The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
13 views

BingPreview requesting same script thousands of times

Earlier today I noticed some serious server activity and noted that there were something like 750,000 hits from BingPreview bot over the course of the afternoon. I added: User-agent: * Crawl-delay: ...
0
votes
1answer
23 views

How to stop parallel downloads

In my server logs I noticed random sets of IP's originating from china that are downloading the same file of about 16MB every couple of hours, and every time the computer downloads it, it starts the ...
2
votes
1answer
51 views

Website content was copied resulting in decreased traffic

My website with automobile niche has been struggling to stand again plagiarism and bot-attacks from last few months.In last quarter, 3 different domains were setup with exact replica of all the ...
3
votes
2answers
43 views

Avoiding downtime after DOS and change of IP

I have a small company designing, programing, and maintaining websites. I host my websites on a shared hosting plan (cpanel). I received an email 2 days ago that there was a DOS attack and the ...
1
vote
1answer
26 views

Bot POST flood prevention

Since half february I noticed an increase in traffic to a very small website, which started to mail me an access log daily. The bot requests the homepage over and over, posting some content in a form ...
3
votes
1answer
41 views

wordpress attack?

I have 404 errors on Search Console when queries are being added to my regular URL, such as : &sa=U&ved=0ahUKEwj56v3E9__KAhULbRQKHR3BDggQwW4IHDAD&usg=AFQjCNGDzpx5QNDQ5Kk8NJkIqs048na_tg ...
0
votes
2answers
1k views

BingPreview user agent

I'm getting several invalid requests from a "BingPreview" user agent. The complete user agent header is: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534+ (KHTML, like Gecko) BingPreview/1.0b The ...
0
votes
4answers
129 views

What is the best way to detect if the traffic is legit or (bot) not?

We are planning to start program something similar to youtube where users get paid as per views. But problem we are facing is that people will game the system and send traffic using botnets to gain ...
0
votes
0answers
51 views

How to analyse what IP is hitting my website and consuming bandwidth

My website is hosted on a shared server with a WHM account and a cPanel system. My website is being attacked by something and it consumes all my bandwidth. This has been going on for couple of weeks ...
37
votes
4answers
13k views

How do spambots work?

I have a forum that's getting hit a lot by forum spambots, and of course the best way to defeat something is to know thy enemy. I'll worry about defeating those spambots later, but right now I'd like ...
4
votes
2answers
94 views

Could we get blacklisted somewhere when our “register” form is abused?

I am on the board of a small sports club. None of us is a professional web master or administrator. A hobbyist club member works as our webmaster in his free time, and none of us knows what to make of ...
1
vote
2answers
42 views

Is it a good idea to close the connection on a web hacker / spammer?

When I receive a request from a web spammer, such as a GET /wp-login.php, I am thinking of replying with an error (404) and closing the HTTP connection immediately with this header: Connection: close ...
7
votes
3answers
1k views

Why do bots search for / fill and send contact forms?

I'm a bit confused as to why people make bots to do this - is it to find vulnerabilities? I recently upgraded my contact form security with more client and server side validation, including a ...
5
votes
1answer
171 views

Apparent Bot Impressions in Webmaster Tools

I've been watching some strange stats in Google Webmaster Tools for a particular page on our site, which has been getting some periods of very high impressions but little or no clicks, and then just ...
6
votes
2answers
444 views

80% of Website Traffic coming from Just one Town in USA - Strange?

For the last month, 80% of my total traffic was coming from just one Town in the USA. Here are the attributes: It is one of the richest towns in California in USA which defies logic since I run a ...
2
votes
3answers
398 views

How to block a user-agent that has a spacing in its name?

I got a hit from a crawler with a user-agent called DV CRAWLER which is an abvious a spam-bot. I tried to block it in both .htacess and nginx configuration as I'm running nginx as a reverse proxy in ...
0
votes
0answers
14 views

spam referers bypass htaccess rules [duplicate]

Here is a sample code I'm using in .htaccess to block spam referers: RewriteEngine On RewriteCond %{HTTP_REFERER} ^http://.*buttons-for-your-website\.com/ [NC,OR] RewriteCond %{HTTP_REFERER} ^http://....
2
votes
2answers
134 views

What is .htaccess rewrite rule for humans.txt in the query string?

From http://www.allthingsdemocrat.com/block-bad-bots-in-htaccess.txt: <IfModule mod_rewrite.c> RewriteCond %{QUERY_STRING} http\:\/\/www\.google\.com\/humans\.txt\? [NC] RewriteRule .* - [F,L] &...
0
votes
1answer
299 views

Am I doing .htaccess right to block google, bing and alexa bots?

I do not need bots at all. I bought my traffic and I do not want my sites to show up on search engine or anything. So I added this: <IfModule mod_setenvif.c> # remove most popular bot ...
1
vote
2answers
112 views

Does anybody knows this Bot with UA 'Java/1.7.0_67'?

Does anyone knows this unfriendly Bot coming constantly from this IP-Adress 87.210.90.16 (Amsterdam), UserAgent is 'Java/1.7.0_67' ? It scraped our whole site without any interruption and without to ...
1
vote
0answers
39 views

Random (but coherent) text posted from random IP addresses - what kind of attack is that?

My website has a nice by-design anti spam protection. Originaly it was a mistake. What I did is, that every AJAX-submitted <form> has method="get" but AJAX actually uses POST. Thanks to this, ...
2
votes
0answers
106 views

What are these strange Speed_Bump requests in my logs? Malware, nuisance, nothing?

I've recently noticed a number of garbage requests coming into a website that I run. They look like so: 2015-02-19 13:54:27.272 /notify-Speed_Bump?aHR0cDovL3d3dy5zaGFya2FseXRpY3MuY29tLw== 2015-02-19 ...
0
votes
1answer
180 views

How to avoid domain removal attacks?

I see on my website log that someone tried the following URL: GET /domainsigma_removal_xxxxxxxxxxxxxxxx.html HTTP/1.1" 404 188 - "Mozilla/5.0 (compatible; OptimizationCrawler/0.2; +http://www....
0
votes
0answers
37 views

What could be causing heavy bursts of traffic from single IP address to old inactive URL

Looking at Google Analytics recently I noticed a strange phenomenon. For the past few weeks I had 3 unique users making 600 requests for an URL that is not being used anymore. I investigated further ...
1
vote
2answers
172 views

Do spam bots load the DOM?

I have an issue where a form on my site is getting spammed. The form is actually a copy paste job from a CRM, so I cannot access any of the server side script to make a good human checker. In the ...
4
votes
3answers
279 views

Robots signing up on website

A couple of days ago, some robots started to sign up on the website (about 30 in a couple of days), they don't do anything on the website (as I'm guessing they don't find what they're looking for). I'...
6
votes
1answer
2k views

How do I capture incoming HTTP requests for analysis?

I have a site that is hit pretty hard by a 'bot script that thinks it is possible to brute-force the Admin password by "trying" out different passwords with the username "Admin". Here is an excerpt ...
8
votes
4answers
6k views

Spam bot constantly hitting our site 800-1,000 times a day. Causing loss in sales

For the past 5 months our site has been receiving hits from these 4 sites below; sheratonbd.com newsheraton.com newsheration.com newsheratonltd.com Typically the exact url they come from looks ...
2
votes
1answer
104 views

How to respond to attack on web site

I have wordpress site that is under some kind of bot attack. I checked apache logs and there's get request to a single post on my blog every second (sometimes there's more than one per second). When ...
4
votes
1answer
133 views

How much of the world's website traffic is attacks?

Does anyone have any statistics on how much of the total of the world's website traffic is malicious? Every day I am amazed by the number of requests for .dll and similar things which don't appear ...
9
votes
4answers
8k views

Adsense click bot is click bombing my site

I have a site that get's roughly 7,000 - 10,000 page views per day right now. Starting around 1 AM on 7/1/12 I noticed the CTR was rising dramatically. These clicks would be credited then de-...
14
votes
5answers
4k views

How can I stop a bot attack on my site?

I have a site (built with wordpress) that is currently under a bot attack (as best I can tell). A file is being requested over and over, and the referrer is (almost every time) turkyoutube.org/player/...
4
votes
3answers
368 views

Bad Bot blocking Revisited

I've read a lot about bad bot blocking, php scripts, .htaccess techniques, etc... Is this a valid method? Since .htacces can rewrite and send a bad bot a 403 deny or forward to something like spam ...
3
votes
1answer
741 views

Preventing botvisits to website

Every time some user shares my website's address inside his/her tweets, the following bots come to my website: UnwindFetchor/1.0 (+http://www.gnip.com/) ShowyouBot (http://showyou.com/crawler) ...
4
votes
2answers
1k views

Number of page requests by any Bot in 5 secs

I am writing a script that will block any bot that requests page(s) for example X times in the past 5 secs. I need to find the X here. Do you guys know some approx values I can use?
1
vote
2answers
790 views

Huge increase in direct load homepage traffic and bounce rate, causes?

Over the holiday shopping period our website saw a huge increase in direct load traffic directly on the homepage (from 2mil to 8-9mil hits) and the bounce rate went through the roof on that page (70-...
7
votes
2answers
1k views

Clean an attacked website

Since few monts a client website is attacked by bots. I've changed the website source (now wordpress last version), try to clean but bot find hole in sécurity ... After bot action i can find ....
2
votes
1answer
85 views

Why are we being twitter spammed?

This is a search relating to us: https://twitter.com/#!/search/realtime/scirra We're getting a of of new accounts tweeting: The Layers Bar - Scirra.com Firstly this is not us doing it as we're ...
0
votes
0answers
36 views

Moderator with no power to fix spam bot issue [duplicate]

Possible Duplicate: How can I prevent spam on sites which I control? I think this is the correct site to post this. So I'm a moderator (not administrator) on anddev.org and it's completely ...
1
vote
1answer
75 views

What is the most time-effective way to monitor & manage threats from bots and/or humans?

I'm usually overwhelmed by the amount of tools that hosting companies provide to track & quantify traffic data and statistics. I'm equally overwhelmed by the countless flavors of malicious '...
3
votes
1answer
140 views

DDos Mitigation Services

Any have any experience using these? And what are the pro's and cons? Can you expect a high level of false positives? Are they 100% effective?
2
votes
1answer
3k views

Is Hosting My Web Apps at Amazon EC2/S3 an Adequate Defense Against DDOS?

Reading how an online news portal Sarawak Report was under massive, well-funded, sophisticated DDOS attack and unable to function as normal, I wonder what should normal webmasters do in the light of ...
5
votes
3answers
2k views

How to tell whether spammers are bots or humans?

How can you tell if the people that are spamming your forum or website are in fact bots or human spammers? Please note that the question is not about preventing spammers. It is to determine if the ...
7
votes
3answers
216 views

How should a site respond to automated login attempts with phony usernames?

For the last couple weeks I've been seeing a consistent stream of 15-30 invalid login attempts per hours on my site. Many of them are non-sensical usernames that nobody would ever register for real, ...
1
vote
2answers
616 views

How are spambots registering on my website?

I have a forum that's getting a bunch of spam bot registrations. Here's what's happened: lots of spambots added static logic question (as a picture), static math question, honeypot field still lots ...