Odd trackback url in abundance in my apache logfile

Morison, Rodney -- on Sep. 4 2007

/technotes/links/trackback.php/article/technotes/links/trackback.php

Problem has been recorded

Issue description

I'm seeing an odd url in weblogs for my yacs based site: /technotes/links/trackback.php/article/technotes/links/trackback.php

It's the most hit url on my site (after heartbit.php) and seems to come from articles pages, but I can't reproduct the click.

Anyone have any idea what this is from?

17.149.4.69 - - [04/Sep/2007:00:39:37 -0700] "POST /technotes/links/trackback.php/article/technotes/links/trackback.php HTTP/1.1" 200 7767
"http://www.morison.biz/technotes/links/trackback.php/article/16" "Opera/9.0 (Windows NT 5.1; U; en)"
85.90.233.169 - - [04/Sep/2007:00:40:35 -0700] "POST /technotes/links/trackback.php/article/technotes/links/trackback.php HTTP/1.1" 200 794
2 "http://www.morison.biz/technotes/links/trackback.php/article/20" "Opera/9.0 (Windows NT 5.1; U; en)"
17.149.4.70 - - [04/Sep/2007:00:41:18 -0700] "POST /technotes/links/trackback.php/article/technotes/links/trackback.php HTTP/1.1" 200 7790
"http://www.morison.biz/technotes/links/trackback.php/article/23" "Opera/9.0 (Windows NT 5.1; U; en)"
203.69.39.251 - - [04/Sep/2007:00:41:42 -0700] "POST /technotes/links/trackback.php/article/technotes/links/trackback.php HTTP/1.1" 200 776
4 "http://www.morison.biz/technotes/links/trackback.php/article/24" "Opera/9.0 (Windows NT 5.1; U; en)"

Comments

Bernard from nearby-an-airport Associate, 6796 posts	on Sep. 6 2007 Maybe some weird attack attempt of your site, if these URLs appear as bursts in logs.
Rod 52 posts	on Sep. 7 2007 Bernard: You're probably right, as 90+% say Opera, and there aren't that many Opera users out there. If it is an attack, I doubt it's unique to my site...any other Yacsers out there seen it? I run a firewall, I usually block IPs of malicious sites, but I like to be sure it's malicious. Rod
Bernard from nearby-an-airport Associate, 6796 posts	inspired from rod on Sep. 9 2007 Rod: One year ago we have received some attacks exactly on the same script.

3 comments

Rate this page
Posted by Rod on Sep. 4 2007, commented by Bernard on Sep. 9 2007, (popular)