Live data from Hacker News

Amazon's AI crawler is making my Git server unstable

xeiaso.net

171–180 of 261 posts

Re: Amazon's AI crawler is making my Git server unstable

#171
post #84

Earlier quoted context omitted.

I worked for Microsoft doing malware detection back 10+ years ago, and questionably sourced proxies were well and truly on the table

>> but the point is that big company crawlers aren’t paying for questionably sourced residential proxies. > I worked for Microsoft doing malware detection back 10+ years ago, and questionably sourced proxies were well and truly on the table Big Company Crawlers using questionably sourced proxies - this seems striking. What can you share about it?

They worked on malware detection. The most likely reason is very obvious: if you only allow traffic from residential addresses to your Command & Control server, you make anti-malware research (which is most likely coming from either a datacenter or an office building) an awful lot harder - especially when you give non-residential IPs a different and harmless response instead of straight-up blocking them.

Re: Amazon's AI crawler is making my Git server unstable

#172
post #133

It's time for a lawyer letter. See the Computer Fraud and Abuse Act prosecution guidelines.[1] In general, the US Justice Department will not consider any access to open servers that's not clearly an attack to be "unauthorized access". But, "However, when authorizers later expressly revoke authorization—for example, through unambiguous written cease and desist communications that defendants receive and understand—the…

Honestly, I figure that being on the front page of Hacker News like this is more than shame enough to get a human from the common sense department to read and respond to the email I sent politely asking them to stop scraping my git server. If I don't get a response by next Tuesday, I'm getting a lawyer to write a formal cease and desist letter.

Someone from Amazon already responded: https://news.ycombinator.com/item?id=42751729

> If I don't get a response by next Tuesday, I'm getting a lawyer to write a formal cease and desist letter.

Given the details, I wouldn’t waste your money on lawyers unless you have some information other than the user agent string.

Re: Amazon's AI crawler is making my Git server unstable

#173

I don’t think I’d assume this is actually Amazon. The author is seeing requests from rotating residential IPs and changing user agent strings > It's futile to block AI crawler bots because they lie, change their user agent, use residential IP addresses as proxies, and more. Impersonating crawlers from big companies is a common technique for people trying to blend in. The fact that requests are coming from residential…

I work for Amazon, but not directly on web crawling. Based on the internal information I have been able to gather, it is highly unlikely this is actually Amazon. Amazonbot is supposed to respect robots.txt and should always come from an Amazon-owned IP address (You can see verification steps here: https://developer.amazon.com/en/amazonbot ). I've forwarded this internally just in case there is some crazy internal tea…

Randomly selected IPs from my logs show that 80% of them have the matching that forward confirming reverse DNS domain. The most aggressive ones were from the amazonbot domain.

Believe what you want though. Search for `xeiaso.net` in ticketing if you want proof.

Re: Amazon's AI crawler is making my Git server unstable

#174
post #136

Earlier quoted context omitted.

IA actually has technical and moral reasons to ignore robots.txt. Namely, they want to circumvent this stuff because their goal is to archive EVERYTHING.

Isn’t this a weak argument? OpenAI could also say their goal is to learn everything, feed it to AI, advance humanity etc etc.

OAI is using others' work to resell it in models. IA uses it to presrrve the history of the web

there is a case to be made about the value of the traffic you'll get from oai search though...

Re: Amazon's AI crawler is making my Git server unstable

#175
post #133

Earlier quoted context omitted.

Honestly, I figure that being on the front page of Hacker News like this is more than shame enough to get a human from the common sense department to read and respond to the email I sent politely asking them to stop scraping my git server. If I don't get a response by next Tuesday, I'm getting a lawyer to write a formal cease and desist letter.

Lol you really think an ephemeral HN ranking will make change?

It did yesterday!

https://news.ycombinator.com/item?id=42740516

Re: Amazon's AI crawler is making my Git server unstable

#176
post #160

It's been pounding one of my sites too. Here's the url it's trying to get to. I wonder if someone will ever figure it out and stop it. > /wp-content/uploads/2014/09/contact-us/referanslar/petrofac/wp-content/uploads/2014/09/products_and_services/products_and_services/catalogue/references/capabilities/about-company/wp-content/uploads/2014/09/wp-content/themes/domain/images/wp-content/uploads/2014/09/wp-content/uploads…

I bet that URL (or a predecessor) resolves to a 404 page that has a broken link on it. technically your problem.

Re: Amazon's AI crawler is making my Git server unstable

#177
I’m working on a centralized platform[1] to help web crawlers be polite by default by respecting robots.txt, 429s, etc, and sharing a platform-wide TTL cache just for crawlers. The goal is to reduce global bot traffic by providing a convenient option to crawler authors that makes their bots play nice with the open web.

[1] https://crawlspace.dev

Re: Amazon's AI crawler is making my Git server unstable

#178
post #173

Earlier quoted context omitted.

I work for Amazon, but not directly on web crawling. Based on the internal information I have been able to gather, it is highly unlikely this is actually Amazon. Amazonbot is supposed to respect robots.txt and should always come from an Amazon-owned IP address (You can see verification steps here: https://developer.amazon.com/en/amazonbot ). I've forwarded this internally just in case there is some crazy internal tea…

Randomly selected IPs from my logs show that 80% of them have the matching that forward confirming reverse DNS domain. The most aggressive ones were from the amazonbot domain. Believe what you want though. Search for `xeiaso.net` in ticketing if you want proof.

Reverse DNS doesn't mean much, they can set it to anything; can you forward match them to any amazon domain?

Re: Amazon's AI crawler is making my Git server unstable

#179

I’m working on a centralized platform[1] to help web crawlers be polite by default by respecting robots.txt, 429s, etc, and sharing a platform-wide TTL cache just for crawlers. The goal is to reduce global bot traffic by providing a convenient option to crawler authors that makes their bots play nice with the open web. [1] https://crawlspace.dev

How does it compare to common crawl?

Re: Amazon's AI crawler is making my Git server unstable

#180
post #178
post #173

Earlier quoted context omitted.

Randomly selected IPs from my logs show that 80% of them have the matching that forward confirming reverse DNS domain. The most aggressive ones were from the amazonbot domain. Believe what you want though. Search for `xeiaso.net` in ticketing if you want proof.

Reverse DNS doesn't mean much, they can set it to anything; can you forward match them to any amazon domain?

It's forward confirming reverse DNS. I assumed that everyone does that by default.
Post reply on HN