Forum is hotlinking to my server

Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members.

Your forum appears to be hotlinking scripts from http://codemirror.net . Please host them from your own domain.

I couldn't reproduce the behavior, because I don't have a verified account with which to post messages, but this is what my logs show (about 3gb per day worth of it):

68.37.165.57 - - [23/Aug/2013:11:35:46 +0200] "GET /lib/codemirror.css HTTP/1.1" 200 6082 "http://www.imdb.com/title/tt0108399/b..." "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5)"
75.68.171.204 - - [23/Aug/2013:11:35:47 +0200] "GET /lib/codemirror.css HTTP/1.1" 304 0 "http://www.imdb.com/title/tt1606375/b..." "Mozilla/5.0 (Windows NT 6.1; rv:23.0) Gecko/20100101 Firefox/23.0"
75.68.171.204 - - [23/Aug/2013:11:35:47 +0200] "GET /lib/codemirror.js HTTP/1.1" 304 0 "http://www.imdb.com/title/tt1606375/b..." "Mozilla/5.0 (Windows NT 6.1; rv:23.0) Gecko/20100101 Firefox/23.0"
109.225.75.187 - - [23/Aug/2013:11:35:50 +0200] "GET /lib/codemirror.css HTTP/1.1" 200 6082 "http://www.imdb.com/title/tt1650554/b..." "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.110 Safari/537.36"
68.37.165.57 - - [23/Aug/2013:11:35:51 +0200] "GET /lib/codemirror.js HTTP/1.1" 200 228226 "http://www.imdb.com/title/tt0108399/b..." "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5)"
137.191.227.58 - - [23/Aug/2013:11:35:51 +0200] "GET /lib/codemirror.css HTTP/1.1" 304 0 "http://www.imdb.com/name/nm0000255/bo..." "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
137.191.227.58 - - [23/Aug/2013:11:35:51 +0200] "GET /lib/codemirror.js HTTP/1.1" 304 0 "http://www.imdb.com/name/nm0000255/bo..." "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
108.7.146.34 - - [23/Aug/2013:11:35:53 +0200] "GET /lib/codemirror.js HTTP/1.1" 200 228226 "http://www.imdb.com/board/bd0000010/r..." "Mozilla/5.0 (Windows NT 5.1; rv:23.0) Gecko/20100101 Firefox/23.0"
210.54.88.26 - - [23/Aug/2013:11:35:53 +0200] "GET /lib/codemirror.js HTTP/1.1" 304 0 "http://www.imdb.com/board/bd0000108/r..." "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.57 Safari/537.36"
37.142.112.35 - - [23/Aug/2013:11:35:58 +0200] "GET /lib/codemirror.css HTTP/1.1" 304 0 "http://www.imdb.com/title/tt1219024/b..." "Mozilla/5.0 (Windows NT 6.1; rv:23.0) Gecko/20100101 Firefox/23.0"

Hoping I won't have to start serving 'creative' variations of the scrips,
Marijn

Marijn Haverbeke

2 Posts
0 Reply Likes

Posted 7 years ago

7 years ago

Dan Dassow, Champion

16662 Posts
18789 Reply Likes

Marijn,

I am an authenticated IMDb user, not a staff member. I have no administrative rights on IMDb. I can only recommend an action.

3 Gigabytes per day hot linking probably indicates a systemic issue. IMDb upgraded their Message Board software around Wed Jun 26 2013. When did you start seeing this massive amount of hot linking?

This is something the IMDb technical staff will have to look into.

2 people like this

7 years ago

Marijn Haverbeke

2 Posts
0 Reply Likes

The bandwidth blowup and the entries in my logs start August 10th, not June 26th.

7 years ago

Dan Dassow, Champion

16662 Posts
18789 Reply Likes

Marijn Haverbeke,

Having the date when this started should help the IMDb technical staff trace when they hot linked to the code on http://codemirror.net .

I found these two code fragments when I clicked reply to a post:
href="http://codemirror.net/lib/codemirror.css"
script src="http://codemirror.net/lib/codemirror.js"

I believe this indicates that the page is hot linking to http://codemirror .

This is the link for the reply page:
http://www.imdb.com/title/tt1606375/b...

I'm seeing the same issue with the links you posted.

I'm hoping an IMDb staff member see this thread and can contact IMDb technical support regarding this problem.