100's of referrals coming from my own domain??

Discussion in 'Hosting Services / Control Panel' started by strefethen, Jan 3, 2008.

Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.
  1. I've been reviewing the logs from my blog engine and recently I've noticed a pattern of 100's of incoming referrals that are coming from mydomain.com. These referrals are coming in, in groups with mulitple hits over just a few minutes. Most of the IP addresses resolve to dynamic addresses coming from *.telecomitalia.it.

    I have never referred to my domain without a prefix and I'm puzzled as to where these requests are coming from?

    Over last several days I've been getting several hundred hits all with this same pattern.

    Is there anything I can do? Can I somehow block telecomitalia.it?

    Thanks
    -Steve
     
  2. Bruce

    Bruce DiscountASP.NET Staff

    >I have never referred to my domain without a prefix and I'm puzzled as to where these requests are coming from?

    Your site should be configured to handle www. or without www. If the user access your site w/o the www, then if the link is back to your site, the referrer will be your domain without the www.

    >Is there anything I can do? Can I somehow block telecomitalia.it?

    I think they are a pretty big ISP in europe. I don't think you should block it unless the are sure that the traffic is illegit.

    Bruce

    DiscountASP.NET
    www.DiscountASP.NET
     
  3. mjp

    mjp

    I have seen similar stats when a popular site is leeching an image or some other media from a site. The referrals will likely die down eventually.


    mjp
    ---
    DiscountASP.NET
     
  4. Yup, www.fark.com users, among others of course,inadvertently do that to sites all the time.
     
  5. Bruce

    Bruce DiscountASP.NET Staff

    I doubt that this is any type of attack because of the volumn of the hit.


    You get at least several hundred thousand request if your site is getting DOS. In addition, DOS usually comes in a burst rather than slowly build up.


    Bruce

    DiscountASP.NET
    www.DiscountASP.NET
     
  6. Thanks for the replies guys. Since I don't know the actually referring site I get the feeling that the traffic is not legit especially considering I'm seeing several 100 a day. As perhaps a related note I've been seeing 1-2 referrals from some porn sites (like http://xxxsexybabes.info/) which I don't understand either but both seemed to show up at roughly the same time.

    My initial concern was whether or not this could be some sort of growing DOS attack?

    -Steve
     
Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.

Share This Page