bebo.com%2FBuyA18+%3EOrder +Amaryl%3C%2Fa%3E%2C+%3DP%2C+%3Ca+href%3D+http%3A% 2F%2Fwww.bebo.com%2FBuyC66+%3EOrder+Celecoxib%3C%2 Fa%3E%2C+%3A%5D%5D%2C+%3Ca+href%3D+http%3A%2F%2Fww w.bebo.com%2FBuyR8+%3EOrder+Risperdal%3C%2Fa%3E%2C +kkq%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FB uyF22+%3EOrder+Feldene%3C%2Fa%3E%2C+ihosot%2C+%3Ca +href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN70+%3EOrd er+Norvasc%3C%2Fa%3E%2C+511639%2C+%3Ca+href%3D+htt p%3A%2F%2Fwww.bebo.com%2FBuyC42+%3EOrder+Claritin% 3C%2Fa%3E%2C+60926%2C+%3Ca+href%3D+http%3A%2F%2Fww w.bebo.com%2FBuyT0+%3EOrder+Tenormin%3C%2Fa%3E%2C+ 72385%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2F BuyM08+%3EOrder+Mobic%3C%2Fa%3E%2C+%3A%5B%2C+%3Ca+ href%3D+http%3A%2F%2Fwww.bebo.com%2FBuyN2+%3EOrder +Nexium%3C%2Fa%3E%2C+xoohlc%2C+%3Ca+href%3D+http%3 A%2F%2Fwww.bebo.com%2FBuyC26+%3EOrder+Cozaar%3C%2F a%3E%2C+%25)))%2C+%3Ca+href%3D+http%3A%2F%2Fwww.be bo.com%2FBuyV11+%3EOrder+Verapamil%3C%2Fa%3E%2C+25 35%2C+%3Ca+href%3D+http%3A%2F%2Fwww.bebo.com%2FBuy X51+%3EOrder+Xenical%3C%2Fa%3E%2C+8-))%2C+&submit=Submit 80 - 200.63.42.109 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) www.*******.com 403 6 0 1763 2232 140
2008-09-26 01:48:08 W3SVC1 SERVER2003 **.**.**.*** GET /forum/toast.asp sub=showsearch&action=posts 80 - 193.34.144.22 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) *******.com 403 6 0 1763 170 499
jrb22250 is offline
Reply With Quote
View Public Profile
 
Old 09-26-2008, 03:45 AM Re: Help - What is this? Why?
mtishetsky's Avatar
King Spam Talker

Posts: 1,226
Name: Mike
Location: Mataro, Spain
Trades: 0
5Mb daily? OMG, on my site I get 100Mb of logs daily with regular requests. I guess that responding with 403 or 404 is quite OK since you cannot physically affect those people.
__________________

Please login or register to view this content. Registration is FREE
-
Please login or register to view this content. Registration is FREE
-
Please login or register to view this content. Registration is FREE

And don't forget to give me talkupation!
mtishetsky is offline
Reply With Quote
View Public Profile Visit mtishetsky's homepage!
 
Old 09-26-2008, 03:46 AM Re: Help - What is this? Why?
mtishetsky's Avatar
King Spam Talker

Posts: 1,226
Name: Mike
Location: Mataro, Spain
Trades: 0
And please tell me for what reason did you post this load of sht here?
__________________

Please login or register to view this content. Registration is FREE
-
Please login or register to view this content. Registration is FREE
-
Please login or register to view this content. Registration is FREE

And don't forget to give me talkupation!
mtishetsky is offline
Reply With Quote
View Public Profile Visit mtishetsky's homepage!
 
Old 09-26-2008, 09:21 AM Re: Help - What is this? Why?
Junior Talker

Posts: 4
Name: Jason
Trades: 0
This is a new domain. I have googled it and only find where it points to my site. I just wanted to know how to stop it. They are only getting worse. This is only 5 days old, 5mb, what will it be like in a month? I have blocked the following ip's already.

58.0.0.0-62.255.255.25
77.0.0.0-91.255.255.255
121.0.0.0-126.255.255.255
189.0.0.0-190.255.255.255
193.0.0.0-195.255.255.255
200.0.0.0-203.255.255.255
210.0.0.0-213.255.255.255
217.0.0.0-222.255.255.255

Why I posted this sht is hoping someone whould know a way to make it stop....
jrb22250 is offline
Reply With Quote
View Public Profile
 
Old 09-26-2008, 09:51 AM Re: Help - What is this? Why?
tripy's Avatar
Do not try this at home!

Posts: 3,621
Name: Thierry
Location: I'm the uber Spaminator !
Trades: 0
It don't look much like an attack to me.
Just a spam bot trying to flood your forum. Try to change your forum from GET requests to POST requests. A simple get to the url with all that stuff will become inoperative after that.

Beside, blocking the whole block of IP like you have done will block regular users too.
__________________
Only a biker knows why a dog sticks his head out the window.

Last edited by tripy; 09-26-2008 at 09:53 AM..
tripy is offline
Reply With Quote
View Public Profile Visit tripy's homepage!
 
Old 09-26-2008, 10:59 AM Re: Help - What is this? Why?
Junior Talker

Posts: 4
Name: Jason
Trades: 0
Quote:
Originally Posted by tripy View Post
It don't look much like an attack to me.
Just a spam bot trying to flood your forum. Try to change your forum from GET requests to POST requests. A simple get to the url with all that stuff will become inoperative after that.

Beside, blocking the whole block of IP like you have done will block regular users too.
All the ip's are from foriegn countries. I only want my guy to be able to access the server when they are on the road. US travelers only. The thing is, I dont even have a forum running. It there a way to block the bots all together?

Robots.txt?
Dissalow?
I figured after so long they will quit after geting nothing but 403 and 404 errors. Or is that just wishful thinking?
Thanks, if you can not tell I am new to all of this.

Last edited by jrb22250; 09-26-2008 at 11:00 AM..
jrb22250 is offline
Reply With Quote
View Public Profile
 
Old 09-26-2008, 12:17 PM Re: Help - What is this? Why?
tripy's Avatar
Do not try this at home!

Posts: 3,621
Name: Thierry
Location: I'm the uber Spaminator !
Trades: 0
Quote:
Or is that just wishful thinking?
Yep, it's wishful thinking...
If you don't even have a page on /forum/toast.asp, then don't bother.
You cannot do much anyaway, and 90% chances are that the bot posts blindly, without even caring to check the http return code.

They might eventually get bored...
I don't know for windows, but on linux, they are admin tools that read log files, and can dynamically create/modify an exclusion list based on the ip's.
I'm thinking about the mod_evasive module for apache here: http://www.zdziarski.com/projects/mod_evasive/.
Quote:
mod_evasive is an evasive maneuvers module for Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool, and can be easily configured to talk to ipchains, firewalls, routers, and etcetera. mod_evasive presently reports abuses via email and syslog facilities.

Detection is performed by creating an internal dynamic hash table of IP Addresses and URIs, and denying any single IP address from any of the following:
  • Requesting the same page more than a few times per second
  • Making more than 50 concurrent requests on the same child per second
  • Making any requests while temporarily blacklisted (on a blocking list)
This method has worked well in both single-server script attacks as well as distributed attacks, but just like other evasive tools, is only as useful to the point of bandwidth and processor consumption (e.g. the amount of bandwidth and processor required to receive/process/respond to invalid requests), which is why it's a good idea to integrate this with your firewalls and routers for maximum protection.

This module instantiates for each listener individually, and therefore has a built-in cleanup mechanism and scaling capabilities. Because of this per-child design, legitimate requests are never compromised (even from proxies and NAT addresses) but only scripted attacks. Even a user repeatedly clicking on 'reload' should not be affected unless they do it maliciously. mod_evasive is fully tweakable through the Apache configuration file, easy to incorporate into your web server, and easy to use.
But I don't know if there is/what is the pendant to IIS.
__________________
Only a biker knows why a dog sticks his head out the window.

Last edited by tripy; 09-26-2008 at 12:20 PM..
tripy is offline
Reply With Quote
View Public Profile Visit tripy's homepage!
 
Reply     « Reply to Help - What is this? Why?
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off





   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML



Page generated in 0.51529 seconds with 12 queries