Question : Under DDOS attack.  Logs enclosed.  What type of attack is this and how do we mitigate?

Here is an example of our HTTPERR log which is cycling very often and filling up the hard drive.  Any ideas on what type of attack this is?  Our web hosting provider has not been helpful at all.  This has been going on for 7 days now.  At first it was a SYN floor with malformed packets.  Then it was full packets.  And now we are seeing this...

#Software: Microsoft HTTP API 1.0
#Version: 1.0
#Date: 2010-07-19 11:51:48
#Fields: date time c-ip c-port s-ip s-port cs-version cs-method cs-uri sc-status s-siteid s-reason s-queuename
2010-07-19 11:51:47 122.37.243.18 23721 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4836 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3131 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.165.9.154 2606 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4886 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4834 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3134 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3132 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3133 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.40 50618 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.165.9.154 2607 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23722 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 121.177.98.198 6975 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 61.76.167.26 2619 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3135 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4887 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.34 36847 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4918 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23723 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 85.138.80.194 1107 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 222.123.8.202 15845 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 121.168.174.126 31568 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 222.252.117.72 4332 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3136 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.58 7243 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3137 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23724 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23725 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 85.138.80.194 1111 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23726 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3139 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 121.177.98.198 6976 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 112.168.83.164 36945 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.42 34870 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 95.14.83.242 4213 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.62 5232 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3138 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 114.45.218.126 3140 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 41.225.128.96 3018 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 193.179.245.196 1108 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4922 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4923 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23727 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23728 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4924 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 121.177.98.198 6977 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23729 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 58.186.95.254 11211 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 220.255.0.50 7722 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 121.168.174.126 40777 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4927 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23730 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 85.9.109.194 2168 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 58.224.152.250 33163 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 58.224.152.250 33156 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 112.168.83.164 36969 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 112.168.83.164 36968 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 122.37.243.18 23731 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 201.18.236.210 1638 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:47 113.30.0.182 4988 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6978 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.255.0.44 42209 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33159 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33158 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23732 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23733 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23734 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1352 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 200.151.66.194 1633 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1351 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 83.10.38.48 1638 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 88.241.216.170 1048 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 200.151.66.194 1632 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 114.59.6.74 3736 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33154 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 189.18.198.164 1911 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 189.18.198.164 1914 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 189.18.198.164 1912 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 189.18.198.164 1913 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23736 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6979 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23735 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 124.110.14.104 2012 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1354 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.255.0.36 62223 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33276 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33164 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.181.16.232 1093 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34183 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23737 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.255.0.38 58688 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 201.18.236.210 1595 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1353 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23738 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63252 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63253 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33155 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33277 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33279 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34295 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33265 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34289 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 189.18.198.164 1900 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 113.30.0.182 4069 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 109.92.55.108 2522 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1337 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23740 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6930 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6929 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33272 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.186.95.254 11267 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 113.30.0.182 4065 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 113.30.0.182 4073 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23739 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34291 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34285 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1336 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23741 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.162.26.28 20847 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1338 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23742 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63254 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34303 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63255 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63256 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34290 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 85.159.0.34 63257 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34284 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 113.30.0.182 4075 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23743 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 201.18.236.210 1598 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 201.18.236.210 1641 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6981 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23744 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33257 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 212.156.167.176 3144 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.129.144.52 2631 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23745 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 113.30.0.182 4080 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34286 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 34287 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.255.0.42 2885 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1339 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23746 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 88.241.216.170 3977 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 201.18.236.210 1603 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 88.241.216.170 1249 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1341 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33254 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1340 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33256 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23748 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23747 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 58.224.152.250 33259 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1355 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1356 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 88.241.216.170 1297 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 119.197.255.248 60361 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 119.197.255.248 63361 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6982 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 121.177.98.198 6983 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 220.255.0.54 13458 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23750 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 115.86.245.114 1357 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-19 11:51:48 122.37.243.18 23749 xx.xx.xx.xx 80 HTTP/0.0 GET - 400 - URL -
2010-07-22 04:16:17 64.14.3.218 57277 xx.xx.xx.xx 80 HTTP/1.1 GET /..\..\..\..\..\..\..\..\..\..\..\..\etc/passwd 403 - Forbidden -
2010-07-22 04:16:18 64.14.3.218 58263 xx.xx.xx.xx 80 HTTP/1.1 GET /..\..\..\..\..\..\..\..\..\..\..\..\boot.ini 403 - Forbidden -
2010-07-22 04:16:18 64.14.3.218 58521 xx.xx.xx.xx 80 HTTP/1.1 GET //..//..//..//..//..//..//..//..//..//etc/passwd 403 - Forbidden -
2010-07-22 04:16:19 64.14.3.218 58678 xx.xx.xx.xx 80 HTTP/1.1 GET //..//..//..//..//..//..//..//..//..//boot.ini 403 - Forbidden -
2010-07-22 04:16:19 64.14.3.218 58934 xx.xx.xx.xx 80 HTTP/1.1 GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd 403 - Forbidden -
2010-07-22 04:16:20 64.14.3.218 59091 xx.xx.xx.xx 80 HTTP/1.1 GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini 403 - Forbidden -
2010-07-22 04:16:20 64.14.3.218 59348 xx.xx.xx.xx 80 HTTP/1.1 GET /../\\../\\../\\../\\..\\../\\../\\../\\../\\..etc/passwd 403 - Forbidden -
2010-07-22 04:16:21 64.14.3.218 59503 xx.xx.xx.xx 80 HTTP/1.1 GET /../\\../\\../\\../\\..\\../\\../\\../\\../\\..boot.ini 403 - Forbidden -

Answer : Under DDOS attack.  Logs enclosed.  What type of attack is this and how do we mitigate?

The bottom lines look like someone is doing a directory traversal scan. (http://nmap.org/nsedoc/scripts/http-passwd.html)

The 64.14.3.218 actually belongs to McAfee - have you contracted with them to do vulnerability scans?

The empty get requests look like they may be coming from MSN DDOS attack - see http://thehackerlounge.blogspot.com/2009/08/msn-ddos-attack-starter-edition.html

Good Luck!
Random Solutions  
 
programming4us programming4us