My website has malicious code (huge traffic coming in) - Please help!

[segitard]

Hello BHW community,

I have been seeing huge traffic coming in from a particular site - http://ads.acesse.com/surf/surf_top.php for a few months now.

When I clicked into the website, it seems to be like advertising website where people get paid for viewing websites for certain period of time.

Is this a malicious code in my website? How can I block traffic from this website permanently?

Please help! Thank you so much!

 

[Nut-Nights]

May be some noob put your website in their site for ddos attack There is no malicious code in your website according to me. Just send email to that website admin about this issue.

 

[segitard]

May be some noob put your website in their site for ddos attack There is no malicious code in your website according to me.

Thank you for the help, buddy. How can I make sure these traffic stop coming in?

 

[sergey007]

You can use .htacess to block the traffic from the website.

 

[nonai]

google "block referral spam htaccess"

 

[mailicreate]

<?php
$referer = $_server['HTTP_REFERER']; 
if ($referer == '[URL="http://ads.acesse.com/surf/surf_top.php"]http://ads.acesse.com/[/URL]') 
window.location = "http://yourdomain/404page_not_found.php";
endif;
?>

Im a C# developer so there may be a small syntax error somewhere, but this is the php logic to do a redirect from a particular referer.

**Make sure this code is in all your pages EXCEPT 404page_not_found.php.Or simply redirect to google.com.


EDIT:
Worth to check why is traffic coming from that website.
May be a spelling error on the domain url (Pity the guy who bought the traffic).

 

[BHW-News]

http://www.htaccesstools.com/block-ips/


get IP from http://get-site-ip.com/

 

[segitard]

Thank you for the help, buddy. How can I make sure these traffic stop coming in?

You can use .htacess to block the traffic from the website.

Thank you guys! So I've found this code:

RewriteCond %{HTTP_REFERER} sitetoblock\.com [NC]
RewriteRule .* - [F,L]

The referrer website is http://ads.acesse.com/surf/surf_top.php

So, is this correct?

RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC]
RewriteRule .* - [F,L]


OR

RewriteCond %{HTTP_REFERER} acesse\.com [NC]
RewriteRule .* - [F,L]

OR

RewriteCond %{HTTP_REFERER} acesse\.com/surf/surf_top.php[NC]
RewriteRule .* - [F,L]

 

[segitard]

http://www.htaccesstools.com/block-ips/


get IP from http://get-site-ip.com/

Hello Apricot, I've used the tool you gave me but each time I key in the website, it produces different IP address.

For example:

107.21.241.109
54.225.193.5
50.17.254.245

 

[mailicreate]

do a rewrite with acesse\.com as this is the top level domain and it will also block other domains.

Hello Apricot, I've used the tool you gave me but each time I key in the website, it produces different IP address.

For example:

107.21.241.109
54.225.193.5
50.17.254.245

Looks like the website has several subdomains; each hosted on 1 ip. Do a rewrite for all the given IP's

 

[segitard]

do a rewrite with acesse\.com as this is the top level domain and it will also block other domains.



Looks like the website has several subdomains; each hosted on 1 ip. Do a rewrite for all the given IP's

Okay, so I've added this into my .htaccess. Is this correct?

## SITE REFERRER BANNING
RewriteCond %{HTTP_REFERER} acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com/surf/surf_top.php [NC]
RewriteRule .* - [F]

 

[segitard]

Okay, I've tried multiple times and I get different ip addresses each time.

54.225.193.5
50.17.254.245
107.21.241.109
54.204.38.53
54.225.140.42

 

[mailicreate]

Okay, so I've added this into my .htaccess. Is this correct?

## SITE REFERRER BANNING
RewriteCond %{HTTP_REFERER} acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com/surf/surf_top.php [NC]
RewriteRule .* - [F]

Try this to wildcard and block domains, subdomains etc.

RewriteEngine on 
RewriteCond%{HTTP_REFERER}^http://([^.]+\.)*[FONT=Verdana]acesse[/FONT]\.com [NC]
RewriteRule(.*) http://www.[FONT=Verdana]acesse[/FONT].com [R=301,L]

 

[segitard]

Try this to wildcard and block domains, subdomains etc.

RewriteEngine on 
RewriteCond%{HTTP_REFERER}^http://([^.]+\.)*[FONT=Verdana]acesse[/FONT]\.com [NC]
RewriteRule(.*) http://www.[FONT=Verdana]acesse[/FONT].com [R=301,L]

That code brought my website to Hostgator 404 right away though.

 

[mailicreate]

BTW why don't you utilize that traffic?

 

[segitard]

BTW why don't you utilize that traffic?

How can I utilize the traffic? They are all spammy views from people who view sites for 5 seconds and click next. My site is a service based business in my country. There are no ads or whatsoever. I just think it's harmful for my website.

 

[mailicreate]

That code brought my website to Hostgator 404 right away though.

Try the php redirect instead. Or Ask Hostgator to block that traffic somewhere in their apache config.

 

[mailicreate]

How can I utilize the traffic? They are all spammy views from people who view sites for 5 seconds and click next. My site is a service based business in my country. There are no ads or whatsoever. I just think it's harmful for my website.

"Click here to get 0.50 cents or 10 points" and you have huge CTR on that traffic.. Did something like that with Addmefast traffic. Got them clicking all over my bitvertiser, adsense and PPI pages. Hehehe

 

[blacktrilby]

Would be fun to redirect it back to them