Perhaps http://www.javascriptkit.com/howto/htaccess14.shtml would be a
good read. You can set the .htaccess to generate a 404 or ...  Anyway
I think the article probably has a good explination of what's going
on. Your friend needs a new log parser or needs to add more columns to
his view the apache logs show the originating ip as well as the
referer

On 7/13/09, Jim March <1.jim.march@gmail.com> wrote:
> On Mon, Jul 13, 2009 at 6:32 PM, James
> Finstrom<jfinstrom@rhinoequipment.com> wrote:
>> The referer is not official it is just an http header so most likely
>> someone spoofing the header
>
> Well then they're spoofing it 2000+ times.  A google search on:
>
> "alchemistsrroom.us"
>
> ...shows lots of hits and in some cases site referrals to some odd
> websites: a mixture of deep-right Christian religious and a few others
> such as "sunnimuslim.org"?
>
> Is there any way to pull an IP address out of the referral logs on my
> friend's server?
>
> Is it possible "alchemistsrroom.us" is operating off of a non-standard
> port, something like "alchemistsrroom.us:4269"?
>
> Jim
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>


-- 
James Finstrom
Rhino Equipment Corp.
http://rhinoequipment.com ~ http://postug.com
Phone: 1-877-RHINO-T1 ~ FAX: +1 (480) 961-1826
Twitter: http://twitter.com/rhinoequipment
IP: guest@asterisk.rhinoequipment.com
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss