Who wants all mediaset traffic? All 20+million daily hits. Going to the highest bidder.... - GoFuckYourself.com

borked · 04-15-2012, 12:11 PM

It's in the title....
The traffic won't last long, but you can be the proud owner of all *.mediaset.it traffic to redirect to where you wish....

from wikipedia:

Quote:

Mediaset S.p.A., known as Gruppo Mediaset in Italian, is an Italian-based mass media company which is the largest commercial broadcaster in the country. Founded in the 1970s by former Italian prime minister Silvio Berlusconi and still controlled today with a 38.6% stake by his family holding company Fininvest, the group competes primarily against the public broadcaster and market leader RAI, La7, and News Corporation's Sky Italia.

The dumb fucks are crippling me flooding me with 20million+ daily hits - all javascript.
I've written to them to tell them their use is outside geoplugin's AUP for javascript, but no reply. This has been going on for 7 days now and it's pissing me off. Even canning the requests as 403's (HTML reply "403") is sucking up resources.... I'm doing ok pushing ~20milliong lookups, but this extra surge pushing 40-50million is crippling the service.

So, you can have all the italian eyes if you want... I've told them they are breaching the AUP and the AUP states the javascript plugin can do what it sees fit with traffic not abiding by the AUP, so if you want, I can capture the hit and redirect it to you. Tested on my own IP - I can hit eg http://www.tgcom24.mediaset.it/cottoemangiato/ and redirect myself to google.it via my service...

It clearly won't last long, but it's yours if you bid nice

Klen · 04-15-2012, 01:02 PM

Wait,they hotlink your javascript or ?

borked · 04-15-2012, 01:14 PM

They use a free API to geolocate their visitors. Except their excessive use is way outside the AUP.... I've tried to contact them to no avail. Their geolocation is currently 403'ing to reduce load on my servers.

Since the javascript call cannot be canned by the firewall, the AUP clearly states:

Quote:

For users of the javascript webservice that bypass server identification, blacklisting means we reserve the right to change the output of the javascript to offset our costs, or refuse service completely, at our discretion. Users of this javascript service to geotarget advert-networks are particularly invited to contact us, since ad-network distribution put large stress on the servers due to the shear volume of hits they receive.

So, at my discretion, I'm offering up all these hits. You can use to hijack the window.href if you wish and control all of mediaset's traffic....

borked · 04-15-2012, 01:17 PM

from their actual page of loaded javascript, tested by hijacking my IP:

Code:

http://www.tgcom24.mediaset.it/cottoemangiato/
http://www.geoplugin.net/javascript.gp

<html>
<head>
<SCRIPT LANGUAGE="JavaScript">
document.location.href="http://google.it/"
</SCRIPT>
</head>
</html>

http://www.tgcom24.mediaset.it/include/js/jquery-min.js

/*!
 * jQuery JavaScript Library v1.4.3
 * http://jquery.com/
 *
 * Copyright 2010, John Resig
 * Dual licensed under the MIT or GPL Version 2 licenses.
 * http://jquery.org/license
......

You get the idea...

LeRoy · 04-15-2012, 01:17 PM

Mucho traffic

jigg · 04-15-2012, 01:18 PM

sell it to a broker

borked · 04-15-2012, 01:20 PM

Quote:

Originally Posted by LeRoy

Mucho traffic

indeede (or should that be indeedo?)

as I'm 403'ing it, I may as well be 301'ing it....

Code:

84.221.158.81 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139379 HTTP/1.1" 200 321 "http://www.video.mediaset.it/video/tgcom24/ultimi_arrivi/296818/morte-morosini-il-cardiologo-parla-a-tgcom24.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.162 Safari/535.19"
31.189.52.121 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521221955 HTTP/1.1" 200 331 "http://www.sportmediaset.mediaset.it/calcio/milan/articoli/1841/maldini-pirloavrebbe-dato-tanto.shtml?refresh_cens" "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.44 Safari/534.7"
93.145.140.15 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521126644 HTTP/1.1" 200 326 "http://www.striscialanotizia.mediaset.it/videogallery/videogallery_spetteguless.shtml" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.52.7 (KHTML, like Gecko) Version/5.1.2 Safari/534.52.7"
2.37.91.8 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521138699 HTTP/1.1" 200 329 "http://www.video.mediaset.it/programma/domenica_5/domenica-cinque.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.162 Safari/535.19"
151.74.220.25 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521140012 HTTP/1.1" 200 323 "http://www.video.mediaset.it/ipad/" "Mozilla/5.0 (iPad; U; CPU OS 4_3_5 like Mac OS X; it-it) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8L1 Safari/6533.18.5"
87.8.136.21 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334607817138 HTTP/1.1" 200 337 "http://www.sportmediaset.mediaset.it/mercato/mercato/articoli/11787/pillole-di-calciomercato.shtml?refresh_cens" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.162 Safari/535.19"
95.235.121.245 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521137831 HTTP/1.1" 200 326 "http://www.sportmediaset.mediaset.it/?refresh_ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/534.52.7 (KHTML, like Gecko) Version/5.1.2 Safari/534.52.7"
2.226.240.68 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 321 "http://www.tgcom24.mediaset.it/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.3; EasyBits GO v1.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; msn OptimizedIE8;ITIT)"
82.88.1.205 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139452 HTTP/1.1" 200 323 "http://www.mariadefilippi.mediaset.it/amici/allievi-2011-2012/personaggi.shtml" "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B176 Safari/7534.48.3"
87.7.127.1 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139477 HTTP/1.1" 200 325 "http://video.mediaset.it/?refresh_ce" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.152 Safari/535.19"
95.239.4.63 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139271 HTTP/1.1" 200 323 "http://www.video.mediaset.it/ricerca/ricerca.shtml?q=uomini%20e%20donne&scope=www.videomediaset.it&sort=date&numPage=50" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.37 Safari/530.5"
151.48.211.122 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521141523 HTTP/1.1" 200 322 "http://www.mariadefilippi.mediaset.it/maria-de-filippi/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; MS-RTC LM 8; InfoPath.3)"
2.224.17.52 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521116751 HTTP/1.1" 200 325 "http://www.sportmediaset.mediaset.it/altrisport/tennis/articoli/80552/wta-barcellona-trionfa-la-errani.shtml" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; BRI/2; InfoPath.1; .NET4.0C; FunWebProducts)"
87.9.214.42 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521131881 HTTP/1.1" 200 326 "http://www.video.mediaset.it/video/scherziaparte/scherzi/295693/roberto-castelli---veladoiolavela.html?$p=autoplay$i=1$n=1$ck=YXV0b3N3aXRjaCwxLDAsMTIsMjAwLDI5NTY5NyxzY2hlcnppYXBhcnRlLGNsaXAs" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.152 Safari/535.19"
79.53.144.183 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 323 "http://www.tgcom24.mediaset.it/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)"
151.16.89.242 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 320 "http://www.tgcom24.mediaset.it/televisione/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.152 Safari/535.19"
151.80.71.109 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521141962 HTTP/1.1" 200 319 "http://www.mariadefilippi.mediaset.it/amici/allievi-2002-2003/personaggi.shtml" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.152 Safari/535.19"
93.146.105.55 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521128364 HTTP/1.1" 200 324 "http://www.sportmediaset.mediaset.it/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)"
87.8.69.50 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 330 "http://www.tgcom24.mediaset.it/televisione/" "Mozilla/5.0 (Windows NT 6.0; rv:11.0) Gecko/20100101 Firefox/11.0"
178.196.47.100 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 324 "http://www.tgcom24.mediaset.it/?refresh_ce" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
87.8.129.30 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521112408 HTTP/1.1" 200 322 "http://www.video.mediaset.it/video/giffoni/canale_5/236235/mercoledi-20-luglio.html" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_2_1 like Mac OS X; it-it) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5"
93.48.45.52 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 336 "http://www.tgcom24.mediaset.it/" "Opera/9.80 (Windows NT 5.1; U; it) Presto/2.10.229 Version/11.62"
79.23.127.11 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521138606 HTTP/1.0" 200 977 "http://www.video.mediaset.it/video/iene/puntata/296098/golia-assicurazione-che-non-paga.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
87.10.239.254 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139471 HTTP/1.1" 200 319 "http://www.tgcom24.mediaset.it/televisione/articoli/1043055/beautiful-che-passione-lesbo!.shtml" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B176 Safari/7534.48.3"
66.92.170.214 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp HTTP/1.1" 200 322 "http://www.tgcom24.mediaset.it/?refresh_ce" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.162 Safari/535.19"
31.190.118.8 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521139789 HTTP/1.1" 200 303 "http://www.video.mediaset.it/programma/scherziaparte/scherzi-a-parte.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; GTB7.3; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET4.0C; BRI/2)"
151.40.248.204 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521135884 HTTP/1.1" 200 325 "http://www.sportmediaset.mediaset.it/specialecalcio/live/liga.shtml?refresh_cens" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAAU; .NET4.0C; BRI/2; AskTbORJ/5.14.1.20007)"
87.21.183.190 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521140050 HTTP/1.1" 200 321 "http://www.sportmediaset.mediaset.it/calcio/juventus/articoli/1839/del-piero-juve-divorzio-vicino.shtml?refresh_cens" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
93.36.208.214 - - [15/Apr/2012:22:08:57 +0200] "GET /javascript.gp?_=1334521115305 HTTP/1.1" 200 324 "http://www.video.mediaset.it./ricerca/ricerca.shtml?q=uomini%20e%20donne&dtrange=20120409-20120415&section=uominiedonne&scope=www.videomediaset.it&sort=date&numPage=1" "Mozilla/5.0 (Windows NT 6.0; rv:11.0) Gecko/20100101 Firefox/11.0"

[root@admin logs]# date
Sun Apr 15 22:09:01 CEST 2012

CyberHustler · 04-15-2012, 01:21 PM

borked · 04-15-2012, 01:23 PM

Quote:

Originally Posted by jigg

sell it to a broker

hence the thread

All I will do is add in a redirect to the URL of buyer's choice. No more processing my side - a simple redirect of javascript traffic to user's choice. Can be tested on buyer's IP before going live, but I've hijacked my own IP in tests...

borked · 04-15-2012, 01:26 PM

Some people *really* are stupid... I mean, ok, cloud hosting - no install of maxmind, cell phone apps, the same, but put the biggest Italian media company's websites at the discretion of a 3rd party you know nothing about.... the mind really does fucking boggle.

Nicky · 04-15-2012, 01:39 PM

Quote:

Originally Posted by borked

Some people *really* are stupid... I mean, ok, cloud hosting - no install of maxmind, cell phone apps, the same, but put the biggest Italian media company's websites at the discretion of a 3rd party you know nothing about.... the mind really does fucking boggle.

insane

asdasd · 04-15-2012, 01:54 PM

I'll try "your" traffic.

jigg · 04-15-2012, 01:59 PM

Quote:

Originally Posted by borked

Some people *really* are stupid... I mean, ok, cloud hosting - no install of maxmind, cell phone apps, the same, but put the biggest Italian media company's websites at the discretion of a 3rd party you know nothing about.... the mind really does fucking boggle.

big corporations

my boyfriend worked for one that had no backup copies of their databases and for another who had no backup servers, when the servers went so did everything, customer facing properties included. They had to tell people to wait or fax info in lol

SPP · 04-15-2012, 02:03 PM

Quote:

Originally Posted by borked

It's in the title....
The traffic won't last long, but you can be the proud owner of all *.mediaset.it traffic to redirect to where you wish....

from wikipedia:

The dumb fucks are crippling me flooding me with 20million+ daily hits - all javascript.
I've written to them to tell them their use is outside geoplugin's AUP for javascript, but no reply. This has been going on for 7 days now and it's pissing me off. Even canning the requests as 403's (HTML reply "403") is sucking up resources.... I'm doing ok pushing ~20milliong lookups, but this extra surge pushing 40-50million is crippling the service.

So, you can have all the italian eyes if you want... I've told them they are breaching the AUP and the AUP states the javascript plugin can do what it sees fit with traffic not abiding by the AUP, so if you want, I can capture the hit and redirect it to you. Tested on my own IP - I can hit eg http://www.tgcom24.mediaset.it/cottoemangiato/ and redirect myself to google.it via my service...

It clearly won't last long, but it's yours if you bid nice

just writing you an email

epitome · 04-15-2012, 04:34 PM

Cam white label.

papill0n · 04-15-2012, 10:09 PM

send here for big lulz http://www.redpancake.net/

~Ray · 04-16-2012, 05:31 AM

what's the highest bid?

~Ray
www.hardlinks.org

EddyTheDog · 04-16-2012, 05:39 AM

I didn't know that site was yours....

Hope you didn't mind me posting that little script here that used your API - I would have asked if I had known it was you....

u-Bob · 04-16-2012, 05:39 AM

If you have any idea what the IPs are of the people running the site, be sure to exclude those form your redirect

borked · 04-16-2012, 08:50 AM

Quote:

Originally Posted by EddyTheDog

I didn't know that site was yours....

Hope you didn't mind me posting that little script here that used your API - I would have asked if I had known it was you....

Hi Eddy - nope, that's no problem at all. The service is there for free to all to be used... but doubling the number of requests like mediaset are doing is hmmm, abuse!

Anyway, I've had quite a few hit me up with feedback on this and it's calmed me down from furious, to quite positive!

So, I'm going to get creative with the traffic.... First off is to put it on its own server so it can't bring down the primary service (which it keeps doing at peak periods, like now), then get creative... pure targeted mainstream IT traffic.

So if you want mainstream Italian ads, hit me up.

MaDalton · 04-16-2012, 10:11 AM

it's Berlusconis company, redirect it to some escort sites. he has a lot of free time now

04-15-2012, 01:17 PM	#5
LeRoy Porn Pusher Industry Role: Join Date: Jul 2007 Location: It's a dry heat Posts: 13,336	Mucho traffic __________________ JAPANESE CAMS AND CONTENT SITES Skype - leroy.rowland2

04-15-2012, 01:26 PM	#10
borked Totally Borked Industry Role: Join Date: Feb 2005 Posts: 6,284	Some people really are stupid... I mean, ok, cloud hosting - no install of maxmind, cell phone apps, the same, but put the biggest Italian media company's websites at the discretion of a 3rd party you know nothing about.... the mind really does fucking boggle. __________________ For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202

04-15-2012, 01:54 PM	#12
asdasd So Fucking Banned Industry Role: Join Date: Feb 2005 Posts: 1,225	I'll try "your" traffic. Last edited by asdasd; 04-15-2012 at 01:56 PM..

04-16-2012, 05:31 AM	#17
~Ray visit hardlinks.org Industry Role: Join Date: Jun 2003 Location: Las Vegas , Nv >>> [email protected] or icq 94994627 anytime Posts: 18,362	what's the highest bid? ~Ray www.hardlinks.org __________________ Adult Backlinks for Adult Websites - Testimonials Available

04-16-2012, 05:39 AM	#18
EddyTheDog Just Doing My Own Thing Industry Role: Join Date: Jan 2011 Location: London, Spain, New Zealand, GFY - Not Croydon... Posts: 25,040	I didn't know that site was yours.... Hope you didn't mind me posting that little script here that used your API - I would have asked if I had known it was you.... __________________ - Chaturbate Script - https://gfy.com/fucking-around-and-b...er-issues.html - Now supports White Labels

04-15-2012, 01:02 PM	#2
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Wait,they hotlink your javascript or ?

04-15-2012, 01:18 PM	#6
jigg Confirmed User Join Date: Feb 2002 Posts: 2,527	sell it to a broker

04-15-2012, 01:21 PM	#8
CyberHustler Unregistered Abuser Industry Role: Join Date: Feb 2006 Posts: 25,335

04-15-2012, 04:34 PM	#15
epitome So Fucking Lame Industry Role: Join Date: Jun 2009 Location: St. Petersburg, FL Posts: 12,156	Cam white label.

04-15-2012, 10:09 PM	#16
papill0n Unregistered Abuser Industry Role: Join Date: Oct 2007 Posts: 15,547	send here for big lulz http://www.redpancake.net/

04-16-2012, 05:39 AM	#19
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	If you have any idea what the IPs are of the people running the site, be sure to exclude those form your redirect Last edited by u-Bob; 04-16-2012 at 05:41 AM..

04-16-2012, 10:11 AM	#21
MaDalton I am Amazing Content! Industry Role: Join Date: Feb 2004 Posts: 39,822	it's Berlusconis company, redirect it to some escort sites. he has a lot of free time now __________________ AmazingContent.com - providing only the best content and service since 2003 Monetize your content on Veegaz.com - one of Germanies largest VOD sites Got German traffic? We convert it into money for you! Skype: madalton02826 - Email: oltecconsult [at] gmail [dot] com