Live data from Hacker News

Bot vs human traffic

radar.cloudflare.com

51–60 of 88 posts

Re: Bot vs human traffic

#51

One funny thing I've discovered as a result of certificate transparency logs is that the second your host gets given an SSL cert, you are immediately blasted with ai crawlers. I put a project online - it was online for a month, and the second I added an SSL cert it went from 0 traffic to 1000 requests/min.

Make a new certificate, let crawlers blast you and add those IPs to a block list.

Re: Bot vs human traffic

#52

Bot traffic Share of HTTP requests Ranking Location Percentage 1. Gibraltar 92.0% 2. Iran 76.9% 3. Singapore 76.4% 4. Ireland 72.9% 5. Netherlands 68.8% Lol, what is happening?

I do understand why all of those bot scores are so high. But netherlands? Are there big datacenter providers I dont know of that are used by bots?

Re: Bot vs human traffic

#53

One funny thing I've discovered as a result of certificate transparency logs is that the second your host gets given an SSL cert, you are immediately blasted with ai crawlers. I put a project online - it was online for a month, and the second I added an SSL cert it went from 0 traffic to 1000 requests/min.

Make a new certificate, let crawlers blast you and add those IPs to a block list.

these old network security techniques don't really work anymore. the common bots are at known IP ranges, the problem bots are all on datacenter + residential proxies.

Re: Bot vs human traffic

#54

One funny thing I've discovered as a result of certificate transparency logs is that the second your host gets given an SSL cert, you are immediately blasted with ai crawlers. I put a project online - it was online for a month, and the second I added an SSL cert it went from 0 traffic to 1000 requests/min.

Make a new certificate, let crawlers blast you and add those IPs to a block list.

In my experience, these aren't the crawlers from legit companies, so they have infinite IPs via residential botnets/proxies.

edit: 'nikcub beat me to it by 30 seconds :)

Re: Bot vs human traffic

#55

> Percentage of HTTP requests classified as bot (automated) or human. Filtered to HTML responses, representing web page traffic. (Emphasis mine) I realize that this is likely an inherent limitation, but there is a difference between "bot vs human traffic" and "traffic that CF thinks is bot/human". Every time CF blocks me, I assume it claims I'm a bot in this chart.

Cloudflare are more likely to be undercounting bots - they don't really pick up many of the modern browser-driven bots and crawlers.

Re: Bot vs human traffic

#56

Bot traffic Share of HTTP requests Ranking Location Percentage 1. Gibraltar 92.0% 2. Iran 76.9% 3. Singapore 76.4% 4. Ireland 72.9% 5. Netherlands 68.8% Lol, what is happening?

Gib probably has a handful of servers scraping, but the place is so small, it almost it eclipses normal traffic

Tiny peninsula; Six datacenters

The geology of the area seems to make for good cooling and DR sturdiness. One DC is even 500 meters under rock.

https://www.datacentermap.com/gibraltar/gibraltar/

https://www.datacentermap.com/gibraltar/gibraltar/continent8...

Re: Bot vs human traffic

#57

Bot traffic Share of HTTP requests Ranking Location Percentage 1. Gibraltar 92.0% 2. Iran 76.9% 3. Singapore 76.4% 4. Ireland 72.9% 5. Netherlands 68.8% Lol, what is happening?

Gib probably has a handful of servers scraping, but the place is so small, it almost it eclipses normal traffic

I'm also quite skeptical of the IP databases ability to get this correct in border regions. All of Gibraltar is, necessarily, near its borders.

Re: Bot vs human traffic

#58
post #52

Bot traffic Share of HTTP requests Ranking Location Percentage 1. Gibraltar 92.0% 2. Iran 76.9% 3. Singapore 76.4% 4. Ireland 72.9% 5. Netherlands 68.8% Lol, what is happening?

I do understand why all of those bot scores are so high. But netherlands? Are there big datacenter providers I dont know of that are used by bots?

[dead]

Re: Bot vs human traffic

#59
post #55

> Percentage of HTTP requests classified as bot (automated) or human. Filtered to HTML responses, representing web page traffic. (Emphasis mine) I realize that this is likely an inherent limitation, but there is a difference between "bot vs human traffic" and "traffic that CF thinks is bot/human". Every time CF blocks me, I assume it claims I'm a bot in this chart.

Cloudflare are more likely to be undercounting bots - they don't really pick up many of the modern browser-driven bots and crawlers.

I'm quite happy to believe that it's unreliable in both directions.

Re: Bot vs human traffic

#60

> Percentage of HTTP requests classified as bot (automated) or human. Filtered to HTML responses, representing web page traffic. (Emphasis mine) I realize that this is likely an inherent limitation, but there is a difference between "bot vs human traffic" and "traffic that CF thinks is bot/human". Every time CF blocks me, I assume it claims I'm a bot in this chart.

I do sometimes get blocked as a bot. I have no idea how many false positives there are, but there are some and CF does assume there are none in all their numbers (e.g. email saying they block x bots).
Post reply on HN