my server is under attack... from itself!?!

[xanx]

For some reason I am getting a lot of requests for a set of images over and over again. The strange thing is, the IP that's making the request is my own servers IP.

Any idea what this is ?

[GrouchyAdmin]

It's always sad when the host's immune system turns against itself.

[3M TA3]

hmm, are the images linked from a java script on your server? the log file should tell you

[baddog]

It's always sad when the host's immune system turns against itself.

Server AIDS?

This just start? Did you modify htaccess recently?

[xanx]

didn't touch the .htaccess recently. I'm thinking a rogue script maybe but not even sure where to begin to look =(

[baddog]

didn't touch the .htaccess recently. I'm thinking a rogue script maybe but not even sure where to begin to look =(

That was my first guess, but was hoping it would be simple. Trojans suck. Server not managed?

[Grapesoda]

It's always sad when the host's immune system turns against itself.

php-aids?

[xanx]

That was my first guess, but was hoping it would be simple. Trojans suck. Server not managed?

nah, starting to wish it was though =)

[Superterrorizer]

You are including URLs in your pages and not files. That's why you're bombing your server. If you are running a script that's linking images like that, it was written by a tool and you should use something else.

[GrouchyAdmin]

Server AIDS?

This just start? Did you modify htaccess recently?

php-aids?

Usually caused by include("http://file"); instead of include('file'); or readfile('file');

[tony286]

Its like the terminator, the machines learned and started taking over.

[xanx]

Usually caused by include("http://file"); instead of include('file'); or readfile('file');

The strange thing is it seems to only be effected on one set of images. No other images on the site are getting called repeatedly.

[GrouchyAdmin]

The strange thing is it seems to only be effected on one set of images. No other images on the site are getting called repeatedly.

Well, you aren't going to want to write things like that. If you have an offsite link with a passthrough function, people could be using it to steal your content by proxy.

Wanna nasty-workable 'test?' Try moving it and do a 0 second meta refresh redirect, not a 301. If it still continues, that's obviously not it.

[Grapesoda]

The strange thing is it seems to only be effected on one set of images. No other images on the site are getting called repeatedly.

I've had folders corrupted and do strange stuff. I put the files in another folder, renamed it and deleted the first folder. resolved the issue. -bmb

[GoLakers]

Did you check your server logs
which URL or page requesting the images ?

[Sami]

I would turn on access logs .. all options

then go to your apache logs directory and do a

tail -f logfilename | grep imagename.jpg