what to do when c.cgi getting hitbot attacked for no reason?

[Carneal]

ok, well it happened and killed my other sites, and now for no reason its happening to my newest site. my c.cgi gets hitbotted and kills my trades.<br /><br />what do i do? this is getting old boring and starting to really piss me off

[AgentCash]

</font><blockquote><font size="1" face="Verdana, Arial">quote:</font><hr /><font size="2" face="Verdana, Arial"> Perl & PHP Coder </font><hr /></blockquote><font size="2" face="Verdana, Arial">Hmm... are they making coders with the can't code their way out of a paper bag mold again? <img border="0" title="" alt="[Roll Eyes]" src="rolleyes.gif" />

[Carneal]

excuse me?

[AgentCash]

</font><blockquote><font size="1" face="Verdana, Arial">quote:</font><hr /><font size="2" face="Verdana, Arial">Originally posted by Carneal:<br /><strong>excuse me?</strong></font><hr /></blockquote><font size="2" face="Verdana, Arial">Ahh... it's the mold where the reading skills were deficient too... so sad. <img border="0" title="" alt="[Big Grin]" src="biggrin.gif" />

[PeepNTom]

c.cgi I am betting is UCJ and if so your best bet<br />would be to ask Tim, he'd gladly give you ideas <img border="0" title="" alt="[Wink]" src="wink.gif" />

[Garvin]

He's trying to confuse c.cgi using various parameters combinations so it fucks up the whole thing and leads him to the root. He can't do a shit unless there are big gaps in the code.

[Robert]

my server also gets daily several hundred of hits to .../cgi-bin/ucj/c.cgi .. even if I've never used UCJ .. <br />also get hits to .../counter.cgi, ../rb4/out.cgi<br />even if I dont use any .cgi on my server<br />weird <img border="0" title="" alt="[Confused]" src="confused.gif" /> <br /><br />at least it doesnt affect my trades, all these hits goes to my 404

['Plat]

AgentCash stfu and post something useful or better yet dont post anything. GFY<br /><br />This is a serious problem and its only getting worse. Give it a couple months and this board will be flaming about this topic because the program that is doing this is growing and more people are getting their hands on it. UCJ goes crazy because its sending out non unique hits from the same IP(s) to every trade in your outgoing list thousands of times in less than an hour maybe even less pending on the computers speed. The cookies in UCJ will null out and big trades wonder off the outgoing list.

[Carneal]

bump <img border="0" alt="[Bounce]" title="" src="graemlins/bounce.gif" />

[theo]

rename c.cgi to dontfuckwithmepunks.cgi

[Lentini]

or to fuckyouhitbotters.cgi

[sonicpuke]

Well a lot of times it's actually not a hitbot (Though it CAN be) I think.<br />A lot of times it's one of the site sucking/spider softwares (There's a lot of that going around and they are trickier and trickier these days sometimes even setting cookies and reffers ;(<br /><br />I've written a patch for UCJ that blocks these guys if they hit your c.cgi too many times in 2 minutes.<br /><br />There is a catch though. I installed it for someone yesterday and it DOES block people using these site sucking software.<br />BUT some surfers using AOL use this site sucker software and block OTHER aol users when they start sucking your site. (Because all AOL users in a certain city use that same IP#) I'm not sure how big a problem this really is. But he felt it was blocking to many real users. (He didn't like it)<br /><br />I've tried a few different things to block this sort of thing like<br />1 unclickable links<br />2 checking for proxies on incoming hits.<br />Both of these 2 blocked too many people and/or not enough people.<br /><br />My newest system blocks IP#'s that hit c.cgi or your mainpage too many times (Can be adjusted but I block anyone who hits c.cgi 10 times or more in 2 minutes.) It seems to work very well for me (As I said someone I installed it for said it was blocking too many aol users though)<br /><br />sonic<br />24513624

[Carneal]

thanks for that input sonicpuke,<br /><br />i wrote a small patch for it in php, but it doesnt help very much.. i think also its a spider because this happends all the sudden my bookmark clicks will raise to 10k/clicks an hour for about 10minutes then it stops,, and happends again ina few hours...<br /><br />tim helped me out also and im starting to get these guys blocked off.. i just wish it would stop, makes it so hard to grow with this happening

[Carneal]

</font><blockquote><font size="1" face="Verdana, Arial">quote:</font><hr /><font size="2" face="Verdana, Arial">Originally posted by AgentCash:<br /><strong> </font><blockquote><font size="1" face="Verdana, Arial">quote:</font><hr /><font size="2" face="Verdana, Arial">Originally posted by Carneal:<br /><strong>excuse me?</strong></font><hr /></blockquote><font size="2" face="Verdana, Arial">Ahh... it's the mold where the reading skills were deficient too... so sad. <img border="0" title="" alt="[Big Grin]" src="biggrin.gif" /> </strong></font><hr /></blockquote><font size="2" face="Verdana, Arial"><img border="0" alt="[Finger]" title="" src="graemlins/finger.gif" />