My website has malicious code (huge traffic coming in) - Please help!

segitard · Mar 10, 2015

Hello BHW community,

I have been seeing huge traffic coming in from a particular site - http://ads.acesse.com/surf/surf_top.php for a few months now.

When I clicked into the website, it seems to be like advertising website where people get paid for viewing websites for certain period of time.

Is this a malicious code in my website? How can I block traffic from this website permanently?

Please help! Thank you so much!

Nut-Nights · Mar 10, 2015

May be some noob put your website in their site for ddos attack

There is no malicious code in your website according to me. Just send email to that website admin about this issue.

segitard · Mar 10, 2015

Nut-Nights said:
May be some noob put your website in their site for ddos attack There is no malicious code in your website according to me.

Thank you for the help, buddy. How can I make sure these traffic stop coming in?

sergey007 · Mar 10, 2015

You can use .htacess to block the traffic from the website.

nonai · Mar 10, 2015

google "block referral spam htaccess"

mailicreate · Mar 10, 2015

Code:

<?php
$referer = $_server['HTTP_REFERER']; 
if ($referer == '[URL="http://ads.acesse.com/surf/surf_top.php"]http://ads.acesse.com/[/URL]') 
window.location = "http://yourdomain/404page_not_found.php";
endif;
?>

Im a C# developer so there may be a small syntax error somewhere, but this is the php logic to do a redirect from a particular referer.

**Make sure this code is in all your pages EXCEPT 404page_not_found.php.Or simply redirect to google.com.

EDIT:
Worth to check why is traffic coming from that website.
May be a spelling error on the domain url (Pity the guy who bought the traffic).

BHW-News · Mar 10, 2015

http://www.htaccesstools.com/block-ips/

get IP from http://get-site-ip.com/

segitard · Mar 10, 2015

segitard said:
Thank you for the help, buddy. How can I make sure these traffic stop coming in?

sergey007 said:
You can use .htacess to block the traffic from the website.

Thank you guys! So I've found this code:

RewriteCond %{HTTP_REFERER} sitetoblock\.com [NC]
RewriteRule .* - [F,L]

The referrer website is http://ads.acesse.com/surf/surf_top.php

So, is this correct?

RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC]
RewriteRule .* - [F,L]

OR

RewriteCond %{HTTP_REFERER} acesse\.com [NC]
RewriteRule .* - [F,L]

OR

RewriteCond %{HTTP_REFERER} acesse\.com/surf/surf_top.php[NC]
RewriteRule .* - [F,L]

segitard · Mar 10, 2015

Mr Apricot said:
http://www.htaccesstools.com/block-ips/

get IP from http://get-site-ip.com/

Hello Apricot, I've used the tool you gave me but each time I key in the website, it produces different IP address.

For example:

107.21.241.109
54.225.193.5
50.17.254.245

mailicreate · Mar 10, 2015

do a rewrite with acesse\.com as this is the top level domain and it will also block other domains.

segitard said:
Hello Apricot, I've used the tool you gave me but each time I key in the website, it produces different IP address.

For example:

107.21.241.109
54.225.193.5
50.17.254.245

Looks like the website has several subdomains; each hosted on 1 ip. Do a rewrite for all the given IP's

segitard · Mar 10, 2015

mailicreate said:
do a rewrite with acesse\.com as this is the top level domain and it will also block other domains.

Looks like the website has several subdomains; each hosted on 1 ip. Do a rewrite for all the given IP's

Okay, so I've added this into my .htaccess. Is this correct?

## SITE REFERRER BANNING
RewriteCond %{HTTP_REFERER} acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com/surf/surf_top.php [NC]
RewriteRule .* - [F]

segitard · Mar 10, 2015

Okay, I've tried multiple times and I get different ip addresses each time.

54.225.193.5
50.17.254.245
107.21.241.109
54.204.38.53
54.225.140.42

mailicreate · Mar 10, 2015

segitard said:
Okay, so I've added this into my .htaccess. Is this correct?

## SITE REFERRER BANNING
RewriteCond %{HTTP_REFERER} acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com [NC,OR]
RewriteCond %{HTTP_REFERER} ads.acesse\.com/surf/surf_top.php [NC]
RewriteRule .* - [F]

Try this to wildcard and block domains, subdomains etc.

Code:

RewriteEngine on 
RewriteCond%{HTTP_REFERER}^http://([^.]+\.)*[FONT=Verdana]acesse[/FONT]\.com [NC]
RewriteRule(.*) http://www.[FONT=Verdana]acesse[/FONT].com [R=301,L]

segitard · Mar 10, 2015

mailicreate said:
Try this to wildcard and block domains, subdomains etc.

Code:

RewriteEngine on RewriteCond%{HTTP_REFERER}^http://([^.]+\.)*[FONT=Verdana]acesse[/FONT]\.com [NC] RewriteRule(.*) http://www.[FONT=Verdana]acesse[/FONT].com [R=301,L]

That code brought my website to Hostgator 404 right away though.

mailicreate · Mar 10, 2015

BTW why don't you utilize that traffic?

segitard · Mar 10, 2015

mailicreate said:
BTW why don't you utilize that traffic?

How can I utilize the traffic? They are all spammy views from people who view sites for 5 seconds and click next. My site is a service based business in my country. There are no ads or whatsoever. I just think it's harmful for my website.

mailicreate · Mar 10, 2015

segitard said:
That code brought my website to Hostgator 404 right away though.

Try the php redirect instead. Or Ask Hostgator to block that traffic somewhere in their apache config.

mailicreate · Mar 10, 2015

segitard said:
How can I utilize the traffic? They are all spammy views from people who view sites for 5 seconds and click next. My site is a service based business in my country. There are no ads or whatsoever. I just think it's harmful for my website.

"Click here to get 0.50 cents or 10 points" and you have huge CTR on that traffic.. Did something like that with Addmefast traffic. Got them clicking all over my bitvertiser, adsense and PPI pages. Hehehe

blacktrilby · Mar 10, 2015

Would be fun to redirect it back to them

My website has malicious code (huge traffic coming in) - Please help!

Junior Member

Elite Member

Junior Member

Senior Member

BANNED

Junior Member

Super Moderator

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Junior Member

Supreme Member

Main Menu

Marketplace

Making Money

BlackHat World