Why would I be finding this in a windows server log? Doesn't this have something to do with .htaccess? I'm finding it with the user agent "FunWebPoducts" which is who knows what.
> Why would I be finding this in a windows server log? Doesn't this > have something to do with .htaccess? I'm finding it with the user > agent "FunWebPoducts" which is who knows what.
It's in one of my server logs from yesterday....pages called were much to fast to be generated by a human AND since this is a "for the heck of it" site, not many humans would actually have an interest in it let alone want to stick around for 4+hours.
Haven't checked any of my other logs. I happened to find it looking for some hits I made via script late last night. The log was chucked full of "FunWebProducts" with the utmcsr string.
> Uhh, where did you find the google cookie stuff?
> On Jul 9, 4:07 am, djc wrote:
> > Why would I be finding this in a windows server log? Doesn't this > > have something to do with .htaccess? I'm finding it with the user > > agent "FunWebPoducts" which is who knows what.
> > utmccn=(organic)|utmcsr=google- Hide quoted text -
> It's in one of my server logs from yesterday....pages called were much > to fast to be generated by a human AND since this is a "for the heck > of it" site, not many humans would actually have an interest in it let > alone want to stick around for 4+hours.
> Haven't checked any of my other logs. I happened to find it looking > for some hits I made via script late last night. The log was chucked > full of "FunWebProducts" with the utmcsr string.
> On Jul 8, 3:53 pm, Burt wrote:
> > That (utmccn=(organic)|utmcsr=google ) are strings from a google > > cookie.
> > Funwebproducts is an IE toolbar, user agent is added by this toolbar.
> > Uhh, where did you find the google cookie stuff?
> > On Jul 9, 4:07 am, djc wrote:
> > > Why would I be finding this in a windows server log? Doesn't this > > > have something to do with .htaccess? I'm finding it with the user > > > agent "FunWebPoducts" which is who knows what.
> > > utmccn=(organic)|utmcsr=google- Hide quoted text -
My logs also show the IP address of whoever is accessing the pages. If you can find it, do a WHOIS lookup on that IP address and you should be able to find out who or what was accessing your site.
> Possibly a hijacked PC, with a buggy Trojan doing strange things with > part of a google cookie.
> On Jul 9, 5:17 am, djc wrote:
> > It's in one of my server logs from yesterday....pages called were much > > to fast to be generated by a human AND since this is a "for the heck > > of it" site, not many humans would actually have an interest in it let > > alone want to stick around for 4+hours.
> > Haven't checked any of my other logs. I happened to find it looking > > for some hits I made via script late last night. The log was chucked > > full of "FunWebProducts" with the utmcsr string.
> > On Jul 8, 3:53 pm, Burt wrote:
> > > That (utmccn=(organic)|utmcsr=google ) are strings from a google > > > cookie.
> > > Funwebproducts is an IE toolbar, user agent is added by this toolbar.
> > > Uhh, where did you find the google cookie stuff?
> > > On Jul 9, 4:07 am, djc wrote:
> > > > Why would I be finding this in a windows server log? Doesn't this > > > > have something to do with .htaccess? I'm finding it with the user > > > > agent "FunWebPoducts" which is who knows what.
> > > > utmccn=(organic)|utmcsr=google- Hide quoted text -
Wanna guess where the IP originates from? Same location as the jerk who recently set up his own user group and tried to trash me in it. I suspect it was a pathetic attempt at a DDoS.
To whom it may concern in VA: If using GET for every URL in a sitemap would create a DDoS, sitemaps wouldn't have lasted very long.
But thanks for getting into the log. I could prove to be very helpful.
> Possibly a hijacked PC, with a buggy Trojan doing strange things with > part of a google cookie.
> On Jul 9, 5:17 am, djc wrote:
> > It's in one of my server logs from yesterday....pages called were much > > to fast to be generated by a human AND since this is a "for the heck > > of it" site, not many humans would actually have an interest in it let > > alone want to stick around for 4+hours.
> > Haven't checked any of my other logs. I happened to find it looking > > for some hits I made via script late last night. The log was chucked > > full of "FunWebProducts" with the utmcsr string.
> > On Jul 8, 3:53 pm, Burt wrote:
> > > That (utmccn=(organic)|utmcsr=google ) are strings from a google > > > cookie.
> > > Funwebproducts is an IE toolbar, user agent is added by this toolbar.
> > > Uhh, where did you find the google cookie stuff?
> > > On Jul 9, 4:07 am, djc wrote:
> > > > Why would I be finding this in a windows server log? Doesn't this > > > > have something to do with .htaccess? I'm finding it with the user > > > > agent "FunWebPoducts" which is who knows what.
> > > > utmccn=(organic)|utmcsr=google- Hide quoted text -
There is another "former" member who also tried to join a forum where I grab IP's, they match plus under 2 of his numerous profiles, he claims to live in VA.
I am sure I have numerous visitors that use the Google Toolbar and I have never ever seen log entries like this. utmccn=(organic)| utmcsr=google is just part of a string that is about 3~4 lines long when wrapped. I suspect the requests were done with a poorly created script or .exe, not a web browser.
