Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My Apache logs suddenly show huge numbers of downloads (downloading the same things over and over) from IPs that trace to Twitter -- 199.59 & 199.16. What does that mean? Can you actually download stuff via Twitter IPs? Is this a recognized malicious activity?

share|improve this question

closed as unclear what you're asking by John Conde Feb 21 '14 at 20:50

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

You'll need to give us more than this. At least show us the logs and why you think this is problematic. – John Conde Feb 21 '14 at 20:50
These are GET requests for big files that I have online in publicly accessible areas. Intended for my work colleagues. Nothing confidential. These requests are completed, and result in 200 status. And yet they keep getting the same files, over and over again. It's problematic mainly because of bandwidth hogging. This started abruptly a few days ago, and has been going on ever since. I have now blocked those IPs. I've never seen this kind of activity before. Certainly not from Twitter IPs. Just curious if this is a recognized problem. – user618 Feb 21 '14 at 21:07
Have links to these files been shared on Twitter? – w3dk Feb 21 '14 at 21:37
Can you supply some full ip addresses?? – closetnoc Feb 22 '14 at 3:14
It is possible that links to these files have been shared on Twitter. No question that people share those slide sets by e-mail. We usually get a hundred or so downloads from various institutions in the course of a day. This time, I saw six hundred downloads from IPs identified as from Twitter. Just jaw dropping. Now, I suppose this may have been different people using their Twitter account to access files with the same IP, rather than individuals downloading the same file many times. IP numbers I see a lot of are, and – user618 Feb 22 '14 at 3:58