advice please

I see you used it! That’s funny! He must not check his site much. :D/ :D/

Looked at the server logs after host complained that I was using to much bandwidth.
I had been withe the same host for nine years and never had a problem with bandwidth before

How do I go about finding my server logs I would be interested in checking them also?? I use tzo.com?

tzo is a domain name forwarding service but the server is at your house - right? If so that’s where the logs are. Is it Apache or IIS?

Yes I am running IIS on my srever?

I think you have IIS 5.1 so google search says that if logging is enabled the logs get saved in the C:\Windows\Sytem32\logfiles folder in a folder named with the format of W3SVC#, probably W3SVC1 if you only have one website set up. You may not have logging enabled in which case that would be the first step.

Thnaks Niko I will check that out this evening when I get home I would think it would be a good idea to enable it and keep a watch!!

So I turned on my logging and I see an IP besides my own that seems to show up about every 10 minutes how can I find out what and where it is?

Post the log entry and we can help you figure it out.

How do I attatch a text file?

Hit Reply, when that page opens look for “Additional Options” at the lower left corner of the box, hit that and there will be an Attach box open, hit the Browse button and select the file, then hit Post (you can’t preview an attachment).


log.txt (1.5 KB)

Wow, that’s very little information for a log file, I’m not familiar with IIS logs but most webserver logs have way more information :frowning:

66.249.71.230 is google’s search robot if that’s the one you are concerned about.

Yes that was it I only did a copy and past of part of the log as it was all moslty repeats…there was a few other IP’s that showed up on accation also but not real regular like the Google one!! Thanks for the help I’ll keep an eye on it!!

That is pretty sparse for a weblog… Apache logs are much more complete… You get referrals, agent info etc… I have host lookups turned on for this one.

[size=66][color=brown]msnbot-207-46-204-195.search.msn.com - - [25/Mar/2011:21:31:41 -0700] “GET /earthquake HTTP/1.1” 200 10692 “-” “Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)”

173-13-48-29-pennsylvania.hfc.comcastbusiness.net - - [25/Mar/2011:21:33:20 -0700] “GET /earthquake HTTP/1.1” 200 10701 “NameBright - Domain Expired” “Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16”

www.awekas.at - - [25/Mar/2011:21:34:08 -0700] “GET /awekas.php HTTP/1.0” 200 14344 “-” “MyURLGrabber” www.awekas.at - - [25/Mar/2011:21:34:09 -0700] “GET /awekas.php HTTP/1.0” 200 14332 “-” “-”

cpe-65-27-56-90.wi.res.rr.com - - [25/Mar/2011:21:36:04 -0700] “GET /webcams/somt1.jpg HTTP/1.1” 200 77211 “-” “-”

124.115.0.22 - - [25/Mar/2011:21:36:39 -0700] “GET /mesawx HTTP/1.1” 200 4791 “-” “Sosospider+(+http://help.soso.com/webspider.htm)”

msnbot-207-46-199-183.search.msn.com - - [25/Mar/2011:21:37:34 -0700] “GET /robots.txt HTTP/1.1” 200 584 “-” “Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)”
173-13-48-29-pennsylvania.hfc.comcastbusiness.net - - [25/Mar/2011:21:38:23 -0700] “GET /earthquake HTTP/1.1” 200 10703 “NameBright - Domain Expired” “Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16”

69.10.179.7 - - [25/Mar/2011:21:41:21 -0700] “GET /rss.php HTTP/1.1” 200 876 “-” “Motorola”

173-13-48-29-pennsylvania.hfc.comcastbusiness.net - - [25/Mar/2011:21:43:26 -0700] “GET /earthquake HTTP/1.1” 200 10717 “NameBright - Domain Expired” “Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.151 Safari/534.16”[/color][/size]

Looks like his version of IIS is very limited, would signing up for google analytics give him referring info?

Would give him a lot of info that you don’t even get in an Apache log.

He would need to make sure it shows on all of his pages though to be complete.

So if someone hotlinks an image that wouldn’t show up in g analytics then?

I only posted a snip of the log but have since turned on a bunch of other features to log also I will try and post another snip here shorlty!! :slight_smile:

Correct. That type of info can only be gotten via a server log unless you do something cute like redirect all of your images via a script, but that wouldn’t be worth the trouble and would cause a huge amount of traffic for the client etc…