PDA

View Full Version : help determining if this is a hitbot


Ralt
03-14-2002, 10:28 PM
I'm using UCJ and recently I noticed a spike in the number of outgoing hits generated by the "no cookie" (this is what UCJ labels them as) surfers coming to my site.<br /><br />I don't have much experience with tracking down cheaters. I would appreciate any advice you might have.<br /><br />Here is the UCJ stats for my "no cookie" traffic<br /><br />Incoming from nocookie<br />Raw:101 Uniques:51 Percent:50.50<br /><br />Outgoing generated by nocookie<br />Raw:13555 Uniques:1454 Percent:10.73<br /><br />Referring URL<br />101 - nocookie<br /><br />Incoming Repetitive IP's<br />96 - none <br />21 - 24.90.121.106<br />10 - 24.196.22.186<br />9 - 64.12.96.9<br />6 - 217.85.45.245<br />3 - 205.188.208.102<br />3 - 152.163.188.4<br />2 - 62.104.216.87<br />2 - 62.227.148.84<br />2 - 195.93.64.7<br />2 - 217.229.219.167<br />2 - 213.6.108.58 <br />1 - 212.233.1.20<br />1 - 66.149.58.95<br />1 - 195.93.32.7<br />1 - 172.143.196.212<br />1 - 217.83.25.228<br />1 - 205.188.209.6<br />1 - 62.224.176.56<br />1 - 24.46.13.6<br />1 - 68.60.66.38<br />1 - 63.20.208.60<br />1 - 217.68.170.85<br />1 - 206.80.214.226<br />1 - 216.164.149.168<br />1 - 210.237.175.82<br />1 - 216.145.63.218<br />1 - 172.176.8.45<br />1 - 24.56.30.50<br />1 - 212.250.7.7<br />1 - 217.139.72.173<br />1 - 172.140.2.129<br />1 - 24.70.79.153 <br />1 - 213.151.33.26 <br />1 - 24.80.132.168<br /><br />Outgoing Repetitive IP's<br />12698 - none<br />2187 - 211.18.123.180<br />1319 - 61.117.107.92<br />1067 - 217.85.45.245<br />508 - 192.18.17.3<br />336 - 80.13.67.49<br />336 - 80.13.72.61<br />330 - 130.234.32.195<br />99 - 62.104.203.81<br />99 - 213.7.50.167<br />97 - 217.81.4.33<br />94 - 210.237.175.82<br />71 - 24.234.51.166<br />58 - 80.128.112.250<br />51 - 208.20.34.37<br />42 - 212.172.1.51<br />41 - 151.27.175.154<br />39 - 217.80.12.93<br />39 - 205.188.195.28<br />38 - 212.146.50.32<br />38 - 205.188.196.53<br />38 - 217.84.108.32<br />37 - 195.3.96.97<br />36 - 208.170.22.127<br />36 - 212.183.104.216<br />35 - 61.201.250.134<br />35 - 216.40.243.22<br />35 - 216.170.129.49<br />35 - 211.97.99.221<br />32 - 217.226.34.147<br />32 - 195.241.227.191<br />32 - 213.217.162.119<br />32 - 172.129.152.125 <br />32 - unknown<br />28 - 203.173.137.230<br />27 - 213.224.135.81<br />22 - 150.204.101.160<br />22 - 203.57.68.240, 203.57.68.20<br />21 - unknown, unknown<br />20 - 172.16.94.42<br />17 - 213.7.8.227<br />17 - 24.141.27.246<br />17 - 213.7.69.108<br />16 - 192.169.41.110<br />16 - 213.7.40.124<br />15 - 213.118.107.67<br />14 - 213.36.22.105<br />11 - 170.212.41.14<br />11 - 213.7.32.21<br />11 - 192.168.2.28<br />11 - 217.135.41.135<br />11 - 213.7.206.232<br />10 - 24.157.118.111<br />9 - 62.31.186.225<br />9 - 213.7.25.171<br />8 - 195.14.251.155<br />8 - 213.6.51.44<br />8 - 213.6.105.11<br />7 - 62.47.46.186<br />7 - 134.93.144.65<br /><br />I've got some great trading partners and I don't want to be sending them crap traffic. If I had to make a guess I'd say I'm being hitbot'd but I have no idea how tell for sure or more importantly, how to stop it.<br /><br />Regards,<br />Ralt