Forum Moderators: phranque
My load has risen from 1.x to 9.x starting last night. The only difference I can see anywhere (traffic/logs/sql corruption etc) is these strange lines in my apache log:
2.35.83.140 - - [10/Jan/2007:09:47:08 -0800] "CONNECT 64.136.20.83:25 HTTP/1.0" 200 25151 "-" "-"
72.35.83.140 - - [10/Jan/2007:09:47:08 -0800] "CONNECT 213.171.216.65:25 HTTP/1.0" 200 25151 "-" "-"
72.35.83.140 - - [10/Jan/2007:09:47:08 -0800] "CONNECT 205.241.16.55:25 HTTP/1.0" 200 25263 "-" "-"
206.222.29.98 - - [10/Jan/2007:09:47:09 -0800] "CONNECT 200.220.214.5:25 HTTP/1.0" 200 42345 "-" "-"
206.222.3.106 - - [10/Jan/2007:09:47:11 -0800] "CONNECT 205.152.58.33:25 HTTP/1.0" 200 41534 "-" "-"
209.190.9.18 - - [10/Jan/2007:09:47:11 -0800] "CONNECT 200.187.133.132:25 HTTP/1.0" 200 42385 "-" "-"
206.222.29.98 - - [10/Jan/2007:09:47:12 -0800] "CONNECT 200.171.196.213:25 HTTP/1.0" 200 42434 "-" "-"
208.66.72.226 - - [10/Jan/2007:09:47:12 -0800] "CONNECT 200.180.254.214:25 HTTP/1.0" 200 25151 "-" "-"
206.222.29.98 - - [10/Jan/2007:09:47:14 -0800] "CONNECT 200.244.94.131:25 HTTP/1.0" 200 42497 "-" "-"
209.190.9.18 - - [10/Jan/2007:09:47:15 -0800] "CONNECT 200.184.131.61:25 HTTP/1.0" 200 42385 "-" "-"
85.142.17.123 - - [10/Jan/2007:09:47:14 -0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 106997 "-" "Mozilla/7.00 [en] (WinNT; U ;Nav)"
Im getting pounded with about 10-20 per second. Would these cause my load to rise? Should I write a script to add these IP's to my hosts.deny? Any advice appreciated.
Thanks,
Will
[webmasterworld.com...]
