Is my proxy hijacked?

[pay2post]

I am exeeding my bandwith quite a lot bigproxy.org is an php proxy (used to be cgi)

I am overloaded with the following in my recent users list

Host: 59.33.219.124

/nph-proxy.cgi/010110A/http/www.wetcookie.com/mh/300104/1_m.mpg
Http Code: 403 Date: Sep 12 09:31:06 Http Version: HTTP/1.1 Size in Bytes: 3789
Referer: http://www.bigproxy.org/nph-proxy.cgi/010110A/http/www.adult168.com/html/200604/257863.htm
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)




Host: 219.144.124.74

/nph-proxy.cgi/010110A/http/image.blog.livedoor.jp/rinda4u/imgs/2/7/2744cf85.wmv
Http Code: 403 Date: Sep 12 09:30:54 Http Version: HTTP/1.1 Size in Bytes: 3789
Referer: http://www.bigproxy.org/nph-proxy.cgi/010110A/http/www.adult168.com/html/200604/258898.htm
Agent: Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)




Host: 220.189.182.199

/nph-proxy.cgi/010110A/http/www.videostag.com/mgp/0818/2.mpg
Http Code: 500 Date: Sep 12 09:27:39 Http Version: HTTP/1.1 Size in Bytes: -
Referer: http://www.bigproxy.org/nph-proxy.cgi/010110A/http/www.adult168.com/html/200604/257866.htm
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
|
|
|

/nph-proxy.cgi/010110A/http/www.videostag.com/mgp/0818/3.mpg
Http Code: 500 Date: Sep 12 09:29:35 Http Version: HTTP/1.1 Size in Bytes: -
Referer: http://www.bigproxy.org/nph-proxy.cgi/010110A/http/www.adult168.com/html/200604/257866.htm
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)




Host: 200.195.1.206

/nph-proxy.cgi
Http Code: 500 Date: Sep 12 09:29:20 Http Version: HTTP/1.0 Size in Bytes: -
Referer: http://forum.underlinux.com.br/index.php/topic,47137.0.html
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)




Host: 87.242.146.149

/
Http Code: 500 Date: Sep 12 09:28:46 Http Version: HTTP/1.1 Size in Bytes: -
Referer: -
Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6




Host: 219.141.10.58

/nph-proxy.cgi/010110A/http/image.blog.livedoor.jp/rinda4u/imgs/2/7/2744cf85.wmv
Http Code: 500 Date: Sep 12 09:28:42 Http Version: HTTP/1.1 Size in Bytes: -
Referer: http://www.bigproxy.org/nph-proxy.cgi/010110A/http/www.adult168.com/html/200604/258898.htm
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)

how can i stopt the connections?

also getting 147k not found errors which i have redirected to other website myspace.tw

whats going on?

 

[Dimitris]

Have you tried killing the connections from the IPs? Your proxy is overloaded because those IPs are watching videos through your proxy. Try renaming the nph-proxy.cgi as nph-proxy123.cgi and leave it renamed for some minutes... After rename it again as nph-proxy.cgi. Those connections should go away...

 

[pay2post]

i cant even watch those videos through my proxy! they all go to a error page i set up: myspace.tw
I dont have the file "nph-proxy.cgi" on my server
Ii have banned loads of ips but the problem is getting worse is it possible to ban accessed sites supplying the vid files?