Welcome to WebmasterWorld Guest from 54.162.155.183

Message Too Old, No Replies

Tell them spamsite dot biz sent you

     
1:13 am on Mar 22, 2013 (gmt 0)

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month



Once and it's a fluke. Twice and I start keeping an eye out.

A few days back I found and noted this visit (here I've obfuscated a little more than in the original post [webmasterworld.com]):

66.249.73.132 - - [17/Mar/2013:18:38:49 -0700] "GET /paintings/dir1/dir2/filename.jpg HTTP/1.1" 200 4811 "http://example.de/name1/name2" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"


Naturally I had a look at the named referer and found your basic hotlinking page. The googlebot does occasionally give a referer when asking for an image or other subsidiary file; this one just happened to be a hotlink, so they started out on someone else's site. Shrug, move on, file and forget.

And then I find another one. Again, the identical IP that the googlebot uses in its ordinary visits.

66.249.73.132 - - [21/Mar/2013:06:54:58 -0700] "GET /paintings/dir1/dir2/othername.jpg HTTP/1.1" 200 4228 "http://example.com/3/morestuff" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"


/dir1/dir2/ are the same both times, but this may be coincidence; the file itself is different.

The noteworthy bit: Hotlinker #1-- which happened to be German-- could be passed off as the generic hotlinker. Didn't look very closely. (It was definitely not google.de image search, as suggested at the time.) Hotlinker #2 is unequivocally pure spam [google.com]. Based in the US, registered with GoDaddy, yawn.

I seriously doubt this has anything to do with my site. It's the googlebot investigating ... what, exactly?

I Am Suspicious.
5:05 pm on Mar 22, 2013 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member Top Contributors Of The Month



I don't know enough to say for sure what you're seeing, but referral spam seems to get worse everyday. Maybe they're doing it with images now.
8:51 pm on Mar 22, 2013 (gmt 0)

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month



I have entire countries blocked as referers :) Most come attached to IPs that are blocked in their own right, but it's good to have the extra layer.

Images with fake referers run smack into assorted hotlink routines* so I barely notice them. But in these two cases there never was a human visit. Only the googlebot-- and you can hardly claim that it needs to use referer spam! Especially since each originating site really does have a hotlink to my image.


* Rewrite to single-dot gif, rewrite to NO HOTLINKS image, rewrite to thumbnail version of requested image, or redirect to custom page.
 

Featured Threads

Hot Threads This Week

Hot Threads This Month