Forum Moderators: phranque

Message Too Old, No Replies

404s linking to my site?

This morning my host error log shows a slew of 404s linking to site images

         

albo

3:35 pm on May 5, 2011 (gmt 0)

10+ Year Member



I have a web "identity" (a trash email id in various places, and a forum id in various places). This id, plus my root directory, plus an image filename (e.g., userid/public_html/example.jpg) appeared in a slew (50 or so) error messages on my host server log this morning.

The images, for my website's normal use, are kept in an /images folder.

These trash mail and forum ids, of course, I scrupulously logoff after each use.

The referrer was an ip I pinged to a nameserver in Moscow. (¿?)

Is there any action I should take, other than ignoring the error messages? I.e., is this an attempt to hack my site, and should I take some particular protective measure(s)?

tangor

7:19 am on May 8, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



If 50 or so 404 entries in the log is the problem, then pass it on to me... that's okay! Better the 404 than serving images without a vist... I personally might get concerned if that was 5000 or 500000 hits... but even then, my 404 file is pretty small...

albo

1:11 pm on May 8, 2011 (gmt 0)

10+ Year Member



Yeah, it was only 50 or so from IP as you said. By the time you've answered, the tech at the host said (as you hinted) it was ignorable. The log is pretty much empty except for one more 404 from the same IPs per day. (None this morning yet, 7:21AM MST May 8, 2011.)

The main IP was 87.250.252.241. Another was 95.108.158.236. Maybe watch out for them?

FWIW one of the same IPs (the second) also tried to install a rootkit and got a 403. Again, the tech said no big deal. So, on the tech's advice, I'm ignoring it...for now.

Thanks for responding! I reckon I'll not beg your attention anymore.

lucy24

8:05 pm on May 8, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



The second of the two is Yandex. (I've got them flagged as the range 95.108.158.128-255.) ###. Maybe I better start taking a closer look; I know some people lock them out but they've always been well-behaved with me.