homepage Welcome to WebmasterWorld Guest from
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / WebmasterWorld / New To Web Development
Forum Library, Charter, Moderators: brotherhood of lan & mack

New To Web Development Forum

Found [referral spam website] in my files on awstats
How did this get here?

Msg#: 4677705 posted 12:51 pm on Jun 5, 2014 (gmt 0)

I noticed [example referral spam ].info in my list of file types viewed in awstats the other day. I never put it there. Is it some kind of script kiddie injecting code or something else?

Thanks for any 411

[edited by: brotherhood_of_LAN at 6:11 pm (utc) on Jun 5, 2014]
[edit reason] Removed specific domain name [/edit]


brotherhood of LAN

WebmasterWorld Administrator brotherhood_of_lan us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

Msg#: 4677705 posted 6:09 pm on Jun 5, 2014 (gmt 0)

Welcome to the forums p914,

It's most likely just "referral spam"... a request sent to your website with a fake referer HTTP header. The referer header typically shows where a user clicked from to arrive at your site, but can easily be forged.

This used to be done to increase link popularity, as some logging software was public and would be spidered by search engines.

It can also be a way to promote to you, as a website owner/webmaster.

They are best ignored and if you find the time to, block IP addresses that repeatedly send fake referral strings. It's worth searching these very forums for solutions if you get to that stage.

Having reread your post though, are you saying it's a file that's requested from your web server? If the HTTP response is 404 for those requests then it most likely is still just a variant of referral spam.


Msg#: 4677705 posted 7:25 pm on Jun 5, 2014 (gmt 0)

Thanks, it is an http: I usually see referrer spam in the referring sites area of awstats not in file types. A file type is something I would normally load to my site like an mp3 or webpage.

It only has 1 hit on it so I guess it could be referrer.


WebmasterWorld Administrator 5+ Year Member Top Contributors Of The Month

Msg#: 4677705 posted 8:55 pm on Jun 5, 2014 (gmt 0)

Sometimes it is hard to tell exactly what is happening when using stats parsers like AWStats. If in doubt, it is best to view the actual access logs for your site. Not as simple to use and find things, but you would see exactly what file was requested, when, by what UA/IP and what the server response was. If the file does not exist, there should be a 404 response shown. Another response like a a 200 would mean that the file does exist and you need to look into it to see if it belongs there as part of something you have added to your site.

You did not specify if this is a blog/wp/plain html or another kind of site. If WP, it is not uncommon to find things included in plugins that can include unwanted files or 'features'.


Msg#: 4677705 posted 9:21 pm on Jun 5, 2014 (gmt 0)

I'll check the logs. It's my html website.

Global Options:
 top home search open messages active posts  

Home / Forums Index / WebmasterWorld / New To Web Development
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved