Questions tagged [web-crawler]
A web-crawler (also known as a web-spider) traverses the webpages of the internet by following the links of urls contained within each webpage. There is usually an initial seed of URLs from which the crawler is given to initialize its crawl.
99
questions
1
vote
1
answer
84
views
Probed for .env files in commonly used resource paths [closed]
I am using an NGINX server to host a static website exposed to the open internet. While glancing through the access logs I came across a cluster of requests for resources ending with .env, e.g:
"...
0
votes
1
answer
64
views
Weird traffic behavior on Ubuntu server
top - 19:51:36 up 1 day, 12:27, 1 user, load average: 19.14, 11.33, 4.74
Tasks: 172 total, 18 running, 154 sleeping, 0 stopped, 0 zombie
%Cpu(s): 90.0 us, 10.0 sy, 0.0 ni, 0.0 id, 0.0 wa, 0....
1
vote
1
answer
78
views
What things should I consider when identifying and rate limiting bots?
// Not sure if this question is best fit for serverfault or webmasters stack exchange...
I am thinking to rate limit access to my sites because identifying and blocking bad bots take most of my time.
...
- 1,139
0
votes
1
answer
42
views
DNS redirecting to mantainance page during planned mantainance - what happens to google indexing?
We are planning a mantainance that could take down the services for a whole day. I would like therefore to show a mantainance page, explaining the issue and providing additional info/links. During ...
2
votes
1
answer
2k
views
Allow only cloudflare access to my website and block all visits, bots or crawlers to my IP address
I have a question, I use cloudflare DNS on my domain.
My VPS 30.xxx.xxx.xxx.xx
Port 4490
My VPS Ip was filtered by crawler web pages, and I am getting bots hitting my server.
I am thinking of buying a ...
- 21
0
votes
0
answers
82
views
Can many connections cause dns lookup or request timeout?
I'm running crawler on my company's internet. 10 raspberry pi * 45 crawlers each, 2 desktops * 70 crawlers each
These processes are sending requests 24/7.
3~5% of packets are getting lost. This is ...
1
vote
1
answer
226
views
Getting requests for suspicious php files
I am getting weird GET requests on my (non php supporting) web server for some curious looking php files. Was just wondering whether these are harmless requests of certain browser tools or attempts ...
- 111
1
vote
1
answer
383
views
Website blocks my requests from linux ubuntu server
I'm a Java engineer with zero dev ops experience. Lately I was playing around with linux ubuntu server first time and used docker with my selenium project and faced this problem:
I try to scrape HTML ...
0
votes
1
answer
347
views
How to avoid emails sent to Google's deep web crawler
My website has an area restricted to users who sign up with a valid email. I have got requests with bogus emails, and I want to avoid sending emails to non-existent addresses lest they increase the ...
- 249
1
vote
0
answers
77
views
Spotify Bot Using Massive Bandwidth on NGINX Cached Server?
I have a couple of podcasts I host on my site and I've noticed a disturbing trend the last couple of months: my site's bandwidth usage has gone up by 10x, but it appears most of it was a series of ...
0
votes
1
answer
266
views
Can missing HTTP referrer's identify web crawlers?
I am currently trying to analyze the traffic of a website.
Besides specifics regarding the requested resource and timestamps,
the tracking system only provides the request's HTTP referrer.
In most ...
user600511
0
votes
2
answers
232
views
Strange behavior in Apache log
I have a Nextcloud server running on Apache, and disabled my firewall for about 5 minutes while I ran an apt-update. I decided to check the logs after, and found this from an unknown IP. It looks like ...
1
vote
1
answer
657
views
Why would Apache log different response sizes for the same url?
I noticed a couple (ostensibly-)harmless log entries, and--I'm admittedly overthinking this by a mile--got curious about Apache2 response sizes.
This Ukranian crawler † hit my web daemon, two seconds ...
- 113
0
votes
1
answer
84
views
How to block attempts for phpMyAdmin? [closed]
I converted my website from asp.net to .net core and host on same server. Now, website gets hundred of hits daily from different IP's trying to access like below
/php-myadmin/
/wp-content/
/mysql/
...
-3
votes
1
answer
197
views
How to gather in a save, cheap and easy way high quality entropy on a Linux machine? [closed]
When no radioactive decay is available and good entropy is strongly advised for security reasons you experience a real problem. HTTPS connections consume a lot of entropy. If you have thousands of ...
-4
votes
2
answers
64
views
what ip will logged in a website if I access a website via another website through my PC? [closed]
If http://example2.com sends cURL connection to a website called http://example1.com. If I access http://example2.com from my pc to see the content of http://example1.com, than would http://example1....
- 103
1
vote
0
answers
136
views
HTTrack stores extensionless pages with a .html appended
I'd like to mirror an old site of mine to local files. I've used httrack for this in the past, but I'm having a problem this time that I really thought I figured out before, but can't seem to now.
...
- 151
-1
votes
2
answers
1k
views
How to disallow crawling for all subdomains using my main domain's physical robots.txt file [closed]
I have multiple physical sub-domains and I don't want to change any robots.txt file of any of that sub-domains.
Is there any way to disallow all the sub-domains from my main domain's physical robots....
- 101
0
votes
0
answers
76
views
Strange Google Behavior with indexing SSL Mismatch content
Here is a strange one for you. We have a server with multiple VHOSTS that include both SSL and Non-SSL domains.
Domain1 is SSL enabled, while Domain2 doesn't have SSL.
Since all these domains are ...
- 1
0
votes
1
answer
572
views
Yandex/Google Bot Spam
I recently logged into a vps I have (with vultr, if that is of any concern). To find a large amount of nginx logs and higher than expected load average. This server is doing effectively nothing, and ...
- 1
-1
votes
1
answer
73
views
40.96.18.165 keeps visiting my web server
Something/someone from 40.96.18.165 has been hitting my web server exactly eight times a day everyday since Feb 5, 2017. The user agent used is Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0).
...
- 397
1
vote
1
answer
2k
views
How many requests can a router handle?
I made a script to scan a file which contains a portion of ipv4 addresses (about 50 million), it attempts to connect to the website using OpenSSL and extract a small piece of it and writes it into a ...
- 113
0
votes
1
answer
192
views
Bots/crawlers adding numbers to GET parameters
I've got some errors showing up in my site logs where some bots are trying to access URLs with strange GET params.
# normal url
example.com?foo=123456
# odd url triggering integer error by bots
...
- 293
2
votes
0
answers
34
views
Barracuda.com and crawling / pinger services causing unusual load on web servers
I recently received a large number of hits on my home page from 64.235.153.8. It revolves to barracuda.com I know Barracuda as an enterprise class spam detection/prevention solution.
Do they also ...
- 151
1
vote
1
answer
3k
views
Bash script - wait for all xargs processes to be finished
I have written a small bash script for crawling an XML sitemap of URLs. It retrieves 5 URLs in parallel using xargs.
Now I want an E-Mail to be sent when all URLs have been crawled, so it has to wait ...
- 322
2
votes
0
answers
2k
views
Block Bad Bots in Nginx for Multiple Sites
I need to block a bunch of robots from crawling a few hundred sites hosted on a Nginx web server running on a Ubuntu 16.04 machine.
I've found a fairly simple example here
(important part of the ...
- 143
-1
votes
0
answers
44
views
Is offering the contents of a third party web site offline violating the law? [closed]
I have developed a nice little app that crawls a bunch of newspaper web sites and makes their latest content available on my phone offline. It's basically a Pocket app that saves contents ...
- 101
12
votes
3
answers
3k
views
How do sites detect bots behind proxies or company networks
How do large sites (e.g. Wikipedia) deal with bots that are behind other IP masker? For instance, in my university, everybody searches Wikipedia, giving it a significant load. But, as far as I know, ...
- 222
1
vote
1
answer
61
views
Suspected malicious activity by one of my site's users; any way to know for sure?
In the course of about 2 hours, a logged in user on my website accessed roughly 1,600 pages in a way that looks suspiciously similar to a bot. I am concerned because users must purchase access to the ...
- 131
2
votes
1
answer
488
views
Q: Strange web traffic - Is this an attack?
I recently noticed some strange traffic in my nginx access logs. I'm not sure if these indicate an attack, a mistake, or something else. I've started sending these to HTTP 444, so these logs will ...
- 23
3
votes
1
answer
836
views
Baidu Spider causing 3Gb of traffic a day - but I do business in China
I'm in a difficult situation, the Baidu spider is hitting my site causing about 3Gb a day worth of bandwidth. At the same time I do business in China so don't want to just block it.
Has anyone else ...
- 357
0
votes
1
answer
447
views
Moved website to new server - updated DNS - web crawlers still hitting old site by IP
About ten days ago I moved a site - mostly a Joomla discussion board - to a new server at a different IP address. During a brief scheduled downtime I replicated the content over and completed DNS ...
- 81
-3
votes
2
answers
95
views
Restricting Access from BOTS
I would like to protect my server from too many hits from Bots.
Considering a scenario, where in a server (physical) located in a private network and hitting my server continuously. Do i have a ...
- 101
0
votes
1
answer
1k
views
Nginx log shows suspicious directory access!!! How to block them?
On my Nginx log recently i have noticed 100's entries like this where a directory search was executed with error, because those directory does not exist on my webserver. now, how can I block them once ...
- 153
2
votes
2
answers
57
views
What's the purpose of spammy HTTP referers?
In the logs of my website, there's a lot of visits with a HTTP referer set to spam-like websites (usually Russian sites, I've noticed). I assume what they're doing is just using a web crawler to visit ...
user280917
1
vote
0
answers
679
views
What are the symptoms of an overloaded webserver
I'm maintaining some web crawlers. I want to improve our load/throttling system to be more intelligent.
Of cause I look at response codes, and throttle up or down based on that. I would though like ...
- 358
0
votes
0
answers
661
views
How to make Google crawl my site using IPv6 address when my domain name has both IPv4 and IPv6 addresses?
My domain name has both IPv4 and IPv6 addresses assigned.
IPv4 connection to Google can't be available all the time due to restrictions of my campus network,
but IPv6 is available all the time.
...
0
votes
1
answer
4k
views
Is it possible to block HTTP traffic from specific machines?
I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...
- 239
0
votes
2
answers
2k
views
Switching between multiple authentication types on same URL
I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
- 1
30
votes
4
answers
9k
views
Does a company have implied right to crawl my website?
I have found out that McAfee SiteAdvisor has reported my website as "may be having security issues".
I care little about whatever McAfee thinks of my website (I can secure it myself and if not, ...
- 487
-8
votes
2
answers
2k
views
Get all urls of a website [closed]
I wanna build a tool which scans a website for all urls, but not the urls within the page but of the site self, but I don't know how. Could anyone give me an example how I can start?
Example: www....
- 11
0
votes
1
answer
591
views
Tool or website to check links
We supply Magento and Typo3 installations to customers. To improve QA we wanted to use an automatic link checker to check for broken and/or outdated links - automatically. We want to check all links ...
- 359
3
votes
1
answer
313
views
Why is googlebot requesting robots.txt from my SSH server?
I run ossec on my server and periodically I receive a warning like this:
Received From: myserver->/var/log/auth.log
Rule: 5701 fired (level 8) -> "Possible attack on the ssh server (or version ...
- 796
-4
votes
1
answer
499
views
is there any web crawler can get access to users region for download? [closed]
Actually I am using Httrack as a web crawler, can it use my credentials to access members area and download the zip files because they are restricted from public access.
Thank you in advance.
...
- 97
2
votes
2
answers
2k
views
Protection against scrapping with nginx
This morning we had a crawler going nuts on our server hitting our site almost 100 times per second.
We'd like to add a protection for this.
I guess I'' have to use HttpLimitReqModule but I don't ...
- 151
0
votes
1
answer
93
views
Referrer in access.log is a directory
It seems that the referrer on the following log is a folder.
112.200.208.5 - - [29/Jul/2013:20:43:14 +0800] "GET /sites/default/files/download/argie/pos-code.zip HTTP/1.1" 206 294677 "http://www....
- 299
1
vote
1
answer
989
views
How to Block Web Crawler from Downloading File
Is it possible to block web crawler from downloading files (like zip file) in my server?
I supposed to create a PHP script using cookies to track visitors specially web crawlers to login/register ...
- 299
1
vote
0
answers
1k
views
How to Exclude Log Using Fail2Ban logpath with Wildcard Settings
I'm using wildcard in the logpath value as shown below:
[http-get-dos]
enabled = true
filter = http-get-dos
logpath = /var/log/ispconfig/httpd/*/access.log
maxretry = 250
findtime = 300
#ban for 10 ...
- 299
1
vote
1
answer
2k
views
How to ban web crawler using fail2ban
I am using nginx and I am always hit by web crawler if I am correct.
I tried to configure fail2ban but the IP address cannot be detected by fail2ban.
The reason that it is not detected because it ...
- 299
0
votes
1
answer
230
views
Is there a chance to block images spiders / bots on dedicated servers without using robots.txt or .htaccess?
We know that we can block certain spiders from crawling websites pages using robots.txt or .htaccess or maybe via the Apache configuration File httpd.conf.
But that requires to edit may be a large ...
- 181