PPC SE Referrer Spoofing
I have been getting hits from affiliate(s) of PPC engines that send fake referrer information.
I added a simple stats program which of course can be seen with the server logs, and while viewing these logs I see the following:
These hits are coming from several domains and use various well known engines from MSN to Yahoo and Google. They never seem to make it past the index page(imagine that)
Just a heads up for those that care.
I added a simple stats program which of course can be seen with the server logs, and while viewing these logs I see the following:
Host: 65.11.223.54 /
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 5874
Referer: http://lastxdoor.com/search.php?q=term%20here
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/css/table.css
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 2557
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/count/ax.pl?mode=img&ref=http%3A//www.google.com/search%3Fhl%3Den%26q%3Dterm+here
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 54
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/my-logo.gif
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 13026
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 5874
Referer: http://lastxdoor.com/search.php?q=term%20here
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/css/table.css
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 2557
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/count/ax.pl?mode=img&ref=http%3A//www.google.com/search%3Fhl%3Den%26q%3Dterm+here
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 54
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
/my-logo.gif
Http Code: 200 Date: Nov 15 14:58:33 Http Version: HTTP/1.1 Size in Bytes: 13026
Referer: http://www.mydomain.com/
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Just a heads up for those that care.
Spoofing sucks. 
Comment