Referrer spam

I had turned off my webalizer stats on this site a long time ago because of the number of spam referrers I was getting, in hopes that they would go away if there were no actual on-line links that they could get a benefit from by spamming my referrer logs, and after that I pretty much haven’t paid any attention to my log files for months.

Well, yesterday I saw a reference to a freeware program called Weblog Expert Lite. Having had a rather serious issue with the Bravenet counter I was using I decided to give it a try and see how it worked. (Not only was the advertising on Bravenet’s site reaching the point of ridiculously intrusive, I actually got prompted to download an install.exe program that AVG identified as a trojan from one of the crappy ads on their site and that was pretty much the end of that.)

Anyway, I went and grabbed the last week’s worth of logs and ran them through the program. I was shocked to discover that the top 25 referrer sites were all spam. In fact, there were over 10,000 404 errors in one week, compared to just over 1000 page loads of the front page of this blog.

So I dug a little deeper, and discovered that, apparently, there is an army of zombie machines at dozens, if not hundreds, of different IP addresses, requesting the archive of this blog from Feb. 10, 2002 with an incorrect file extension. (.htm rather that the correct .html)

So if my math is correct, for every one legitimate request to view the main blog page, there are 10 spam/error requests. On a much bigger site, that sort of math could also be called a dDos, couldn’t it?

Anyway, I realize now that even though I disabled webalizer, I had left the webalizer folder and the old files up on the site. I just deleted that directory so we’ll see if the spammers learn and move on or not.

Oh, by the way, I switched over to StatCounter, a much nicer and less obnoxious counter service.

Tags: ReferrerSpam

Similar Posts

  • Fax Laws

    Interesting article on the latest twist in the fax laws. I’m pretty torn about this issue. As the IT person for a small business I can tell you that trying to prepare for the day when we can’t fax anyone without their written permission has been burdensome, to the point where we probably won’t do…

  • Upgrade

    Just as an FYI, I upgraded the forums to the latest version of Snitz last night. No major improvements on the user’s end, but I was able to get the subscriptions working properly while I was tooling around in the setup! Let me know if you have any diffculty with them. Follow these topics: Uncategorized

  • Added functionality

    I’ve added the “Email this post” function that Blogger has made available to it’s users. I’m not sure I’ll keep it, but I was in the mood to experiment. If you click the little envelope after this post, it’ll bring you to a page on blogger.com that will let you send a message with a…

  • Yeah right..

    You know what would rock? If all those people who get bent out of shape if I take more than 5 minutes to respond to their problems could manage to do something that I ask them to within, say, a week! Alas, it appears that is not going to be the case, so my question…

  • The hardest part to troubleshoot

    So what’s the one piece of tech that gives you most trouble when it comes to finding a solution? For me right now, it’s my home wireless router. I can’t seem to keep my connection for more than 30 minutes or so before it drops. I’ve tried changing channels, WEP settings, moving around the house,…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)