See the most obvious attacks: `rhit -s 404` or `rhit -p 'php$'` (unless you have legit php). There are fun ones here. The "referer" table can be useful to spot parasites using you to serve data.