View Single Post
Old 2004-12-13, 08:04 PM   #1
elmister
Banned
 
Join Date: Jun 2004
Location: Spain (Europe)
Posts: 12
Send a message via ICQ to elmister
xxx-plaza.net sends fake traffic

Don't trade with xxx-plaza.net
after signing up in his ucj, i started to receive strange traffic. Apache logs showed this

218.2.2.153 - - [30/Nov/2004:11:13:57 +0000] "GET / HTTP/1.1" 200 29285 "http://
www.xxx-plaza.net/index.shtml\r" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98;
Win 9x 4.90)" -

first, the referer with that strange "\r" at the end.
the visitor doesn't load graphics

then, a click to out.cgi link of my site.
About 150 visitors doing exactly the same, all with the same user-agent, the same "\r" in the referer and click one of the links. After i redirected his visitors to load a different page in another domain, i started to get clicks in the same domain for urls on the other domains (were relative links, his hitbot is not perfect and didn't notice he was redirected to another domain)
elmister is offline   Reply With Quote