Forum Moderators: martinibuster

Message Too Old, No Replies

Why Would Someone Clickbot Attack my AdSense Ads?

Steady increase in invalid clicks

         

Isambard

8:01 pm on Nov 28, 2016 (gmt 0)

10+ Year Member



I have been seeing a steadily increasing number of invalid clicks on my site. Over that past 6 months it's gone from a few clicks to 75% of all clicks. I've been an Adsense publisher with this site for more than 10 years and I've been scrupulous about my Adsense implementation. It's a Dreampress hosted Wordpress blog about projects I've done, all original content written by me.

Looking at Analytics I was able to find 4 pages the were seeing astronomical CTRs. Additionally, these pages were for events long past and of little interest to anyone. The only common denominator is that some were for events in the U.K. which is not the focus of my site.

Turning to my logs I found that all of these clicks were coming from IP addresses within cloud hosting providers. They were also coming from the same, exact, two year old version of Firefox and I used that odd version number to block traffic from what was more than a dozen IPs from all around the globe. Once I blocked the traffic my site CTR has fallen back to it's normal average.

My question is: why would someone do this? I got all excited about the possible return of revenue levels of the past only to have my hopes dashed by what seems a bizarre scheme.

martinibuster

11:49 am on Nov 29, 2016 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



It might be that your AdSense ads were simply in the way. The fact that the activity was limited to those UK event pages seems to indicate that the bots were using a specific search and only interested in that narrow search, not your site. It could simply be a misconfigured bot run by someone not entirely familiar with the software.

Criminal hacking activity rises this time of year preceding the Christmas holidays. It could be those British event pages are ranking for a phrase that's related in some way to an entrance point and the bots are just clicking out of your site through the ads.

You might wish to check if your WP install is the most current (on Dreampress, it should automatically be the most current), then head over to the plugin section to verify that all plugins are updated, then finally click over to your themes area and verify that your theme is updated.

keyplyr

12:31 pm on Nov 29, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Turning to my logs I found that all of these clicks were coming from IP addresses within cloud hosting providers
Have you considered blocking these ranges?

Isambard

6:29 pm on Nov 29, 2016 (gmt 0)

10+ Year Member



@keyplyr There were dozens and I kept seeing new ones. Blocking by Firefox version doesn't seem to be blocking anything other than these bots and it was easy to implement.

Isambard

6:35 pm on Nov 29, 2016 (gmt 0)

10+ Year Member



@martinibuster So it's an attempt to exhaust someone's AdWords budget rather than an attack on my site? That makes sense.

keyplyr

6:51 pm on Nov 29, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Isambard, just something to consider...
The Firefox UA was spoofed. The perps can easily change the UA.

Hosting company ranges usually have no valid reason to make requests at our web sites. Blocking these ranges is arguably the best choice for a situation like you describe.

As for the number of ranges, it is not uncommon to block hundreds or even thousands of IP ranges, allowing exceptions for the benneficial.