Abstract: An ad server logs web traffic regarding web page traffic by users. The web traffic is analyzed to determine web activity indicating that a user is being paid to fake legitimate web traffic. These users are referred to as abusive users. The web traffic is also analyzed to determine web activity indicating that a web page is artificially boosting its own traffic in order to earn undeserved advertising revenue. These web pages are referred to as honeypot web pages. Scores are determined for both users and web pages, where the scores indicate the likelihood that the associated user or web page is an abusive user or a honeypot web page, respectively. The ad server uses these scores to determine an amount to bid on future impressions to those users and web pages.

Abstract: An ad server logs web traffic regarding web page traffic by users. The web traffic is analyzed to determine web activity indicating that a user is being paid to fake legitimate web traffic. These users are referred to as abusive users. The web traffic is also analyzed to determine web activity indicating that a web page is artificially boosting its own traffic in order to earn undeserved advertising revenue. These web pages are referred to as honeypot web pages. Scores are determined for both users and web pages, where the scores indicate the likelihood that the associated user or web page is an abusive user or a honeypot web page, respectively. The ad server uses these scores to determine an amount to bid on future impressions to those users and web pages.