What is this???

Discussion in 'Search Engine Optimization' started by ncaditya, Jun 9, 2007.

  1. #1
    :eek:

    I just got 600 hits for the keyword "sexdragsandrocknroll"!!! Here is the screenshot. Or has my site been hacked?
    Can someone please tell me what is causing this? Has anyone experienced things like this before?

    [​IMG]

    Mods, Please move this to the appropriate forum, if it doesn't belong here.
     
    ncaditya, Jun 9, 2007 IP
  2. seojames

    seojames Banned

    Messages:
    190
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #2
    It might help if you would share your url with us so that we can have a look to see whats going on with your site.
     
    seojames, Jun 9, 2007 IP
    ncaditya likes this.
  3. ncaditya

    ncaditya Guest

    Messages:
    588
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #3
    ncaditya, Jun 9, 2007 IP
  4. mad4

    mad4 Peon

    Messages:
    6,986
    Likes Received:
    493
    Best Answers:
    0
    Trophy Points:
    0
    #4
    I suspect some bot or script is spoofing the referrer headers and pretending to be a visitor from Google.

    Check your logs for the specific entries and see what the user agent and IP address of the visitor was.
     
    mad4, Jun 9, 2007 IP
  5. ncaditya

    ncaditya Guest

    Messages:
    588
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Even webalizer is showing the same thing:

    [​IMG]

    The user agent has to Opera, as I it shows the highest number of hits (even more than Yahoo! Slurp which is not possible).
     
    ncaditya, Jun 9, 2007 IP
  6. mad4

    mad4 Peon

    Messages:
    6,986
    Likes Received:
    493
    Best Answers:
    0
    Trophy Points:
    0
    #6
    What search engine were the visitors from? Can you find your site searching for that keyword?
     
    mad4, Jun 9, 2007 IP
  7. ncaditya

    ncaditya Guest

    Messages:
    588
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #7
    I am unable to find my site if I search for that keyword. However, in Google I find some other sites that make mention of the keyword.
     
    ncaditya, Jun 9, 2007 IP
  8. mad4

    mad4 Peon

    Messages:
    6,986
    Likes Received:
    493
    Best Answers:
    0
    Trophy Points:
    0
    #8
    I would just ignore it.:)
     
    mad4, Jun 9, 2007 IP
  9. Morf

    Morf Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    We also have this on a clients website, for the second month running with no evidence of it before hand.

    This month has shown 6635 hits for "sexdragsandrocknroll" in AWStats. With no mention of that in the site.

    We have no idea why it is showing up either. :confused::confused:
     
    Morf, Jun 15, 2007 IP
  10. chriszz

    chriszz Peon

    Messages:
    233
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Very strange. Be interesting to know the outcome of this
     
    chriszz, Jun 15, 2007 IP
  11. Morf

    Morf Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #11
    Having looked at the access logs above seems to be correct as an attempt to spam the blog with comments:

    
    answerenglish.co.uk 81.***.**.***- - [01/Jun/2007:17:47:18 +0100] "GET /blog/2006/07/18/een-digitaal-leven-in-plaats-van-een-echt-leven/ HTTP/1.1" 200 30582 "http://google.com?q=sexdragsandrocknroll" "Opera/9.00 (Windows NT 5.1; U; en)"
    answerenglish.co.uk 81.***.**.***- - [01/Jun/2007:17:47:18 +0100] "POST /blog/wp-comments-post.php HTTP/1.1" 200 529 "http://www.answerenglish.co.uk/blog/2006/07/18/een-digitaal-leven-in-plaats-van-een-echt-leven/" "Opera/9.00 (Windows NT 5.1; U; en)"
    answerenglish.co.uk 81.***.**.***- - [01/Jun/2007:17:47:19 +0100] "GET /blog/2006/07/18/een-digitaal-leven-in-plaats-van-een-echt-leven/ HTTP/1.1" 200 30582 "http://google.com?q=sexdragsandrocknroll" "Opera/9.00 (Windows NT 5.1; U; en)"
    answerenglish.co.uk 81.***.**.***- - [01/Jun/2007:17:47:19 +0100] "POST /blog/wp-comments-post.php HTTP/1.1" 200 529 "http://www.answerenglish.co.uk/blog/2006/07/18/een-digitaal-leven-in-plaats-van-een-echt-leven/" "Opera/9.00 (Windows NT 5.1; U; en)"
    
    
    
    Code (markup):
    With massive sections of the logs being repeats of the above lines
     
    Morf, Jun 15, 2007 IP
  12. trichnosis

    trichnosis Prominent Member

    Messages:
    13,785
    Likes Received:
    333
    Best Answers:
    0
    Trophy Points:
    300
    #12
    that means somebody is giving link to you. have you search the google?
     
    trichnosis, Jun 15, 2007 IP