Dziwne logi apacha -dlugie

Thread View: alt.pl.comp.os.linux.mandrake

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by - WojtaS - Tue, 23 Mar 2004 13:29

#23

Author: - WojtaS -
Date: Tue, 23 Mar 2004 13:29

99 lines
4521 bytes

Witam

Nie wiem jak opisac moj problem, z gory przepraszam :)
Przegladajac logi apacha (w ciagu paru minut plik osiaga wielkosc 2-3 MB),
zauwazylem dziwne wpisy, ktore nie dotycza stron na moim serwerze np:

218.19.20.43 - - [23/Mar/2004:14:27:35 +0100] "GET
http://go-daily.com/search.php?ID=281&fString=DSL HTTP/1.0" 302 0

211.14.201.62 - - [23/Mar/2004:14:28:38 +0100] "GET
http://www2.x3srv.com/pv/out.php?id=furinps&url=http%3A%2F%2Ffurin-st.com%2Fpartner%2F
HTTP/1.1" 302 0

69.93.162.10 - - [23/Mar/2004:14:28:34 +0100] "GET http://www.thumbking.net/
HTTP/1.1" 200 86157

219.89.94.127 - - [23/Mar/2004:14:28:37 +0100] "GET
http://in.msg.edit.yahoo.com/config?login?.tries=1&.src=bl&login=___phreak___&passwd=RedDog&n=1
HTTP/1.0" 999 1195

218.3.192.92 - - [23/Mar/2004:14:28:40 +0100] "GET
http://www.qksrv.net/image-1451242-9259183 HTTP/1.1" 302 80

216.15.116.130 - - [23/Mar/2004:14:28:38 +0100] "GET
http://www.outwar.com/page.php?x=1879051 HTTP/1.1" 200 13213

12.14.246.63 - - [23/Mar/2004:14:28:41 +0100] "GET
http://l30.login.scd.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=fruit_or_nut&passwd=pear
HTTP/1.0" 999 1195

82.38.203.62 - - [23/Mar/2004:14:28:42 +0100] "HEAD
http://members.plumpersmag.com/ HTTP/1.0" 401 0

64.217.25.124 - - [23/Mar/2004:14:28:43 +0100] "GET
http://edit.yahoo.com/config?login'=chevy_kenny&passwd=123111&.version=1
HTTP/1.0" 999 1195

82.38.203.62 - - [23/Mar/2004:14:28:43 +0100] "HEAD
http://members.plumpersmag.com/ HTTP/1.0" 401 0

217.229.27.24 - - [23/Mar/2004:14:28:43 +0100] "GET
http://members.met-art.com/member/ HTTP/1.0" 302 293

69.93.162.10 - - [23/Mar/2004:14:28:44 +0100] "GET
http://www.thumbking.net/ptrack.php HTTP/1.1" 200 105

65.3.68.48 - - [23/Mar/2004:14:28:44 +0100] "GET
http://www.4-ebiz.com/traffic/traffic.php HTTP/1.0" 200 147

80.109.114.248 - - [23/Mar/2004:14:28:44 +0100] "HEAD
http://www.clubpam.com/members/ HTTP/1.0" 401 0



O co chodzi, skad te logi ??  netstat pokazuje mnostwo otwartych polaczen z
httpd :



[root@magnum wojt]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 moj.host:http             219-89-94-127.jets:3797
SYN_RECV
tcp        0      0 moj.host:http             219-89-94-127.jets:3667
SYN_RECV
tcp        0      0 moj.host.slup:http     fwisp6-ext-y.docom:3212
TIME_WAIT
tcp        0    666 moj.host:https                61.129.70.65:4501
FIN_WAIT1
tcp        0      0 moj.host:34425            vrp1.lhr.xpc-mii.n:http
TIME_WAIT
tcp        0      0 moj.host:http     CPE00e018abbb99-CM:4885
TIME_WAIT
tcp        0      0 moj.host.slu:34336     filipinabargirls.c:http
TIME_WAIT
tcp        0      0 moj.host:https     82-166-53-175.bara:2448
TIME_WAIT
tcp        0      0 moj.host:34425     vrp1.lhr.xpc-mii.n:http
TIME_WAIT
tcp        0      0 moj.host:http     CPE00e018abbb99-CM:4885
TIME_WAIT
tcp        0      0 moj.host:34336     filipinabargirls.c:http
TIME_WAIT
tcp        0      0 moj.host:https     82-166-53-175.bara:2448
TIME_WAIT
tcp        0      0 moj.host:https     d226-124-201.home.:1467
TIME_WAIT
tcp        0      0 moj.host:34329         filipinabargirls.c:http
TIME_WAIT


Jest to apache2, nie wiem co mam zrobic.



    Pozdrawiam

    Wojtek

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads