Results 1 to 7 of 7
  1. #1
    Full Member Travelin Man's Avatar
    Join Date
    January 18th, 2005
    Posts
    409
    Question Why try to access my stats?
    My server logs show that people are trying to access my stats information at least once a day. What's the deal with that They will never see them as they protected quite well. Are these people just trying to get a look at my business or might there be something malicious involved?

    Anyone see this in their logs too?

    Thanks,
    Travelin' Man

    "If you don't know where you are going, any road will lead you there." -- unknown

  2. #2
    Resident Genius and Staunch Capitalist Leader's Avatar
    Join Date
    January 18th, 2005
    Location
    Florida
    Posts
    12,817
    Have you clicked any links directly from your stats page (many stat programs will linkify the referrers)?

    If so, it's probably other webmasters seeing your stats page as a referrer in *their* stats program, and following that link back.
    There is no knowledge that is not power. ~Hemingway

  3. #3
    Full Member Travelin Man's Avatar
    Join Date
    January 18th, 2005
    Posts
    409
    Quote Originally Posted by Leader
    Have you clicked any links directly from your stats page (many stat programs will linkify the referrers)?

    If so, it's probably other webmasters seeing your stats page as a referrer in *their* stats program, and following that link back.
    Hi Leader,

    Nope, It's not me. I've been watching the IPs. It appears to be a concerted attempt to access my logs, no? Here's what I'm seeing:

    (note the 403, I have that IP blocked)

    Host: 211.169.249.239 //cgi-bin/awstats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:23 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi-bin/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:25 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:27 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //awstats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:28 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi-bin/stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:29 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:30 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //awstats.pl
    Http Code: 403 Date: Jul 03 19:47:30 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi/stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:31 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Travelin' Man

    "If you don't know where you are going, any road will lead you there." -- unknown

  4. #4
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    4,423
    There was a security issue with awstats.pl, some bots are just checking to see if you are open.

    Chetr

  5. #5
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    1,744
    I see these in my log from time to time. I think its probably people looking for a security hole. Be sure you keep awstats updated.

    Here's the thread regarding the security issue.

    http://forum.abestweb.com/showthread...stats+security

  6. #6
    Full Member Travelin Man's Avatar
    Join Date
    January 18th, 2005
    Posts
    409
    Thanks for the heads-up on the security hole. As usual ABW members rock.

    Thanks again and have a great day!
    Travelin' Man

    "If you don't know where you are going, any road will lead you there." -- unknown

  7. #7
    ABW Ambassador
    Join Date
    January 18th, 2005
    Location
    Texas, USA
    Posts
    579
    Quote Originally Posted by Travelin Man
    Hi Leader,

    Nope, It's not me. I've been watching the IPs. It appears to be a concerted attempt to access my logs, no? Here's what I'm seeing:

    (note the 403, I have that IP blocked)

    Host: 211.169.249.239 //cgi-bin/awstats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:23 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi-bin/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:25 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:27 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //awstats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:28 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi-bin/stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:29 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:30 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //awstats.pl
    Http Code: 403 Date: Jul 03 19:47:30 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
    |
    //cgi/stats/awstats.pl
    Http Code: 403 Date: Jul 03 19:47:31 Http Version: HTTP/1.1 Size in Bytes: 2442
    Referer: -
    This looks similar to the information AwStats saves for me on my web host's Apache server.

    I haven't a clue who or why.

    I just put the IP in my IP Deny Manager list. They seem to be not coming around nearly as much now.

    Best,
    RadarCat
    __________________________
    Great OS/2 Warp Software !!
    http://www.os2warplinks.com

  8. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. CJ Stats a couple questions...reversal stats
    By s2kinteg916 in forum Commission Junction - CJ
    Replies: 0
    Last Post: October 31st, 2006, 11:39 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •