VPS Account Or Settings

I'm having some issues with my vps hosting account. Awstats started showing ebay and yahoo as the most visited sites with that traffic originating from Hong Kong.

access_log has entries like this:
59.40.127.21 - - [07/Sep/2007:01:14:31 -0600] CONNECT 216.39.53.2:25 HTTP/1.1 200 13238
58.61.195.123 - - [17/Sep/2007:04:40:30 -0600] GET [url]HTTP/1.1 200 13216 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)

I contacted support and their response included:

- Most likely what is happening is that someone has mis-configured their computer so that it thinks your site is ebay.

- not malicious, site hits would be in millions if malicious. We can setup filtering if it continues.

Well it continues... and after some testing I find that I can telnet to port 80 to my servers IP with apache stopped and issue a - GET [url] HTTP/1.0 - and get yahoo's site.

This action doesn't show up in my access_log obviously because apache is stopped. So I'm now at the WTF stage. When I try the same thing with apache started and using domain name I get my sites main page but according to the access_log this person in HK is getting something else (different size).

I disabled and updated everything I could through their control panel and nmap shows ports (21,22,25,80,110,143,442,873) open, no UDP. I tried filtering but the HK host is dynamic.

- phpMyAdmin 2.9.2
- MySQL 4.1.9
- perl 5.8.7
- php 5.2.1
- roundcube 0.1.2

Can anyone offer some info as to what might be going on? I'm waiting to hear back from my host but it took them a while last time.

I came to WHT to get some help about what I asked above but kinda got lost reading the endless info on this site. Almost have me convinced that I "need" a dedicated server and I could spin off some hosting biz on the side... :/