webdude
msg:1558280 | 12:17 pm on Sep 24, 2004 (gmt 0) |
Sounds like it could be a crawl from a robot. I get these all the time. Could you post an example of a line WITHOUT an ip address?
|
sem4u
msg:1558281 | 12:20 pm on Sep 24, 2004 (gmt 0) |
As webdude says it is probably a robot. Can you check your log files?
|
shape
msg:1558282 | 12:57 pm on Sep 24, 2004 (gmt 0) |
Thank you guys for tenderness.
Here it is. Just some exaples. 09/23/2004 01:51:43 PM/forum/index.php
09/23/2004 01:51:46 PM/forum/viewtopic.php
09/23/2004 01:51:51 PM/forum/viewtopic.php
09/23/2004 01:51:53 PM/forum/viewforum.php
09/23/2004 01:51:57 PM/forum/viewforum.php
09/23/2004 01:52:00 PM/forum/viewforum.php
09/23/2004 01:52:03 PM/forum/viewtopic.php
09/23/2004 01:52:06 PM/forum/viewforum.php 09/23/2004 02:15:26 PM/forum/privmsg.php
09/23/2004 02:15:42 PM/forum/privmsg.php
09/23/2004 02:15:51 PM/forum/privmsg.php
09/23/2004 02:15:55 PM/forum/privmsg.php
09/23/2004 02:16:01 PM/forum/privmsg.php
09/23/2004 02:16:04 PM/forum/viewtopic.php
09/23/2004 02:16:08 PM/forum/viewtopic.php
09/23/2004 02:16:12 PM/forum/viewtopic.php
09/23/2004 02:16:16 PM/forum/viewtopic.php
09/23/2004 02:16:20 PM/forum/privmsg.php
09/23/2004 02:16:23 PM/forum/privmsg.php 09/23/2004 02:25:08 PM/forum/privmsg.php
09/23/2004 02:25:11 PM/forum/profile.php
09/23/2004 02:25:20 PM/forum/privmsg.php
09/23/2004 02:25:28 PM/forum/privmsg.php
09/23/2004 02:25:36 PM/forum/privmsg.php
09/23/2004 02:25:44 PM/forum/privmsg.php
09/23/2004 02:25:54 PM/forum/profile.php
09/23/2004 02:26:05 PM/forum/profile.php
09/23/2004 02:26:09 PM/forum/profile.php
09/23/2004 02:26:18 PM/forum/profile.php IP with 10 numbers from the States.
|
webdude
msg:1558283 | 1:09 pm on Sep 24, 2004 (gmt 0) |
What kind of log files are these? They are not giving you very much information. You should change the info that is captured in your logs. It is better for security and, as you are finding out, better for tracking down needed information. I would recommend logging the following... Client IP
User Name
Service Name
Server IP
Server Port
Method
Bytes Sent
Bytes Received
User Agent
Referer Where and how to change this depends on platform and web server. Just my 2 cents
|
webdude
msg:1558284 | 1:13 pm on Sep 24, 2004 (gmt 0) |
I would also add ... URI Stem
URI Query
Protocol Status Up to 4 cents.
|
shape
msg:1558285 | 1:21 pm on Sep 24, 2004 (gmt 0) |
Thank you, webdude,
I use no-brand-name php stat soft. Will try to configure its options.
|
rogerd
msg:1558286 | 1:27 pm on Sep 24, 2004 (gmt 0) |
Shape, this sounds like a "bad bot". Forums are great targets for various kinds of crawlers, particularly e-mail harvesters. Once you see its user agent info or can verify that the IP isn't a good bot (like Googlebot), you may want to ban the IP and/or user agent. You'll also want to configure your stats program (if you use it to see how busy your forum is) to ignore identified bots to avoid incorrect statistics.
|
shape
msg:1558287 | 2:15 pm on Sep 24, 2004 (gmt 0) |
rogerd, thank you.
It is really sound like that.
Good luck!
|
|
