Help Request Deter site ripping?

Discussion in 'Site Help and Suggestions' started by assembler_EX, Aug 21, 2015.

  1. assembler_EX

    assembler_EX Administrator

    Joined:
    May 20, 2015
    Messages:
    268
    Likes Received:
    107
    I'm having a problem with shitty programmed site reload apps for iphone causing big bandwidth issue,
    I don't know the name of the app, but it's resulting in 100K reloads from one user a day.
     
  2. rso

    rso Familiar Face

    Joined:
    Mar 26, 2010
    Messages:
    1,161
    Likes Received:
    39
    If it's just that one app, you could ban its user agent (if it's unique). If you're looking for a more general solution instead, take a look at mod_evasive and/or mod_throttle (edit: actually, make that mod_cband...? Haven't used Apache for some time) for Apache.
     
  3. Asure

    Asure Member

    Joined:
    Dec 29, 2012
    Messages:
    10
    Likes Received:
    1
    Post a few lines of the log with the GET info in it, blank out the ip, i can probably get you sorted out. Which apache ver are you using?

    Edit: This smells more like ddos than a 'normal' app btw.
     
  4. HEX1GON

    HEX1GON 2997cc Staff Member

    Joined:
    May 4, 2011
    Messages:
    9,681
    Likes Received:
    507
    On the topic of DDoS, probably some DDoS protection would be beneficial.
     
  5. retro

    retro Administrator Staff Member

    Joined:
    Mar 13, 2004
    Messages:
    10,336
    Likes Received:
    311
  6. Demon

    Demon Spirited Member

    Joined:
    Aug 11, 2008
    Messages:
    100
    Likes Received:
    76
    Really sorry for the delay guys having some offline issues. (Re: PM @retro) I'm not sure what could be causing this but it sounds like a bot or some infected app.

    If you could PM me with some logs I'll take a look later tonight. Worst case you could always block the ip's used.

    EDIT:
    @assembler_EX was thinking about this while waiting for my taxi. It could be a DOS/DDoS. Are you by chance running Apache 2.x? There's one type of attack that sends multiple requests to an Apache server which in turns overloads it to the point it would become unresponsive. (Won't name it just incase your server is vulnerable to this attack.)
     
    Last edited: Sep 8, 2015

Share This Page