Results 1 to 2 of 2
  1. #1
    Comfortably Numb John Powell's Avatar
    Join Date
    October 17th, 2005
    Bayou Country, LA
    Scripts Being Added to Apache Logs
    I have had log spam before but this is the first time to have scripts added. - - [05/Nov/2009:00:07:15 -0600] "GET /coupons/cjxxxx/collectiblestoday.html HTTP/1.1" 200 12967 "" "<SCRIPT>window.location=''</script> (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
    Now when I try to bring up that part of the Apache log in Awstats the page for syncrisis loads in it's place. It loads images and all right where my log should be displayed. It's tied in somehow with whak(dot)com in links on the page.

    I asked my tech support if they could do something to prevent it and they said.
    It isn't really something that we can fix for you. This kind of spam tactic has been around for many years and Apache and cPanel will most likely say the same thing. I can remove the lines for you if you wish.
    Here is a related blog post.

  2. #2
    I like traffic lights
    Join Date
    January 18th, 2005
    Southern hemisphere - away from Fukushima
    It's not a referrer log hijack, it's a browser signature hijack.

    You could do this easily in Safari by going to Develop -> UserAgent -> Other and adding a script tag into the text box.


  3. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Replies: 0
    Last Post: February 11th, 2012, 06:06 PM
  2. Replies: 0
    Last Post: January 19th, 2011, 09:22 AM
  3. Apache question
    By DHolland in forum Programming / Datafeeds / Tools
    Replies: 2
    Last Post: October 1st, 2008, 06:43 PM
  4. Apache Redirect - Need Help
    By Greg Rice in forum Programming / Datafeeds / Tools
    Replies: 4
    Last Post: May 4th, 2004, 03:22 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts