WTF 0 - 60,000 uniques in one day? - GoFuckYourself.com

iSpyCams · 07-06-2010, 09:44 AM

I have a tubesite I set up recently, its a legal tube paysite. I have been struggling trying to get traffic for months and only get around 15 hits a day, total of 12 serp results in 3 months.

Yesterday I get 60,000 visits, almost all from the UK with a few from random other countries.

Today I got 50,000 again and its barely 12 o'clock.

WTF is going on? I see in google analytics there are about 4,000 tube sites linking to me but I cant find my link on any of them. Is it an attack, or real traffic?

People are hitting my signup form, signing up for Fling from the banner ad, but i have no idea why so many all at once.

Ideas?

DateDoc · 07-06-2010, 09:48 AM

Are these 4000 tube sites embedding your video or hotlinking it? Though since it is a legal tube you are probably embedding sponsor vids so I guess that wouldn't be it.

Agent 488 · 07-06-2010, 09:50 AM

check your latest referrers.

cybermike · 07-06-2010, 09:50 AM

be happy? heh my legal tube is getting shit from google

iSpyCams · 07-06-2010, 09:52 AM

They are hosted vids that I own the license for. I cant find anything I recognize embedded though. How can I find out exactly what page is linking to me? Seems all I get form google analytics are the domains.

NickB. · 07-06-2010, 10:04 AM

let me know if you need any help thanks

signupdamnit · 07-06-2010, 10:06 AM

Quote:

Originally Posted by pompousjohn

They are hosted vids that I own the license for. I cant find anything I recognize embedded though. How can I find out exactly what page is linking to me? Seems all I get form google analytics are the domains.

Check the raw access logs.

Often under /var/log/httpd/ or other such places depending on the distribution and set up. Hopefully you have Apache configured to report the referrer within the access log. If not, fix it so it does.

Chosen · 07-06-2010, 10:08 AM

What about paid signups?
Got them? If not it's probably hotlinking or kind of attack, don't know for sure...

iSpyCams · 07-06-2010, 10:39 AM

Quote:

Originally Posted by Chosen

What about paid signups?
Got them? If not it's probably hotlinking or kind of attack, don't know for sure...

I got about 80 join hits but no signups, got 14 free signups to Fling on a geo-targetted skyscraper. at least some of the traffic appears to be real humans, I still cant find the referal links that are sending all this traffic though.

I am also getting a lot of type-ins for some reason over 800 of them.

I would love to think this is good news and I did something right, but somehow, I doubt it.

Agent 488 · 07-06-2010, 10:41 AM

probably the feds.

brassmonkey · 07-06-2010, 10:45 AM

Quote:

Originally Posted by Agent 488

probably the feds.

lazycash · 07-06-2010, 10:51 AM

Weird that the majority of the traffic is UK, are your hosted vids watermarked with your url?

Agent 488 · 07-06-2010, 10:59 AM

yeah maybe they showed your url on coronation street.

seeandsee · 07-06-2010, 11:13 AM

somebody is jacking your band

punkpred · 07-06-2010, 11:15 AM

Quote:

Originally Posted by cybermike

be happy? heh my legal tube is getting shit from google

Yeah, no shit congrats mate

iSpyCams · 07-06-2010, 11:52 AM

someday I'll get better at reading logs, but for now it looks like whatever it was, its over. Traffic is back down to its old slowness.

AdPatron · 07-06-2010, 12:11 PM

Install Google Analytics, it will tell you everything.

IllTestYourGirls · 07-06-2010, 12:12 PM

Quote:

Originally Posted by pompousjohn

someday I'll get better at reading logs, but for now it looks like whatever it was, its over. Traffic is back down to its old slowness.

you didnt have a stat tracker installed?

fuzebox · 07-06-2010, 01:12 PM

I was gonna guess that it was embeds as well.

tiger · 07-06-2010, 03:11 PM

Sounds like an embed.

iSpyCams · 07-08-2010, 03:23 PM

OK this is definitely not over, but I did get a paid signup from it now. SO it may not be a bad thing. I am using Barefootsies Mechbunny script and it looks like the inline ads are being passed along with the embed, which I have set yup to provide a Nats join link that goes straight to CCBill and also I have the domain name in the inline ad, so I am getting about 1500 type-ins a day. (I'm up to 300,000 uniques a day now - all USA and Western Europe)

The only thing I don't know is how my bandwidth bill is going to work out. I've used 63 GB in the last 3 days.

Vick! · 07-08-2010, 03:30 PM

you need to hire an intelligent webmaster

PenisFace · 07-08-2010, 03:39 PM

Quote:

Originally Posted by Agent 488

yeah maybe they showed your url on coronation street.

hahahahahah jesus christ, i needed a good laugh, thankyou :P

Nicky · 07-08-2010, 03:41 PM

Quote:

Originally Posted by pompousjohn

The only thing I don't know is how my bandwidth bill is going to work out. I've used 63 GB in the last 3 days.

That's like what? 600gig's in a month? That's absolute peanuts when It comes to BW bill.

halfpint · 07-08-2010, 03:41 PM

When you launch a tube site like that you will get sites like the OV Guide linking to it and a few others which I wont mention. There is another big site which will send you a shit load of hits because it tells people how to download your tube videos and believe me its very popular You will also most prob get a french site which normally links to tube sites and sends you a shit load of french traffic.

The uk traffic im not sure about but I do know that this happens cause I had exactly the same thing when I launched my tube and because its diff/long content it gets picked up a lot quicker

iSpyCams · 07-08-2010, 07:05 PM

Nice. Well I am going to enjoy the traffic then.

lagcam · 07-08-2010, 08:45 PM

Quote:

Originally Posted by halfpint

When you launch a tube site like that you will get sites like the OV Guide linking to it and a few others which I wont mention. There is another big site which will send you a shit load of hits because it tells people how to download your tube videos and believe me its very popular You will also most prob get a french site which normally links to tube sites and sends you a shit load of french traffic.

The uk traffic im not sure about but I do know that this happens cause I had exactly the same thing when I launched my tube and because its diff/long content it gets picked up a lot quicker

Quote:

Originally Posted by pompousjohn

Nice. Well I am going to enjoy the traffic then.

I may be stupid but I don't think Halfpint was giving you good news there?

iSpyCams · 07-19-2010, 07:11 AM

Update:

Well I finally got that sorted, it was a virus on my Windows 7 that ESET did not catch. I changed to Kaspersky which detected there was an issue but did not get rid of it. I side-stepped the issue by switching to my mac for awhile.

The virus used filezilla (I think) to silently upload its payload to any site that was in the site manager.

Once in there it set up its malware thing and a cron job that would rebuild the payload every 10 minutes in case it was taken down.

As soon as the payload was in place I guess the botnet behind the virus sent massive loads of traffic to infect as many browsers as possible. Hence the 300k visits a day.

From the injected php code Konrad, who helped me slay the beast discovered that the hacker uses the handle Fatigue, and that is his login at his stats site, bombastats.com. Looks like he changed his login now though cause it doesn't work any more. There was a stats page in there showing how many browsers he had infected, it looked really nice and professional but I couldn't make out too much because it was all in a Russian-looking alphabet.

Now that the virus is gone, stats have completely normalized. While the attack was going on I got thousands of views on each of my videos, 2 paid signups and a paid join on Fling.

I really hope that this virus traffic is just really low quality because I hate to think that with almost exactly 1 million unique visits I would make less than $100. I am guessing targeted traffic would be worth more.

Ninja Scripts · 07-19-2010, 07:18 AM

I can't imagine traffic to a free video site being so horrible. I mean when I want an Xbox 360 my first stop is the free Xbox 360 website but I still plan to buy someday.

iSpyCams · 07-19-2010, 07:31 AM

Quote:

Originally Posted by Ninja Scripts

I can't imagine traffic to a free video site being so horrible. I mean when I want an Xbox 360 my first stop is the free Xbox 360 website but I still plan to buy someday.

It's a paysite.

signupdamnit · 07-19-2010, 08:10 AM

It's getting very difficult to secure a Windows system these days using a conventional set up. Even if you keep one or two anti-malware utilities updated and set them to scan each night you're still at risk. Imagine if the malware author had made his code more intelligent so that it did not tip you off so much by the abnormal traffic. He might still have free run on your server.

Raf1 · 07-19-2010, 08:11 AM

good thing you got the answer now. That load was definitely not normal.

iSpyCams · 07-19-2010, 09:00 AM

Quote:

Originally Posted by signupdamnit

It's getting very difficult to secure a Windows system these days using a conventional set up. Even if you keep one or two anti-malware utilities updated and set them to scan each night you're still at risk. Imagine if the malware author had made his code more intelligent so that it did not tip you off so much by the abnormal traffic. He might still have free run on your server.

Yeah, actually it was google reporting it as an attack site that tipped me off. If it had not been for that I would have never known.

Stephen · 07-19-2010, 09:04 AM

Quote:

Originally Posted by signupdamnit

Imagine if the malware author had made his code more intelligent so that it did not tip you off so much by the abnormal traffic. He might still have free run on your server.

I think a lot of site owners don't understand how serious the threats are...

Quote:

Originally Posted by pompousjohn

Yeah, actually it was google reporting it as an attack site that tipped me off. If it had not been for that I would have never known.

They let me know too, once upon a time. Get in the habit of viewing the source code of several of your pages each day (not your local dev copies, but view source of the live pages) to see if there is anything in there that shouldn't be.

07-06-2010, 09:44 AM	#1
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	WTF 0 - 60,000 uniques in one day? I have a tubesite I set up recently, its a legal tube paysite. I have been struggling trying to get traffic for months and only get around 15 hits a day, total of 12 serp results in 3 months. Yesterday I get 60,000 visits, almost all from the UK with a few from random other countries. Today I got 50,000 again and its barely 12 o'clock. WTF is going on? I see in google analytics there are about 4,000 tube sites linking to me but I cant find my link on any of them. Is it an attack, or real traffic? People are hitting my signup form, signing up for Fling from the banner ad, but i have no idea why so many all at once. Ideas?

07-06-2010, 09:48 AM	#2
DateDoc Outside looking in. Industry Role: Join Date: Feb 2005 Location: To Hell You Ride Posts: 14,243	Are these 4000 tube sites embedding your video or hotlinking it? Though since it is a legal tube you are probably embedding sponsor vids so I guess that wouldn't be it. __________________

07-06-2010, 09:50 AM	#4
cybermike Confirmed User Join Date: Jan 2002 Location: Ny Posts: 4,109	be happy? heh my legal tube is getting shit from google __________________ Hey surfers how about some The Best Porn Sites

07-06-2010, 10:51 AM	#12
lazycash Troll Patrol Industry Role: Join Date: Aug 2002 Location: Local Socal Posts: 15,214	Weird that the majority of the traffic is UK, are your hosted vids watermarked with your url? __________________ "WTF, on google you can find the answer to every question in human history, EXCEPT how to convert cams.. Its crazy..." VenusBlogger

07-06-2010, 11:13 AM	#14
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	somebody is jacking your band __________________ BUY MY SIG - 50$/Year Contact here

07-06-2010, 09:50 AM	#3
Agent 488 Registered User Industry Role: Join Date: Feb 2006 Posts: 22,511	check your latest referrers.

07-06-2010, 09:52 AM	#5
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	They are hosted vids that I own the license for. I cant find anything I recognize embedded though. How can I find out exactly what page is linking to me? Seems all I get form google analytics are the domains.

07-06-2010, 10:04 AM	#6
NickB. Confirmed User Industry Role: Join Date: Aug 2001 Posts: 8,855	let me know if you need any help thanks

07-06-2010, 10:08 AM	#8
Chosen VIPPay.com \| AdultWebSponsors.com Industry Role: Join Date: Aug 2001 Posts: 63,151	What about paid signups? Got them? If not it's probably hotlinking or kind of attack, don't know for sure...

07-06-2010, 10:41 AM	#10
Agent 488 Registered User Industry Role: Join Date: Feb 2006 Posts: 22,511	probably the feds.

07-06-2010, 10:59 AM	#13
Agent 488 Registered User Industry Role: Join Date: Feb 2006 Posts: 22,511	yeah maybe they showed your url on coronation street.

07-06-2010, 11:52 AM	#16
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	someday I'll get better at reading logs, but for now it looks like whatever it was, its over. Traffic is back down to its old slowness.

07-06-2010, 12:11 PM	#17
AdPatron No commissions, no fees. Industry Role: Join Date: Apr 2003 Location: USA Posts: 17,706	Install Google Analytics, it will tell you everything.

07-06-2010, 01:12 PM	#19
fuzebox making it rain Industry Role: Join Date: Oct 2003 Location: seattle Posts: 22,038	I was gonna guess that it was embeds as well.

07-06-2010, 03:11 PM	#20
tiger Confirmed User Industry Role: Join Date: Apr 2002 Location: Los Angeles Posts: 6,986	Sounds like an embed. __________________

07-08-2010, 03:23 PM	#21
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	OK this is definitely not over, but I did get a paid signup from it now. SO it may not be a bad thing. I am using Barefootsies Mechbunny script and it looks like the inline ads are being passed along with the embed, which I have set yup to provide a Nats join link that goes straight to CCBill and also I have the domain name in the inline ad, so I am getting about 1500 type-ins a day. (I'm up to 300,000 uniques a day now - all USA and Western Europe) The only thing I don't know is how my bandwidth bill is going to work out. I've used 63 GB in the last 3 days.

07-08-2010, 03:30 PM	#22
Vick! Confirmed User Industry Role: Join Date: Nov 2005 Location: 20 00'24.00" N, 75 09'00.00 W Posts: 6,882	you need to hire an intelligent webmaster __________________ Affordable Quality Web Hosting

07-08-2010, 03:41 PM	#25
halfpint GFY's Halfpint Industry Role: Join Date: Jun 2007 Location: UK Posts: 15,223	When you launch a tube site like that you will get sites like the OV Guide linking to it and a few others which I wont mention. There is another big site which will send you a shit load of hits because it tells people how to download your tube videos and believe me its very popular You will also most prob get a french site which normally links to tube sites and sends you a shit load of french traffic. The uk traffic im not sure about but I do know that this happens cause I had exactly the same thing when I launched my tube and because its diff/long content it gets picked up a lot quicker __________________ Get FREE website listings on Cryptocoinshops.net

07-08-2010, 07:05 PM	#26
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	Nice. Well I am going to enjoy the traffic then.

07-19-2010, 07:11 AM	#28
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	Update: Well I finally got that sorted, it was a virus on my Windows 7 that ESET did not catch. I changed to Kaspersky which detected there was an issue but did not get rid of it. I side-stepped the issue by switching to my mac for awhile. The virus used filezilla (I think) to silently upload its payload to any site that was in the site manager. Once in there it set up its malware thing and a cron job that would rebuild the payload every 10 minutes in case it was taken down. As soon as the payload was in place I guess the botnet behind the virus sent massive loads of traffic to infect as many browsers as possible. Hence the 300k visits a day. From the injected php code Konrad, who helped me slay the beast discovered that the hacker uses the handle Fatigue, and that is his login at his stats site, bombastats.com. Looks like he changed his login now though cause it doesn't work any more. There was a stats page in there showing how many browsers he had infected, it looked really nice and professional but I couldn't make out too much because it was all in a Russian-looking alphabet. Now that the virus is gone, stats have completely normalized. While the attack was going on I got thousands of views on each of my videos, 2 paid signups and a paid join on Fling. I really hope that this virus traffic is just really low quality because I hate to think that with almost exactly 1 million unique visits I would make less than $100. I am guessing targeted traffic would be worth more.

07-19-2010, 07:18 AM	#29
Ninja Scripts Confirmed User Industry Role: Join Date: Jul 2005 Location: Retired Posts: 1,032	I can't imagine traffic to a free video site being so horrible. I mean when I want an Xbox 360 my first stop is the free Xbox 360 website but I still plan to buy someday.

07-19-2010, 08:10 AM	#31
signupdamnit Confirmed User Industry Role: Join Date: Aug 2007 Posts: 6,697	It's getting very difficult to secure a Windows system these days using a conventional set up. Even if you keep one or two anti-malware utilities updated and set them to scan each night you're still at risk. Imagine if the malware author had made his code more intelligent so that it did not tip you off so much by the abnormal traffic. He might still have free run on your server.

07-19-2010, 08:11 AM	#32
Raf1 Too lazy to set a custom title Join Date: Oct 2003 Location: Writer for hire :) Gallery descriptions, articles, blog posts etc. ICQ: 209 356 106 Posts: 12,117	good thing you got the answer now. That load was definitely not normal. __________________ 80% Revshare or 30$ PPS on $1 trials: 200 Niches = Vidz.com Galleries / FLVs / Embeds 3 & 5mins FLVs \| RSS & Tube Feeds \| Matching Thumbs \| FLV Browser & Exporter \| No Prechecked Xsales >> Mobile Redirection Script: mobile.vidz.com also paying 80% net Lifetime << ICQ: 198-394-557