Forum Moderators: open

Message Too Old, No Replies

a request for null/InterYield/getSnoozing.do

what's causing it?

         

smallcompany

4:41 pm on May 31, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I see requests coming from various IPs, including visits from paid ads like adwords, that always add "/null/InterYield/getSnoozing.do" to the end of the landing URL of my site.

So, it first lands on the clean URL, then it requests the same page with the /null/InterYield/getSnoozing.do applied to it, followed by a bunch of variables applied to the requested URL, like:

callback=null.getSnoozing
affiliate=null
subid=null
adCountIntervalHours=12
maxAdCountsPerInterval=3
protocol=http
fulldomain=www.example.com
domain=example.com
title=Title%20of%20the%20page
fullcleantitle=Full%20Title%20of%20the%20page
se#*$!ilMidnight=3286
metakeywords=keywords
pop=over
check=
attributionDisabled=false
adultdisabled=undefined
iyd=fals

It lands on different pages, home page the most, but others, too.

What is this?
I thought it could be some plugin, people may knowing or not about it...

Thanks

keyplyr

8:10 pm on May 31, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Looks like a bot doing a vulnerability probe. Without more information, that's all I can say.

Look up the IP and if it is from a server farm you may wish to consider blocking. If the IP is from an ISP then consider other defensive means to avoid collateral damage.

To get the full picture, you need to examine you raw server logs, not just a visitor stats program.

lucy24

12:40 am on Jun 1, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



title=Title%20of%20the%20page
fullcleantitle=Full%20Title%20of%20the%20page
What's the difference between these two? I can see that this is one place where they'd almost have to crawl the page first to see what its <title> attribute says. Do any other aspects of the request involve information that they wouldn't know without seeing the page?