apache being hit
Hi there!
This started a few days ago with no apparent reason, my access.log has
more than a hit per seconf, coming from all sorts of bizarre pages
that have nothing to do with me... Why is that? Where can I get more
help? What is going on? I'm desperate here....
If you answer, please send a copy to me, since I am not currently on the list.
THANKS,
Roberto
PS: some examples:
$ tail /var/log/apache/access.log.0
218.19.151.194 - - [09/Nov/2004:02:18:47 -0200] "GET
http://www.blazerunner.com/ppc/search.php?username=brownsu88&keywords=Montpelier
HTTP/1.1" 403 904 "http://www.freewebs.com/brownsu88/"; "Mozilla/4.0
(compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
http://www.blazerunner.com/ppc/search.php?username=brownsu88&keywords=Montpelier
mozart.dnsalias.net mozart.dnsalias.net
221.232.66.118 - - [09/Nov/2004:02:18:47 -0200] "GET
http://www.partner2profit.com/redir.cfm?ccode=2EAB5071&pcode=691BB9CB
HTTP/1.0" 302 227
"http://www.searchlegacy.com/search.cgi?username=whctcone&keywords=skin%20care";
"Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 5.0)"
http://www.partner2profit.com/redir.cfm?ccode=2EAB5071&pcode=691BB9CB
mozart.dnsalias.net mozart.dnsalias.net
68.169.111.178 - - [09/Nov/2004:02:18:48 -0200] "GET
http://l3.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=hotangel475&passwd=angels
HTTP/1.0" 502 923 "-" "-"
http://l3.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=hotangel475&passwd=angels
mozart.dnsalias.net mozart.dnsalias.net
81.243.225.94 - - [09/Nov/2004:02:18:49 -0200] "GET
http://81.243.225.94/ HTTP/1.0" 200 519 "-" "Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.1)" http://81.243.225.94/ mozart.dnsalias.net
mozart.dnsalias.net
24.34.149.40 - - [09/Nov/2004:02:18:50 -0200] "HEAD
http://www.johnsonsjournal.com/members/index.php HTTP/1.0" 404 0
"http://www.johnsonsjournal.com/members/index.php"; "Mozilla/4.73 (
compatible; MSIE 5.5; Windows NT4.0; Compaq )"
http://www.johnsonsjournal.com/members/index.php mozart.dnsalias.net
mozart.dnsalias.net
172.184.44.178 - - [09/Nov/2004:02:18:50 -0200] "GET
http://www.asian-ts.com/members/index.html HTTP/1.0" 502 519
"http://www.asian-ts.com/members/index.html"; "Mozilla/5.0 (
compatible; MSIE 5.01; Windows NT5.0; ezn IE )"
http://www.asian-ts.com/members/index.html mozart.dnsalias.net
mozart.dnsalias.net
172.184.44.178 - - [09/Nov/2004:02:18:50 -0200] "GET
http://www.asian-ts.com/members/index.html HTTP/1.0" 502 519
"http://www.asian-ts.com/members/index.html"; "Mozilla/5.0 (
compatible; MSIE 5.0; AOL 5.0; DigiExt )"
http://www.asian-ts.com/members/index.html mozart.dnsalias.net
mozart.dnsalias.net
172.184.44.178 - - [09/Nov/2004:02:18:50 -0200] "GET
http://www.asian-ts.com/members/index.html HTTP/1.0" 502 519
"http://www.asian-ts.com/members/index.html"; "Mozilla/5.0 (
compatible; MSIE 5.5; AOL 5.0; win9x/NT 4.90 )"
http://www.asian-ts.com/members/index.html mozart.dnsalias.net
mozart.dnsalias.net
172.184.44.178 - - [09/Nov/2004:02:18:50 -0200] "GET
http://www.asian-ts.com/members/index.html HTTP/1.0" 502 519
"http://www.asian-ts.com/members/index.html"; "Mozilla/5.0 (
compatible; MSIE 5.01; Windows XP; NetCaptor )"
http://www.asian-ts.com/members/index.html mozart.dnsalias.net
mozart.dnsalias.net
84.67.32.165 - - [09/Nov/2004:02:18:50 -0200] "GET
http://l1.login.vip.scd.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=emma_pisces&passwd=sunrise
HTTP/1.0" 999 1251 "-" "-"
http://l1.login.vip.scd.yahoo.com/config/login?.redir_from=PROFILES?&.tries=1&.src=jpg&.last=&promo=&.intl=us&.bypass=&.partner=&.chkP=Y&.done=http://jpager.yahoo.com/jpager/pager2.shtml&login=emma_pisces&passwd=sunrise
mozart.dnsalias.net mozart.dnsalias.net
my acces.log.0 file has 225k (225000) lines!!! and almost 85 Mb!!!
I must admit I am kind of scared....
Reply to: