Log oddities: 404s for client-garbled image URLs
Posted
by
Chris Adams
on Pro Webmasters
See other posts from Pro Webmasters
or by Chris Adams
Published on 2012-10-01T16:58:26Z
Indexed on
2012/10/01
21:52 UTC
Read the original article
Hit count: 350
I've noticed some odd 404s which appear to be broken URL rewriting code:
Our deep zoom view generates images URLs like this:
/media/204/service/dzi/1/1_files/7/0_0.jpg
I see some - well under <1% - requests for slightly altered URLs:
/media/204/s/rvice/d/i/1/1_files/7/0_0.jpg
These requests come from IP addresses all over the world (US, Canada, China, Russia, India, Israel, etc.), desktop and mobile users with multiple user-agents (Chrome, IE, Firefox, Mobile Safari, etc.), and there is plenty of normal activity in the same session so I'm assuming this is either widespread malware or some broken proxy service. I have not seen them from anything other than images, which suggests that this may be some sort of content filter.
Has anyone else seen this? My CDN logs show the first request on June 8th ramping up from several dozen to several hundred per day.
© Pro Webmasters or respective owner