Sounds like someone could be using wget and possibly trying to just
download the entire site. I see this alot on the webservers that run both
personally and professionally.
John Kleinschmidt
Internet Security Analyst
Flagstar Bank
[EMAIL PROTECTED] on 02/10/2000 01:45:46 PM
Please respond to [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
cc: (bcc: John P Kleinschmidt/Flagstar_notes)
Subject: Repeated WEB traffic
Hi,
Looking through my firewall logs for yesterday and today I've noticed
that there was one site constantly retreiving one page from my web
server. It retreived it over 90 times in a 12 hour period. I've
blocked all traffic from that machine (209.204.137.249) yet the
requests continue. This leads me to belive somebody maybe planting
and running automated scripts to cause heavy legitimate looking traffic.
What caused me to notice it was a string of 7 retreivals in a row. Then
I noticed all the previous retreivals searching through the logs on the
IP address. The accesses are comming in at 2 to 5 minute intervals.
--
| Bryan Andersen | [EMAIL PROTECTED] | http://softail.visi.com |
| Buzzwords are like annoying little flies that deserve to be swatted. |
| -Bryan Andersen |
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
