Hi Gurus,

For last few days my webserver is responding very slowly. On investigation I found that there are number of illegal concurrent request made to my site . the weird part about these request is that they request a URL which has absolutely no relation to my website. looks like that some one is using my server to send request to lot of different sites some of them are porno while some of them might be trying to hack yahoo/aol passwords.

Also some program is possing itself as localhost and using my mail server to send spam.

here are some snippet of the log file


204.13.169.12 - - [07/Oct/2005:09:51:32 +0800] "GET rusticsloghomes.com HTTP/1.1" 200 14581 "http://rusticsloghomes.com/forums/Maintenance_and_Building_of_Log_Homes/posts/1612.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 3.0)"
218.80.12.137 - - [07/Oct/2005:09:51:30 +0800] "GET www.nubiles.net HTTP/1.0" 200 5216 "http://www.naked-elves.com/index1.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
221.229.253.227 - - [07/Oct/2005:09:51:35 +0800] "GET 58.215.65.14 HTTP/1.1" 502 524 "http://www.baidu.com" "mozilla/4.0 (compatible; MSIE 6.0; Windows 5.1;Windows 5.5;Windows 6.0)"
210.254.64.70 - - [07/Oct/2005:09:51:34 +0800] "GET www13.a8.net HTTP/1.1" 200 43 "http://www.19-net.co.jp/~rank/html/index.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; T312461)"
217.10.38.59 - - [07/Oct/2005:09:51:34 +0800] "HEAD deadlyfemales.com HTTP/1.0" 401 - "http://members.cfnm.net/" "Mozilla/4.0 ( compatible; [en]; Windows 95; NetCaptor )"
204.9.190.24 - - [07/Oct/2005:09:51:24 +0800] "GET www.trelleborg.se HTTP/1.1" 200 17051 "http://www.poker4spain.com/jugar-cartas-online.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
207.234.129.183 - - [07/Oct/2005:09:51:25 +0800] "POST ericextreme.com HTTP/1.0" 200 176 "-" "-"
217.10.38.59 - - [07/Oct/2005:09:51:35 +0800] "HEAD deadlyfemales.com HTTP/1.0" 401 - "http://members.cfnm.net/" "Mozilla/4.73 ( compatible; [en]; Windows NT5.0; DigiExt )"
213.85.16.14 - - [07/Oct/2005:09:51:24 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"




Thanks for your help
Mintnovate