PDA

View Full Version : How to block requests from hits via proxy server?


RodeoCowboy
10-15-2001, 10:52 AM
I need help! Someone is hitboting me like crazy. The hits are coming in under bookmarks and some other url which I am not trading with. Unfortunately, these hits are 'clicking' on my links and my productivity on other sites really sucks with these fake hits. I am unable to stop this since the hits are coming in from many IP's. I figure these are hits are via proxy servers. Does anyone know how to block hits coming in from proxy servers?

qviz
10-15-2001, 05:06 PM
I know how to close proxy servers.

The question is were you want to do it ?

(With what script do you work)

ICQ: 135458752

sonicpuke
10-15-2001, 05:13 PM
Well if you know the IP# of the hitbot that is hitting you, you can block it FAIRLY easily by blocking access via this/these IP#'s.

There may be a way to block ALL proxy hits but I don't know of a way to do this as of now. (Not to say it can't be done though)

Let's say the IP# is 203.165.175.13
You would block it using the below code in your .htaccess file. (If your trying to block "out" hits that kill prod put this in .htaccess under cgi-bin or the dir where your out script is. You can block hits to html docs by putting same code in public_html area. It sounds like you need to mostly block cgi-bin access though)

<Limit GET>
order allow,deny
deny from 203.165.175.13
allow from all
</Limit>

If you wanted to block an entire block you would do this.

<Limit GET>
order allow,deny
deny from 203.165.175.
allow from all
</Limit>

This above code would block hits from IP#'s 203.165.175.0 through 203.165.175.255

You can use
deny from 203.165.
To block 203.165.0.0 through 203.165.255.255 (Etc etc etc)

hope this helps ;)
sonic

sonicpuke
10-15-2001, 05:16 PM
PS

YES you can block multiple IP#'s by just adding more deny from lines like this (Sorry I forgot to mention this and no doubt you'll ask)

<Limit GET>
order allow,deny
deny from 203.165.175.13
deny from 111.111.171.131
allow from all
</Limit>

;)

sonic

qviz
10-15-2001, 05:40 PM
the hitbots dont work from any specific IP

they always HIT from proxy servers
(in order to pretend that this is different IPs (or visitors))

Any normal Hitbot has at least 500-1000
such IPs, (others 2500-20000),so to block them in your method is inpossible.

Generally proxy blocking could be done in two
lines of code in script.

Again, the question is whats the script ?

Other problem could be -
when you will totally block transperant proxy
you will realise that your traffic is
less 10%-30% and this because generally 10-30% of visitors use proxy servers !!!

RodeoCowboy
10-15-2001, 05:43 PM
The problem is the hits are coming in from 100's maybe 1000's of different IP's. I've had the problem of multiple hits from same IP before but never like this and was able to block before but cannot do this time. This is much more sophisticated and killing my site. I assume the perpetrator has a long proxy list and is targeting my site for some unknown reason. Every webmaster should be concerned about this since any asshole can destroy your site with this type of hitbot. The only solution I can see is to block all hits via proxy but I don't know how. Any help would be appreciated.

qviz
10-15-2001, 05:51 PM
Other way to deal with the setuation is to
put the log on all incoming hits,

Here we can use the fact that some proxy
servers transport the information about real
owner of hitbot (like his IP,service provider...)and so by this way you can recognise your real enemy that is hiding behind the proxy servers.

I persannaly catched the one by this method.

qviz
10-15-2001, 05:56 PM
I know how to block proxy servers.

Contact ICQ: 135458792

sorry my mistake in ICQ number before.

qviz
10-15-2001, 06:12 PM
Also its very important at least to know
how much "proxy" visitors come from any
specific trader,

since any trader can simply send you
hits using hitbots (new versions of hitbots
that can be easy found in WWW not only do clickthrough, they also can click on specific links + according to ratio to every link on page).

Generally "proxy servers" is the main cheating method in internet !!!