Alden Bates' Weblog
Feigning normality since 1973
Interesting referrer spam
Filed in: Spam.
I had 4 hits on a page all from the same IP address with completely different user agents. Two of the referrers were of the form http://mail05.abv.bg/app/j/openmessage.jsp - visiting them just resulted in an error, so it's hard to see what use they'd be. The other two were Google searches for "freesmscenter" and for a phrase in Russian. Seems sorta odd to me, seeing as most stats software seems to represent hits from Google searches as just the search text itself. Presumably the spam was promoting the sites at the top of the results for those phrases, but it seems a very roundabout way of doing it...
Posted May 27, 2006 1:39 PM
Comments
The .jsp url was for an online mail service - the error message was because the session in the referrer URL was no longer valid...
Posted by: Alden Bates | May 27, 2006 7:22 PM
First of all, I dont think you can open a jsp file in the conventional form can you? Not through a browser is what I mean.
Maybe they were building something and used your site as an experiment? A text crawler maybe? Perhaps someone sent your site to themselves in the form of an email, and wanted to see if they could get back in another way. (it looks like a mail server). Or maybe some hacker looking into something of you that you cant see? I dont know, it does seem like an odd query to get, I usually get odd things from the bulk ISP providers like UUNET or whatever they are called. Also, some terror groups are beginning to use our ips and what not for activities. You said russian, so maybe some Chechan rebels chose you. Just a thought.
Posted by: mr.denali | May 27, 2006 4:47 PM