🚀 go-pugleaf

Witam

Nie wiem jak opisac moj problem, z gory przepraszam :)
Przegladajac logi apacha (w ciagu paru minut plik osiaga wielkosc 2-3 MB),
zauwazylem dziwne wpisy, ktore nie dotycza stron na moim serwerze np:

218.19.20.43 - - [23/Mar/2004:14:27:35 +0100] "GET
http://go-daily.com/search.php?ID=281&fString=DSL HTTP/1.0" 302 0

211.14.201.62 - - [23/Mar/2004:14:28:38 +0100] "GET
http://www2.x3srv.com/pv/out.php?id=furinps&url=http%3A%2F%2Ffurin-st.com%2Fpartner%2F
HTTP/1.1" 302 0

69.93.162.10 - - [23/Mar/2004:14:28:34 +0100] "GET http://www.thumbking.net/
HTTP/1.1" 200 86157

219.89.94.127 - - [23/Mar/2004:14:28:37 +0100] "GET
http://in.msg.edit.yahoo.com/config?login?.tries=1&.src=bl&login=___phreak___&passwd=RedDog&n=1
HTTP/1.0" 999 1195

218.3.192.92 - - [23/Mar/2004:14:28:40 +0100] "GET
http://www.qksrv.net/image-1451242-9259183 HTTP/1.1" 302 80

216.15.116.130 - - [23/Mar/2004:14:28:38 +0100] "GET
http://www.outwar.com/page.php?x=1879051 HTTP/1.1" 200 13213

12.14.246.63 - - [23/Mar/2004:14:28:41 +0100] "GET
http://l30.login.scd.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=fruit_or_nut&passwd=pear
HTTP/1.0" 999 1195

82.38.203.62 - - [23/Mar/2004:14:28:42 +0100] "HEAD
http://members.plumpersmag.com/ HTTP/1.0" 401 0

64.217.25.124 - - [23/Mar/2004:14:28:43 +0100] "GET
http://edit.yahoo.com/config?login'=chevy_kenny&passwd=123111&.version=1
HTTP/1.0" 999 1195

82.38.203.62 - - [23/Mar/2004:14:28:43 +0100] "HEAD
http://members.plumpersmag.com/ HTTP/1.0" 401 0

217.229.27.24 - - [23/Mar/2004:14:28:43 +0100] "GET
http://members.met-art.com/member/ HTTP/1.0" 302 293

69.93.162.10 - - [23/Mar/2004:14:28:44 +0100] "GET
http://www.thumbking.net/ptrack.php HTTP/1.1" 200 105

65.3.68.48 - - [23/Mar/2004:14:28:44 +0100] "GET
http://www.4-ebiz.com/traffic/traffic.php HTTP/1.0" 200 147

80.109.114.248 - - [23/Mar/2004:14:28:44 +0100] "HEAD
http://www.clubpam.com/members/ HTTP/1.0" 401 0



O co chodzi, skad te logi ??  netstat pokazuje mnostwo otwartych polaczen z
httpd :



[root@magnum wojt]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 moj.host:http             219-89-94-127.jets:3797
SYN_RECV
tcp        0      0 moj.host:http             219-89-94-127.jets:3667
SYN_RECV
tcp        0      0 moj.host.slup:http     fwisp6-ext-y.docom:3212
TIME_WAIT
tcp        0    666 moj.host:https                61.129.70.65:4501
FIN_WAIT1
tcp        0      0 moj.host:34425            vrp1.lhr.xpc-mii.n:http
TIME_WAIT
tcp        0      0 moj.host:http     CPE00e018abbb99-CM:4885
TIME_WAIT
tcp        0      0 moj.host.slu:34336     filipinabargirls.c:http
TIME_WAIT
tcp        0      0 moj.host:https     82-166-53-175.bara:2448
TIME_WAIT
tcp        0      0 moj.host:34425     vrp1.lhr.xpc-mii.n:http
TIME_WAIT
tcp        0      0 moj.host:http     CPE00e018abbb99-CM:4885
TIME_WAIT
tcp        0      0 moj.host:34336     filipinabargirls.c:http
TIME_WAIT
tcp        0      0 moj.host:https     82-166-53-175.bara:2448
TIME_WAIT
tcp        0      0 moj.host:https     d226-124-201.home.:1467
TIME_WAIT
tcp        0      0 moj.host:34329         filipinabargirls.c:http
TIME_WAIT


Jest to apache2, nie wiem co mam zrobic.



    Pozdrawiam

    Wojtek