homepage Welcome to WebmasterWorld Guest from 54.234.60.133
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
Subscribe and Support WebmasterWorld
Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque & physics

Webmaster General Forum

    
Lots of hits from a web site but no links or hot linking?
tongpo




msg:3924818
 2:50 pm on Jun 2, 2009 (gmt 0)

Just had a look at my statistics and there are LOTS of hits from a certain website from various pages of this web site. It is actually a forum. Every link I visit has no mention or link to my web site whatsoever, it has a search facility but only searches that particular forum so users arent searching and finding my site through theirs. I checked all images too and they are not linking to any.

This is strange and I cant seem to figure out how Im getting all these hits from this site. In my access logs I get lots of:

00.00.00.00 - - [02/Jun/2009:09:31:35 +0100] "GET /widgets/1834.htm HTTP/1.1" 200 48886 "http://www.web-site-in-question.com/widget1/name-of-page.html" "Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1)"

Obviously not the real IP. I cant work it out, there are lots of hits from various pages. Any ideas?

 

Future




msg:3924820
 2:56 pm on Jun 2, 2009 (gmt 0)

Originally written by jdmorgan
This is log spamming.
Some Web sites publish their referrer log files or 'stats' as HTML pages, viewable to all on the Web -- I guess as some sort of 'brag' or perhaps just through technical incompetence.

So, log spammers have taken advantage of that to put their URLs into those log files in order to build links.

It's a great waste of server and internet bandwidth, energy, and effort, as most major search engines wised up to this 'trick' long ago.

However, I advise that you do not visit those sites unless you have top-notch anti-malware and firewall protection and run your browser with JavaScript, ActiveX, and Java disabled in a non-privileged account; Another reason to drop these links in your logs would be to get you (the Webmaster) to visit their site, so that they can serve you a nice malware download. In fact, this may be how some Webmasters' sites get hacked: Their account credentials might have been stolen by a drive-by-download keylogger.

Instead of visiting the site, just do a DNS lookup on the requesting IP address(es) and do a search on the referring domain name -- That will often tell you enough. Oh, and never use the Google "I'm Feeling Lucky" search feature when doing this, as it will redirect you 'automatically' to the first search result. Be careful out there...


tongpo




msg:3924834
 3:33 pm on Jun 2, 2009 (gmt 0)

so what do i do about it? How do i prevent it happening?

Artsyrat




msg:3924939
 5:52 pm on Jun 2, 2009 (gmt 0)

I'm following this article because I am having the same issue and I have done the exact same thing as tongpo. Yikes....

physics




msg:3924998
 7:00 pm on Jun 2, 2009 (gmt 0)

Check out the nolog option in your httpd.conf
[webmasterworld.com...]

rocknbil




msg:3925017
 7:18 pm on Jun 2, 2009 (gmt 0)

Are your stats behind a login?

tongpo




msg:3925043
 7:53 pm on Jun 2, 2009 (gmt 0)

My stats are behind a log in now, they have been for past few weeks, before this started happening. Thanks for the replies guys/gals

Taree




msg:3925235
 3:19 am on Jun 3, 2009 (gmt 0)

Let me take a stab, the domain has the word "smiley" in it?

If so this thing has been tearing up the web for a few weeks now spamming log files on a large scale. They use a tool called "PRStorm" and they effectively simulate hits to your site in the hopes you publish your logs so they get a link.

If i was right about the domain, they are doing it simply for Adsense revenue and their content is scraped from Yahoo Answers.

Sad, because with the volume they are doing i'm getting 100's of hits per second and it's dragging my site down and there's nothing i can do.


caribguy




msg:3925323
 6:11 am on Jun 3, 2009 (gmt 0)

Taree, let them eat 403s or redirect them to the localhost blackhole...

In http.conf:

RewriteCond %{HTTP_REFERER} example\.com [NC]
RewriteRule (.*) - [F,L]

or

RewriteCond %{HTTP_REFERER} example\.com [NC]
RewriteRule (.*) [127.0.0.1...] [L,R]

JS_Harris




msg:3927164
 9:59 am on Jun 5, 2009 (gmt 0)

Hold up everyone. Tongpo, did you register to the forum and log in? Things like signatures and avatars don't always show up for non members and not all forums stop those from showing up in static places like archives. Some even allow bots to crawl as a member to allow for better ad targeting.

tongpo




msg:3927190
 11:49 am on Jun 5, 2009 (gmt 0)

Nope I had never even heard of the site before I noticed it in my logs and yes the domain has the word 'smiley' in it. Seems like they are known for doing this sort of thing.

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About
© Webmaster World 1996-2014 all rights reserved