rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: Mr Tickle on June 22, 2008, 06:46:18 AM

Title: Strange HFS log entries
Post by: Mr Tickle on June 22, 2008, 06:46:18 AM
While checking my HFS log I noticed the following entry :-
22/06/2008 04:07:12 208.80.193.46:35487 Requested GET /
22/06/2008 04:07:12 208.80.193.46:35487 Served 8.81 KB
This is about 5k larger than I would normally expect. I connected myself to check this :-
22/06/2008 07:29:12 86.154.203.158:49767 Requested GET /
22/06/2008 07:29:12 86.154.203.158:49767 Served 2.78 KB
It seems this behaviour happens once a day. I have no idea whatsoever what or who the ip 208.80.193.46 belongs to. What do you think is happening here?
Title: Re: Strange HFS log entries
Post by: Foggy on June 22, 2008, 08:27:31 AM
the ip belongs to a subdomain of www.as13348.com,

I can only guess that the size is different because they either dont have something cached and need to redownload it or they are getting an error page.

try enabling more info in the log,

right click on log > log what
Title: Re: Strange HFS log entries
Post by: Mr Tickle on June 22, 2008, 09:17:04 AM
OK done that. Also banned the port range 208.800.000.000-208.800.255.255 < hope I got the syntax right on that!
I will see if it happens again now. Thanks for the reply :-)
Title: Re: Strange HFS log entries
Post by: rejetto on June 22, 2008, 01:14:51 PM
the syntax 208.800.* wil do the same job

for the difference in the number of bytes sent, i guess they don't support compression, so the page is larger.
Any real brower supports compression, but clearly they don't use a browser but a spider.