why do non-relative links appear in my access logs?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • HQ
    Confirmed User
    • Jan 2001
    • 3539
    #1

    why do non-relative links appear in my access logs?

    (The following are just examples...)

    This is normal:

    "/images/title.gif"
    "/images/thumb1.jpg"
    "/images/thumb2.jpg"
    etc.

    This is not normal:

    "http://www.asdf.com/index.html"
    "http://www.asdf.com/images/title.gif"
    etc.

    Why (and how) do links to other sites (not on my server) and links to other sites' images (also not on my server) show up in my access logs?!
    Tags: None
    • Calvinguy
      Confirmed User
      • Oct 2002
      • 1752
      #2
      Format c:













        Comment

        • RedShoe
          赤い靴 call me 202-456-1111
          • Feb 2001
          • 14831
          #3
          Originally posted by HQ
          (The following are just examples...)

          This is normal:

          "/images/title.gif"
          "/images/thumb1.jpg"
          "/images/thumb2.jpg"
          etc.

          This is not normal:

          "http://www.asdf.com/index.html"
          "http://www.asdf.com/images/title.gif"
          etc.

          Why (and how) do links to other sites (not on my server) and links to other sites' images (also not on my server) show up in my access logs?!
          I always felt to dumb to ask. I never understand my server stats, but I just keep my mouth shut and like it's all good. (Thank god for KC, and FoxCounter)

          SPECIALTY COSTUMES • PROPS • FX
          Superheroes • Monsters • Robots
          PM for details

          For any manufacturing needs. Adult or otherwise.

          aka BonsHigh on Insta
          Bonsai weed plants

            Comment

            • extreme
              Confirmed User
              • Oct 2002
              • 2120
              #4
              Im not 100% but I think its an attempt to scan for worldopen proxies.

                Comment

                • LukieD
                  Confirmed User
                  • Dec 2001
                  • 927
                  #5
                  Or maybe they're on another site and click a bookmark? Not too sure myself...just a guess.

                    Comment

                    • fiveyes
                      Confirmed User
                      • Aug 2001
                      • 1680
                      #6
                      http://httpd.apache.org/docs/misc/FAQ-E.html#proxyscan
                      <CENTER><A HREF="http://www.hot-off-bourbon.com/" target="_blank"><IMG SRC="http://www.hot-off-bourbon.com/images/hob-logosmall.jpg" border="0"></A>

                      <FONT face="Comic Sans MS" SIZE="-1"><I>Mardi Gras, Spring Break, Wet-T, Night Club Action, UpSkirt, Oil Wrestling, Voyeur</I></FONT></CENTER>

                        Comment

                        • BV
                          wtf
                          • Sep 2001
                          • 10914
                          #7
                          Have you ever had 1 ie browser window open and another minimized, if surfer "open a link in a new window" to your page from the maximized ie window it will recycle and open the new page in your minimised browser. So whatever page the minimized browser was on will show up as the referrer.

                          I think this is what causes the odd referring pages.

                            Comment

                            • fiveyes
                              Confirmed User
                              • Aug 2001
                              • 1680
                              #8
                              BV:
                              You may be right as far as that goes, but he's not talking about referers. This is about the entries in the log for the requested pages themselves.

                              And when these are for off-site files, they are proxy access attempts. If the return code is 404, there's no reason for concern. However, return codes of 200 require further investigation to determine if the server is properly configured or not. Unknowingly acting as a proxy for others is a "bad thing".
                              Last edited by fiveyes; 01-13-2003, 11:10 AM.
                              <CENTER><A HREF="http://www.hot-off-bourbon.com/" target="_blank"><IMG SRC="http://www.hot-off-bourbon.com/images/hob-logosmall.jpg" border="0"></A>

                              <FONT face="Comic Sans MS" SIZE="-1"><I>Mardi Gras, Spring Break, Wet-T, Night Club Action, UpSkirt, Oil Wrestling, Voyeur</I></FONT></CENTER>

                                Comment

                                • HQ
                                  Confirmed User
                                  • Jan 2001
                                  • 3539
                                  #9
                                  Originally posted by RedShoe
                                  I always felt to dumb to ask. I never understand my server stats, but I just keep my mouth shut and like it's all good. (Thank god for KC, and FoxCounter)
                                  I never feel too dumb to ask anything. Are you more scared to look stupid or be stupid? I'm more scared of the latter.

                                    Comment

                                    • HQ
                                      Confirmed User
                                      • Jan 2001
                                      • 3539
                                      #10
                                      Originally posted by fiveyes
                                      http://httpd.apache.org/docs/misc/FAQ-E.html#proxyscan
                                      Thanks fiveyes.

                                        Comment

                                        • HQ
                                          Confirmed User
                                          • Jan 2001
                                          • 3539
                                          #11
                                          Originally posted by fiveyes
                                          BV:
                                          You may be right as far as that goes, but he's not talking about referers. This is about the entries in the log for the requested pages themselves.
                                          Exactly. These are requests from my server from a client (the surfer's computer) wanting my server to send them somthing it has; these are not referrering pages.

                                          That's why this is normal: "/images/title.gif"
                                          and this isn't: "http://www.notmyserver.com/index.html"

                                          Originally posted by fiveyes
                                          And when these are for off-site files, they are proxy access attempts. If the return code is 404, there's no reason for concern. However, return codes of 200 require further investigation to determine if the server is properly configured or not. Unknowingly acting as a proxy for others is a "bad thing".
                                          Half are 200 and half are 302 which are redirect requests or "moved temporarily", WTF?!
                                          Last edited by HQ; 01-15-2003, 11:07 AM.

                                            Comment

                                            • HQ
                                              Confirmed User
                                              • Jan 2001
                                              • 3539
                                              #12
                                              bump

                                                Comment

                                                • MonkeyMan
                                                  So Fucking Banned
                                                  • Dec 2002
                                                  • 1026
                                                  #13
                                                  Yea um... 4 posts in a row is a little much.... MMMK???

                                                    Comment

                                                    • stocktrader23
                                                      Let's do some business.
                                                      • Jan 2003
                                                      • 18781
                                                      #14
                                                      He's going for the dvd player. Leave em alone.


                                                      Hands Free Adult - Join Once, Earn For Life

                                                      "I try to make a habit of bouncing my eyes up to the face of a beautiful woman, and often repeat “not mine” in my head or even verbally. She’s not mine. God has her set aside. She’s not mine. She’s His little girl, and she needs me to fight for her by keeping my eyes where they should be."

                                                        Comment

                                                        • HQ
                                                          Confirmed User
                                                          • Jan 2001
                                                          • 3539
                                                          #15
                                                          I'm here for answers. Any ideas?

                                                            Comment

                                                            • HQ
                                                              Confirmed User
                                                              • Jan 2001
                                                              • 3539
                                                              #16
                                                              fiveyes, hit me on ICQ or email please!

                                                                Comment

                                                                Previous template Next
                                                                Working...