Referrer spam

I had turned off my webalizer stats on this site a long time ago because of the number of spam referrers I was getting, in hopes that they would go away if there were no actual on-line links that they could get a benefit from by spamming my referrer logs, and after that I pretty much haven’t paid any attention to my log files for months.

Well, yesterday I saw a reference to a freeware program called Weblog Expert Lite. Having had a rather serious issue with the Bravenet counter I was using I decided to give it a try and see how it worked. (Not only was the advertising on Bravenet’s site reaching the point of ridiculously intrusive, I actually got prompted to download an install.exe program that AVG identified as a trojan from one of the crappy ads on their site and that was pretty much the end of that.)

Anyway, I went and grabbed the last week’s worth of logs and ran them through the program. I was shocked to discover that the top 25 referrer sites were all spam. In fact, there were over 10,000 404 errors in one week, compared to just over 1000 page loads of the front page of this blog.

So I dug a little deeper, and discovered that, apparently, there is an army of zombie machines at dozens, if not hundreds, of different IP addresses, requesting the archive of this blog from Feb. 10, 2002 with an incorrect file extension. (.htm rather that the correct .html)

So if my math is correct, for every one legitimate request to view the main blog page, there are 10 spam/error requests. On a much bigger site, that sort of math could also be called a dDos, couldn’t it?

Anyway, I realize now that even though I disabled webalizer, I had left the webalizer folder and the old files up on the site. I just deleted that directory so we’ll see if the spammers learn and move on or not.

Oh, by the way, I switched over to StatCounter, a much nicer and less obnoxious counter service.

Tags: ReferrerSpam

Similar Posts

  • Comments spam

    I guess the new addition of the TableEditor turned out to be a double-edged sword last night. Yes, someone did leave a comment that was nothing more than “come visit my blog” with a link, and yes I did delete it. Unfortunately, I also left a comment by Anita that referred to said spam comment,…

  • Stupid websites

    OK here’s the deal. Yesterday, one of the subscription news sites that someone here subscribes to changed the format of their site. This person could no longer log in. They claimed that she must have cookies turned off and that was why. She came screaming to me about turning her cookies off, which I never…

  • Coffee notes

    Here’s the cool thing about Angela getting a Mac. She’s paying for the machine, and I’m getting the opportunity to add to my own tech knowledge by having access to a Mac for next to nothing. I’ve added the Apple Core to my list of Lockergnome subscriptions and added a copy of Troubleshooting, Maintaining, and…

  • Yeah it works

    I was able to finagle my way to a “Well we need to make sure it works so we can send it back” look at my Dell Axim X5, It setup real easy and works really well. I was quite happy with the performance and the simplicity of syncing it with Outlook. Looks like I…

  • Things I’ve noticed

    Just a few things I’ve noticed while catching up with my blogrolls: Brad is trying to get enough money to buy a Mac, and he’s auctioning off some stuff to do it. I liked what Scoble and Doc had to say about the MacWorld news, not because I’m anti-Mac, but because they did a far…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)