My Websites Spammed?

[axel]

Hi all,

I'm checking my access logs daily and since the beginning of the month a lot of them are full with links from dodgy sites: (for example)

1hydrocodone.v33.org (167)
1phentermine.v33.org (157)
phentermine.4u.ru (125)
online-phentermine.7h.com (111)
airline-tickets.7h.com (110)
casino-gaming.7h.com (105)
1hydrocodone.dk3.com (54)
1phentermine.dk3.com (50)
tramadol.macvillage.net (46)
phentermine.4-all.org (43)
etc...

Any idea why this is happening? Does anybody else share this problem?

MTIA

Axel.

[jetzkr8]

Mysteries of the web ~ Log file deciphering. I am also interested to know why this sort of things happen. SO here is my bump for this thread!

[awen]

take a look at those sites and see if they might be scamming your images or content.

Are you running any kind of advertising, like Google's AdWords where your ads may be getting posted on those sites and they're running them up to get your money?

[axel]

Thanks for the tip. I'll investigate.

Don't do adWords myself although I show some on my sites.

Axel.

[axel]

Bizarre, I have tried to find links to my site originating from their websites and checked them to see whether they carry any of my content (hotlinking) to no avail.

They are either not working or are just keyword spam sites.

How do I find out more about why they are in my logs? MTIA

Axel

[axel]

Got it! Google for "referrer spam" and read this very eye-opening article:

http://www.spywareinfo.com/articles/referer_spam/

Hope this helps anybody with a similar problem

Axel.

[soky]

Originally Posted by axel

Got it! Google for "referrer spam" and read this very eye-opening article:

http://www.spywareinfo.com/articles/referer_spam/

Hope this helps anybody with a similar problem

Axel.

Yes, that was interesting!

Q? Can the "dirs" file (Windows accounts) accomplish the same as HTAccess? At least as far as referers?

I have used the global.asa file to accomplish some of the methods however, each request still gets logged.

[axel]

Don't see a reason why not. Apparently it works using ISAPI_Rewrite:

Originally Posted by http://www.spywareinfo.com/articles/referer_spam/

A reader has written in to say that ISAPI_Rewrite can make these techniques work on some IIS servers. You will need to have your host install it for you if you are on shared hosting.

BTW If you are using Serendipity CMS/Blog, check out the anti-spam/blacklist plug-ins too.

PS: My own referrer-spam blacklist can be found on my blog now.

Axel.