DelphiFAQ Home Search:

Referer spam in my web server's log files

 

commentsThis article has not been rated yet. After reading, feel free to leave comments and rate it.

Question:

I found a strange web site in my web server's referrer logs. I visited that site and it seems to have no links pointing to me. How is that possible?

Answer:

Either that site was what is called a 'Scraper Site' or you found a case of 'Referrer Spam'.

A scraper site is a web site with automatically generated content. Each page on that site is about a few keywords, like 'radar detector', then a script runs a google search for these keywords, extracts the results and pretends that this extracts are content. Usually the add a lot of advertising to these pages to earn money.
Because their pages are constantly been updated, they rank pretty good in search engines.
You recognize these types of sites immediately when you see one. They are bad but they do not break any laws except the code of ethics.

If it is not a scraper site, then it probably was 'Referrer Spam'.

Referrer spam is when a spammer sends a lot of page requests with faked referrer information to your site. The goal for the spammer is to be displayed in referral statistics at the target site. This is really only helpful if your site has the statistics - or an extract of them - automatically posted to their site. Some blogs display a link to the most frequent or most recent web site found in their referer logs using scripts. The spammer wants his site listed there.
To find targets like your site, the spammer does something like a Google query for the phrase "recent referers".

How does the spammer generate so many hits then? I could just block his IP number?

A common trick is to include an image tag in one the spammer's most popular pages and the SRC tag of this image will refer to your web site's home page. No image is loaded, but every visitor to the spammer's site will generate a hit on your site that is logged by your server. Assuming that the spammer already has some decent traffic going, that way many distinct IP numbers will flood your log file.

And of course spammers won't be shy when it comes to using real dirty tricks like spyware, adware etc. A virus or other malware, maybe pretending to be a toolbar can generate such http requests easily and the user will never know.

You can block those spammers by using Apache's mod_rewrite. Put the following in your .htaccess file:

# Options +FollowSymlinks
RewriteEngine On
RewriteCond %{HTTP_REFERER} ^http://(www\.)?spammersite.com.*$ [OR]
RewriteCond %{HTTP_REFERER} ^http://(www\.)?morespam.com.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(www\.)?morejunk.com.*$ [NC]
RewriteRule \.*$ http://127.0.0.1 [R,L]

Comments:

2008-03-23, 11:36:36
anonymous  
Hi !

Putting 'deny from xxx.xxx.xxx.xxx' in .htaccess leaves entry in weblog with error code 403.

I've got rid of some referer spammers in my WHOIS public server site
http://whois.show-ip.net putting at top of the index.php page following script:

<?php
$ipaddress = $_SERVER['REMOTE_ADDR'];
if ($ipaddress == 'xxx.xxx.xxx.xxx') { // spammer's IP
for ($j=0; $j<(6*65); $j++) {echo 1; sleep(10);}
};
?>

In thsis case spammer accessed my site every 60 min.
I slowly fed him in trash. No traces in weblog left.
2014-12-16, 10:08:27
anonymous from Venezuela  
One of my favorite tihngs on rawtop's breeding zone is Your last load It allows people to document hot BB sex easy, fast, and real, without having to compose a whole story out of it. I'd love to add content to BBBH that way.
2014-12-19, 16:35:17
anonymous from Venezuela  
I love being constantly full of hot man seed!!! Hope 2 meet other cum <a href=' http://rvdmjgtie.co..</a> bottoms for friendship. Also, always needy 4 top's cocks & cum.
2014-12-31, 21:16:22
anonymous from Iran  
Hi KonstantinosI'm intrigued! I tend to use the name Fair Trade when I commnet on peoples' blogs because I'm proud of what we do and I like to spread the word but am I a spammer in your eyes?I hope not but I admit it is a bit cheeky but is it acceptable or just plain dodgy? http://xenbsalgsn.com [url= http://lgwyuymnwxt...nwxt[/url] [link= http://lcpnngv.com]..ngv[/link]
2015-02-01, 04:13:46
anonymous from United States  
There are no words to describe how boodaicus this is.
2015-02-04, 22:33:21
anonymous  
I love being constantly full of hot man seed!!! Hope 2 meet other cum airdong bottoms for friendship. Also, always needy 4 top's cocks & cum. http://vwjbvstrm.com [url= http://wvvdekd.com]..dekd[/url] [link= http://vteageqn.com..eqn[/link]
2015-02-21, 00:28:42
anonymous from Indonesia  
Saya haturkan banyak terima kasih, karnah aki COKENG membantu memberikan solusi,,,kini saya udah lepas dari kendala yg saya alami kemaren, dan angka yg aki berikan sangat tepat, hanya sekali ini saya main togel...Buat kamu yg pengen menang togel....bisa hub: Ki Cokeng di: +6285394330318. terima kasih.
2015-02-21, 21:59:49
anonymous from Indonesia  
Saya haturkan banyak terima kasih, karnah KI COKENG membantu memberikan solusi,,,kini saya udah lepas dari kendala yg saya alami kemaren, dan angka yg aki berikan sangat tepat, hanya sekali ini saya main togel...Buat kamu yg pengen menang togel....bisa hub: Ki Cokeng di: +6285394330318. terima kasih.
2015-02-25, 19:19:23
anonymous from Indonesia  
Saya haturkan banyak terima kasih, karnah KI COKENG membantu memberikan solusi,,,kini saya udah lepas dari kendala yg saya alami kemaren, dan angka yg aki berikan sangat tepat, hanya sekali ini saya main togel...Buat kamu yg pengen menang togel....bisa hub: Ki Cokeng di: +6285394330318. terima kasih.

 

 

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture: