Forum Moderators: phranque

Message Too Old, No Replies

access ssl log

My own server requesting images every second

         

dave_c00

10:24 am on Mar 7, 2012 (gmt 0)

10+ Year Member



Hi,

For some reason my server keeps accessing all my images within a particular domain via https?

Anyone any ideas why this might be happening?

A line in the log file reads:

123.123.123.123 - - [07/Mar/2012:10:22:22 +0000] "GET /prodimages/image1.png HTTP/1.0" 200 21145 "-" "-"

It looks like its requesting 5 images per second..?

Any help would be appreciated.

Dave

phranque

12:15 pm on Mar 7, 2012 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



are you serving the referring page via https?

dave_c00

12:40 pm on Mar 7, 2012 (gmt 0)

10+ Year Member



There doesn't appear to be a referring page? It just has "-" in that column.

Thanks

phranque

12:53 pm on Mar 7, 2012 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



is it an image scraper?

you should be able to tell in the logs if that IP address is also requesting the referring page(s) and associated css, js, icons, etc

are the https requests causing a problem for you?
you could redirect the requests to http: protocol.

dave_c00

1:05 pm on Mar 7, 2012 (gmt 0)

10+ Year Member



Thanks for your reply. I actually realised that there was a PHP script using fopen to check if an image existed or not.

This adds the line to the log files. Thanks for your help.

Dave

phranque

1:13 pm on Mar 7, 2012 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



you would probably use less resources if you used a local filename instead of a web address.

i'm not a php expert but i would imagine you would do even better if you used file_exists:
http://www.php.net/manual/en/function.file-exists.php [php.net]

wilderness

2:54 pm on Mar 7, 2012 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



For some reason my server keeps accessing all my images within a particular domain via https?

Anyone any ideas why this might be happening?

A line in the log file reads:

123.123.123.123 - - [07/Mar/2012:10:22:22 +0000] "GET /prodimages/image1.png HTTP/1.0" 200 21145 "-" "-"



This is mis-leading?
Your opening line implies that IP requests are coming from your own server (as opposed to a visitors IP and the line data from your visitor logs)?

If the visitor is coming from an IP outside of your own server?
Than, rather than obscuring the entire IP range?
Provide the first three Classe's and obscure the Class D.

This IP will likely provide others with a method of identifying the pest and offering a solution.