我的服务器最近崩溃了。 我使用Ruby Version Manager在一个共享服务器上运行两个nginx服务器来处理gem依赖关系。 在设置.rvmrc来切换应用程序所做的调用之后，一切都相当顺利。 但是每隔几天就会崩溃。
我认为原因可能是我拉代码，或重新启动另一个框。 不完全确定。 我进入日志，发现这一点，发现一个非常奇怪的链接作为“引荐”。 没有一个想法是一个“推荐人”，这肯定与我的网站www.truejersey.com没有任何关系。 我不知道这些日志是什么意思，所以只需一个简单的解释就可以得到答案。 非常感谢！
2011/03/04 10:11:38 [info] 25504#0: *20008271 client closed prematurely connection, so upstream connection is closed too (104: Connection reset by peer) while sending request to upstream, client: 194.65.234.120, server: true.shadyfront.webfactional.com, request: "GET /pages/aboutjersey/photos/thumbs/nj-gazette.jpg HTTP/1.1", upstream: "http://127.0.0.1:11363/pages/aboutjersey/photos/thumbs/nj-gazette.jpg", host: "www.truejersey.com", referrer: "http://www.portalentretextos.com.br/colunas/recontando-estorias-do-dominio-publico/eo-demonio-de-nova-jersey-o-decimo-terceiro-filho-de-deborah-leeds,236,4485.html" 2011/03/04 10:22:02 [info] 25503#0: *20018714 client 207.46.204.197 closed keepalive connection (104: Connection reset by peer) 2011/03/04 10:22:40 [info] 25503#0: *20019126 client 207.46.204.197 closed keepalive connection (104: Connection reset by peer) 2011/03/04 10:26:09 [info] 25503#0: *20022733 client 65.52.110.26 closed keepalive connection (104: Connection reset by peer) 2011/03/04 10:38:46 [error] 25503#0: *20034686 connect() failed (111: Connection refused) while connecting to upstream, client: 2.80.170.148, server: true.shadyfront.webfactional.com, request: "GET /pages/aboutjersey/photos/thumbs/nj-gazette.jpg HTTP/1.1", upstream: "http://127.0.0.1:11363/pages/aboutjersey/photos/thumbs/nj-gazette.jpg", host: "www.truejersey.com", referrer: "http://www.portalentretextos.com.br/colunas/recontando-estorias-do-dominio-publico/eo-demonio-de-nova-jersey-o-decimo-terceiro-filho-de-deborah-leeds,236,4485.html" 2011/03/04 10:39:48 [error] 25503#0: *20035361 connect() failed (111: Connection refused) while connecting to upstream, client: 68.204.64.69, server: true.shadyfront.webfactional.com, request: "GET /pages/aboutjersey/photos/thumbs/tat6.jpg HTTP/1.1", upstream: "http://127.0.0.1:11363/pages/aboutjersey/photos/thumbs/tat6.jpg", host: "www.truejersey.com", referrer: "http://matthewraphaelmelvin.blogspot.com/2011/02/jersey-tattoos.html" 2011/03/04 10:39:48 [error] 25503#0: *20035371 connect() failed (111: Connection refused) while connecting to upstream, client: 68.204.64.69, server: true.shadyfront.webfactional.com, request: "GET /pages/aboutjersey/photos/thumbs/tat8.jpg HTTP/1.1", upstream: "http://127.0.0.1:11363/pages/aboutjersey/photos/thumbs/tat8.jpg", host: "www.truejersey.com", referrer: "http://matthewraphaelmelvin.blogspot.com/2011/02/jersey-tattoos.html" 2011/03/04 10:40:00 [error] 25503#0: *20035641 connect() failed (111: Connection refused) while connecting to upstream, client: 2.80.170.148, server: true.shadyfront.webfactional.com, request: "GET /pages/aboutjersey/photos/thumbs/nj-gazette.jpg HTTP/1.1", upstream: http://127.0.0.1:11363/pages/aboutjersey/photos/thumbs/nj-gazette.jpg", host: "www.truejersey.com", referrer: "http://www.portalentretextos.com.br/colunas/recontando-estorias-do-dominio-publico/eo-demonio-de-nova-jersey-o-decimo-terceiro-filho-de-deborah-leeds,236,4485.html" HTTP访问日志充满了奇怪的事情; 通常，这是脚本小子或机器人只是垃圾邮件怪异的用户代理string或引荐url，看看你的是一个已知的缓冲区溢出漏洞的Web服务器。 除非你能一直把那些奇怪的日志条目绑定到系统中的错误事件，否则通常不值得关注。 通常情况下，真正的应用程序或系统崩溃将伴随syslog中的有用（或至less是说明性）信息。 那就是我开始寻找的地方。
引用者主动从客户端/浏览器发送HTTP头到服务器，所以服务器日志可以用来确定人们如何find你的网站等事情。问题是，由于它是由客户端发送，它不能值得信赖。 恶意客户（或脚本小子）可以伪造这些信息。