Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [botattack]

The tag has no usage guidance.

0
votes
0answers
11 views

Why would a bot net keep loading my site?

In blocking a lot of scrapping activity, I found a puzzling situation - that my site is accessed about 35,000 times per day by around 30,000 different IPs. I started blocking these IPs with a script, ...
1
vote
0answers
57 views

Why would a person or bot visit my “about us” page three times every day?

Something strange happens on my site (which is on 6 languages): I use statcounter for monitoring the website. In the last 3-4 months, I observed that at least 3 times per day, one page is "visited", ...
4
votes
1answer
91 views

Will forbidding “bad bot” user agents via .htaccess add a layer of protection against email address scraping beyond the existing captcha?

I was reviewing the security/protection measures for the websites I manage (one is for a small consulting firm, the other for a not-for-profit art association), and I came across the topic of bad-bot ...
2
votes
0answers
36 views

Can many single page hits from a variety user agents from the same VPN with the same screen resolution be hurting my search rankings?

I am trying to clarify what is happening with the traffic on my site. Lately I am being flooded with many strange hits, mostly from US and they seem to only open 1 page or visit for few seconds. The ...
0
votes
1answer
63 views

Why are bots or servers crawling non- (NEVER) existent URLs and how can I stop this?

Through Google Analytics I started noticing hits in the dozens via a source page named as "free-seo-help.org" that redirects to http://seo2.agri-co-jsy.com/?site=http:// It does not go to my actual ...
1
vote
0answers
313 views

What is user agent ;__CT_JOB_ID__:?

I've been searching the web for an explanation of the sudden influx we've gotten of user agents of this format: ;__CT_JOB_ID__:68a72eee-353c-4b0b-82ae-0cb6c8ca3e6e; Each visitor has a unique IP. So ...
1
vote
0answers
19 views

What type of IP block rule is used when only the last digits of the IP address of bot traffic are the same?

I have a list of bot (traffic) IPs (around 6000). I'm able to block them when buying traffic to my sites. 193.154.239.54 84.56.102.50 92.105.183.21 193.83.238.7 212.95.5.170 92.211.215.128 93.214.99....
1
vote
1answer
1k views

How to block direct traffic spam in Google Analytics?

I am having a problem with my site where I am getting spam direct traffic. I get over 700 "visits" a day with 0% Bounce Rate, 2 pages "visited" (it is the same page listed twice) and every session ...
3
votes
1answer
329 views

Where can I redirect exploit scanning bots?

I get a lot of those exploit scanning bots like the ones looking for a WordPress login (which I don't have) or guessing other exploitable URLs. Where is a sensible place to redirect them to via ....
3
votes
2answers
472 views

What is adding p, subid, and uid variables to the query string of a site url?

One of our sites is seeing ~100 sessions a day landing on the home page with a query string like the following appended: ?p=1471086892&subid=526&uid=48752857D549575A Each one has the same ...
1
vote
1answer
64 views

Wordpress security from bots

One of my clients website is getting massive traffic from China most of which are bots. These bots are hitting the site nonstop causing the VM to use very high cpu and memory. As a result it is ...
4
votes
1answer
827 views

Google Analytics traffic surge from China, not real visitor, Baidu?

UPDATE2: Seems this all comes from Baidu crawlers, here's some outputcreated by GoAccess analyzing our logs. We've restricted the the following user-agent which seems to be used by them: Mozilla/5....
10
votes
3answers
883 views

Was user-agent identification used for some scripting attack techique?

Apache access log entries on my site are typically like this one: 207.46.13.174 - - [31/Oct/2016:10:18:55 +0100] "GET /contact HTTP/1.1" 200 256 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www....
1
vote
1answer
209 views

Unexplainable non-existing page requested for months

While I am quite familiar with bots requesting well-know pages as used for WordPress and phpMyAdmin on any site the can reach, I'm now dealing with a bot requested a page I really can't explain. For ...
2
votes
1answer
59 views

Website content was copied resulting in decreased traffic

My website with automobile niche has been struggling to stand again plagiarism and bot-attacks from last few months.In last quarter, 3 different domains were setup with exact replica of all the ...
3
votes
2answers
96 views

Avoiding downtime after DOS and change of IP

I have a small company designing, programing, and maintaining websites. I host my websites on a shared hosting plan (cpanel). I received an email 2 days ago that there was a DOS attack and the ...
1
vote
1answer
136 views

Bot POST flood prevention

Since half february I noticed an increase in traffic to a very small website, which started to mail me an access log daily. The bot requests the homepage over and over, posting some content in a form ...
3
votes
1answer
58 views

wordpress attack?

I have 404 errors on Search Console when queries are being added to my regular URL, such as : &sa=U&ved=0ahUKEwj56v3E9__KAhULbRQKHR3BDggQwW4IHDAD&usg=AFQjCNGDzpx5QNDQ5Kk8NJkIqs048na_tg ...
0
votes
0answers
329 views

How to analyse what IP is hitting my website and consuming bandwidth

My website is hosted on a shared server with a WHM account and a cPanel system. My website is being attacked by something and it consumes all my bandwidth. This has been going on for couple of weeks ...
4
votes
2answers
146 views

Could we get blacklisted somewhere when our “register” form is abused?

I am on the board of a small sports club. None of us is a professional web master or administrator. A hobbyist club member works as our webmaster in his free time, and none of us knows what to make of ...
1
vote
2answers
61 views

Is it a good idea to close the connection on a web hacker / spammer?

When I receive a request from a web spammer, such as a GET /wp-login.php, I am thinking of replying with an error (404) and closing the HTTP connection immediately with this header: Connection: close ...
5
votes
1answer
479 views

Apparent Bot Impressions in Webmaster Tools

I've been watching some strange stats in Google Webmaster Tools for a particular page on our site, which has been getting some periods of very high impressions but little or no clicks, and then just ...
0
votes
4answers
1k views

What is the best way to detect if the traffic is legit or (bot) not?

We are planning to start program something similar to youtube where users get paid as per views. But problem we are facing is that people will game the system and send traffic using botnets to gain ...
0
votes
0answers
15 views

spam referers bypass htaccess rules [duplicate]

Here is a sample code I'm using in .htaccess to block spam referers: RewriteEngine On RewriteCond %{HTTP_REFERER} ^http://.*buttons-for-your-website\.com/ [NC,OR] RewriteCond %{HTTP_REFERER} ^http://....
2
votes
3answers
2k views

How to block a user-agent that has a spacing in its name?

I got a hit from a crawler with a user-agent called DV CRAWLER which is an abvious a spam-bot. I tried to block it in both .htacess and nginx configuration as I'm running nginx as a reverse proxy in ...
1
vote
1answer
48 views

How to stop parallel downloads

In my server logs I noticed random sets of IP's originating from china that are downloading the same file of about 16MB every couple of hours, and every time the computer downloads it, it starts the ...
2
votes
2answers
270 views

What is .htaccess rewrite rule for humans.txt in the query string?

From http://www.allthingsdemocrat.com/block-bad-bots-in-htaccess.txt: <IfModule mod_rewrite.c> RewriteCond %{QUERY_STRING} http\:\/\/www\.google\.com\/humans\.txt\? [NC] RewriteRule .* - [F,L] &...
0
votes
1answer
868 views

Am I doing .htaccess right to block google, bing and alexa bots?

I do not need bots at all. I bought my traffic and I do not want my sites to show up on search engine or anything. So I added this: <IfModule mod_setenvif.c> # remove most popular bot ...
1
vote
1answer
68 views

Random (but coherent) text posted from random IP addresses - what kind of attack is that?

My website has a nice by-design anti spam protection. Originaly it was a mistake. What I did is, that every AJAX-submitted <form> has method="get" but AJAX actually uses POST. Thanks to this, ...
3
votes
1answer
288 views

What are these strange Speed_Bump requests in my logs? Malware, nuisance, nothing?

I've recently noticed a number of garbage requests coming into a website that I run. They look like so: 2015-02-19 13:54:27.272 /notify-Speed_Bump?aHR0cDovL3d3dy5zaGFya2FseXRpY3MuY29tLw== 2015-02-19 ...
1
vote
2answers
141 views

Does anybody knows this Bot with UA 'Java/1.7.0_67'?

Does anyone knows this unfriendly Bot coming constantly from this IP-Adress 87.210.90.16 (Amsterdam), UserAgent is 'Java/1.7.0_67' ? It scraped our whole site without any interruption and without to ...
0
votes
1answer
251 views

How to avoid domain removal attacks?

I see on my website log that someone tried the following URL: GET /domainsigma_removal_xxxxxxxxxxxxxxxx.html HTTP/1.1" 404 188 - "Mozilla/5.0 (compatible; OptimizationCrawler/0.2; +http://www....
2
votes
1answer
62 views

What could be causing heavy bursts of traffic from single IP address to old inactive URL

Looking at Google Analytics recently I noticed a strange phenomenon. For the past few weeks I had 3 unique users making 600 requests for an URL that is not being used anymore. I investigated further ...
8
votes
3answers
1k views

Why do bots search for / fill and send contact forms?

I'm a bit confused as to why people make bots to do this - is it to find vulnerabilities? I recently upgraded my contact form security with more client and server side validation, including a ...
6
votes
2answers
493 views

80% of Website Traffic coming from Just one Town in USA - Strange?

For the last month, 80% of my total traffic was coming from just one Town in the USA. Here are the attributes: It is one of the richest towns in California in USA which defies logic since I run a ...
1
vote
2answers
782 views

Do spam bots load the DOM?

I have an issue where a form on my site is getting spammed. The form is actually a copy paste job from a CRM, so I cannot access any of the server side script to make a good human checker. In the ...
6
votes
1answer
3k views

How do I capture incoming HTTP requests for analysis?

I have a site that is hit pretty hard by a 'bot script that thinks it is possible to brute-force the Admin password by "trying" out different passwords with the username "Admin". Here is an excerpt ...
4
votes
3answers
490 views

Robots signing up on website

A couple of days ago, some robots started to sign up on the website (about 30 in a couple of days), they don't do anything on the website (as I'm guessing they don't find what they're looking for). I'...
2
votes
1answer
110 views

How to respond to attack on web site

I have wordpress site that is under some kind of bot attack. I checked apache logs and there's get request to a single post on my blog every second (sometimes there's more than one per second). When ...
3
votes
1answer
792 views

Preventing botvisits to website

Every time some user shares my website's address inside his/her tweets, the following bots come to my website: UnwindFetchor/1.0 (+http://www.gnip.com/) ShowyouBot (http://showyou.com/crawler) ...
6
votes
2answers
3k views

Number of page requests by any Bot in 5 secs

I am writing a script that will block any bot that requests page(s) for example X times in the past 5 secs. I need to find the X here. Do you guys know some approx values I can use?
11
votes
4answers
9k views

Adsense click bot is click bombing my site

I have a site that get's roughly 7,000 - 10,000 page views per day right now. Starting around 1 AM on 7/1/12 I noticed the CTR was rising dramatically. These clicks would be credited then de-...
4
votes
3answers
429 views

Bad Bot blocking Revisited

I've read a lot about bad bot blocking, php scripts, .htaccess techniques, etc... Is this a valid method? Since .htacces can rewrite and send a bad bot a 403 deny or forward to something like spam ...
8
votes
4answers
8k views

Spam bot constantly hitting our site 800-1,000 times a day. Causing loss in sales

For the past 5 months our site has been receiving hits from these 4 sites below; sheratonbd.com newsheraton.com newsheration.com newsheratonltd.com Typically the exact url they come from looks ...
7
votes
2answers
1k views

Clean an attacked website

Since few monts a client website is attacked by bots. I've changed the website source (now wordpress last version), try to clean but bot find hole in sécurity ... After bot action i can find ....
0
votes
2answers
2k views

BingPreview user agent

I'm getting several invalid requests from a "BingPreview" user agent. The complete user agent header is: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534+ (KHTML, like Gecko) BingPreview/1.0b The ...
0
votes
0answers
36 views

Moderator with no power to fix spam bot issue [duplicate]

Possible Duplicate: How can I prevent spam on sites which I control? I think this is the correct site to post this. So I'm a moderator (not administrator) on anddev.org and it's completely ...
1
vote
2answers
831 views

Huge increase in direct load homepage traffic and bounce rate, causes?

Over the holiday shopping period our website saw a huge increase in direct load traffic directly on the homepage (from 2mil to 8-9mil hits) and the bounce rate went through the roof on that page (70-...
2
votes
1answer
86 views

Why are we being twitter spammed?

This is a search relating to us: https://twitter.com/#!/search/realtime/scirra We're getting a of of new accounts tweeting: The Layers Bar - Scirra.com Firstly this is not us doing it as we're ...
1
vote
1answer
75 views

What is the most time-effective way to monitor & manage threats from bots and/or humans?

I'm usually overwhelmed by the amount of tools that hosting companies provide to track & quantify traffic data and statistics. I'm equally overwhelmed by the countless flavors of malicious '...