Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Hi a friend of mine is asking about the request which can for example be found here:

http://www.geoidee.ch/geodata/geoserver-2.0.0/logs/2010_11_23.request.log

His original message:

On a couple of hundred web sites worldwide, one of the 50 most popular "File not found" error 404 is caused by the following request:
"GET http://66.196.81.202/error/vote HTTP/1.0"
It originates from a user agent that purports to be an iPhone. The two requests that hit my servers appeared to originate near Frankfort, Germany.
The IP address in the request is part of Yahoo although I doubt that Yahoo had any intentional part.
fe1.buzz.vip.re1.yahoo.com
The HTTP request has a host header 66.196.81.202
and a X-Forwarded-For of 96.6.99.16 and my IP address
I expected to be able to do a Google search and find some kind of security bulletin on it, but I found nothing. It could just be that my search skills are deficient.

Thanks for any pointers to what this could be

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Probably a malformed attempt to use your webserver as an open proxy and game a voting system - would treat as typical unwanted bot traffic.

share|improve this answer

Looks like a search engine spider. The IP address is listed on the seo-wolf blog as a spider (among thousands of others)

share|improve this answer
    
You mean the url that is mentioned in the GET is on SEO. But that is not the requestor, it is just an IP in the request string. –  mplungjan Jan 13 '11 at 7:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.