Forum Moderators: DixonJones
I'm a recently self-taught webmaster and have a lot to learn about logs & such. I've been getting this repeated entry in my logs. It occurs 22x per day starting in the late morning (EST):
65.94.38.92 - - [11/Dec/2003:16:03:20 -0600] "GET /books%20magazines.html&sa=l&ai=A49RvkfUu%20AKptUMm0oqnRz5Dp7fgDkY8BrA-KaPBMEAkOBA0GOwRBEAzQAA&num=1 HTTP/1.1" 403 - "-" "-"
and then a final time:
65.94.38.92 - - [11/Dec/2003:17:28:53 -0600] "GET / HTTP/1.1" 403 - "-" "-"
This file does not exist on my site, but I did at one time have a books_magazines.html. That long garbled string changes for each GET attempt. Also, since it happened so much I just denied him in .htaccess.
Does anyone know what this machine is trying to accomplish or why it keeps hammering away every day? What can I do to shop it?
Thanks,
Jim
The url part &sa=l&ai=A49RvkfUu%...AA&num=1 indicates a google tracking url. Google uses this tracking for Sponsored Links, AdWords, AdSense, and standard click through tracking of their serps. So you either have an active AdWord campaign running for your orphant books_magazines page or there's a cached copy of an old campaign or google results page somewhere out there ...