Where is this traffic coming from

Discussion in 'Traffic Analysis' started by RoyalFlushed, Aug 28, 2008.

0
  1. #1
    Hi Guys,

    I was hoping anyone here could answer my question, its about these strange "fake" visits i keep getting.

    The ip address is different almost each time, and the referer URL, sometimes when i check it, there's nothing there, and the other time it is a site i never heard of. The referer url's look like this :

    www . totalhouseinsure . com / flood-insurance-california.html
    www . totalhouseinsure . com / discount-aarp-flood-insurance.html
    www . virtualinsurelife . com / globelifeinsuranceoklahoma.html
    www . virtualinsurelife . com / unionfidelitylifeinsurance.html

    Does anyone have any idea what this is / means?

    Thanks,

    Peter
     
    RoyalFlushed, Aug 28, 2008 IP
  2. iloveRP.com

    iloveRP.com Peon

    Messages:
    457
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I suspect this is bot that steals content from your site and dump your content to other site.
     
    iloveRP.com, Aug 30, 2008 IP
  3. Apple.Summers

    Apple.Summers Peon

    Messages:
    243
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #3
    just block their ip's from the cpanel.
     
    Apple.Summers, Aug 30, 2008 IP
  4. confusion

    confusion Guest

    Messages:
    108
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Yes, this is an attempt at link spamming. Basically, the "attacker" has bots running around the Internet that forces a referrer of their web site. They "attacker" is hoping that you have your web stats page publicly accessible and as such, providing a one way link to their site. They are also hoping you click on the link to find out what it is.
     
    confusion, Aug 30, 2008 IP
  5. RoyalFlushed

    RoyalFlushed Peon

    Messages:
    34
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Thanks for the replies Guys!

    You confirmed what i suspected, but i think there's little i can do to block these fakers, because of the different IP they use every time...

    or is there something i can do to detect a "bot" and deny access?

    cheers,

    Peter
     
    RoyalFlushed, Aug 31, 2008 IP
  6. Subhani

    Subhani Active Member

    Messages:
    125
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    58
    #6
    I think it is possible to block this attack as you said the the fake traffic is comming from these two sites


    You can use .htaccess ( referrer redirect) and redirect all the visits from these sites.
     
    Subhani, Sep 7, 2008 IP
  7. gadget_girl

    gadget_girl Peon

    Messages:
    53
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    yes I am totally agree with my friend confusion. This is the same case i found with one client but i didn't got what it is. Thanks confusion for solving my confusion
     
    gadget_girl, Sep 7, 2008 IP
  8. RoyalFlushed

    RoyalFlushed Peon

    Messages:
    34
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Thanks for the info, i appreciate all of your help!

    the referer URL is different each day, today for example it is :

    worthjeudecasino dot com / gambling-general.html

    I found out the "bots" are trying to post comments, but i've build in that no comment can be submitted with a www in it, so the can try what the want but it isn't accepted anyway.

    I think in this case the htaccess solution isn't any good because of the different referer URL each time, is it? is there another solution that can somehow detect if the visitor is a bot or something?

    ps : My stats page isn't public and has never been public.

    Thanks,

    Royal
     
    RoyalFlushed, Sep 8, 2008 IP