how to detect hitbots?

[alex79]

what is the easyest way to detect if somebody is hitboting u and what trade is sending hitbot?

Well, easy way check:
1. % of proxy (not more 20%)
2. Click ratio (not each surver click on your site)

[HarlotCash Dyker]

Here is a good test -
If you think you are being hit botted - Take out your normal page and put in a page with a full page add - (shtml with the <include...

Then re-set all of your trades - Now, it should only register incoming - and nothing back to your trades -
Anything other than that - Then someone is hitbotting you - (Not always a trade that does the hitbotting -

Also - if your referral ip log looks something like this:
Incoming Outgoing IP Address
46 30 81.15.165.9
42 1 80.53.24.210
33 2 80.55.120.42
21 1 62.233.153.66
15 3 62.121.96.16
14 1 212.160.3.127
13 0 80.55.228.2
13 5 80.53.44.34
12 0 82.64.187.97
12 0 62.179.0.13
12 0 156.17.122.127
11 0 212.137.59.69
10 0 194.204.171.38
10 0 62.233.233.10
10 3 62.233.149.234
9 28 217.98.136.164
9 0 80.49.167.150
9 0 62.87.130.54
9 0 217.113.225.82
9 0 81.219.168.18
9 2 80.52.5.91
8 0 213.77.231.154
8 1 195.135.236.4
8 0 80.54.82.66
8 0 80.53.164.242
8 0 80.55.51.2
7 0 193.219.28.146
7 0 80.219.122.150
7 0 81.210.69.253
7 0 80.54.137.96
7 0 213.25.252.87
7 22 195.205.227.2
7 0 80.54.162.140
7 0 62.21.0.202
7 0 217.99.112.229
6 0 195.136.126.67
6 0 149.156.157.210
6 1 212.76.39.2
6 0 80.53.37.146
6 0 81.210.125.21
6 0 80.50.109.56
6 0 83.27.241.153
6 0 213.199.197.98
6 0 81.15.150.20
6 0 80.54.140.43
6 0 80.53.233.162
5 1 195.245.226.242
5 0 83.30.30.234
5 0 80.51.195.202
5 3 80.108.88.140
5 0 195.187.92.151
5 0 80.54.185.91
5 0 217.97.33.114
5 0 81.219.97.251
5 0 212.14.47.29
5 0 83.27.29.140
5 0 80.55.233.198
5 0 80.49.121.106
5 1 212.244.158.153
5 0 195.117.137.92
5 0 212.244.177.99
5 0 213.17.193.155
4 0 213.76.130.82
4 8 212.76.33.74
4 0 213.17.150.42
4 0 195.114.179.26
4 0 62.233.138.50
4 0 80.50.242.3
4 0 213.77.156.153
4 133 219.103.125.118
4 0 80.53.15.34
4 0 217.113.228.184
4 0 212.244.75.1
4 15 213.251.101.83
4 0 194.29.137.75
4 0 81.186.234.65
4 0 81.168.168.94
4 0 80.54.142.123
4 2 81.168.176.248
4 0 62.233.204.154
4 0 217.97.11.77
4 0 212.160.158.242
4 1 81.190.18.26
4 0 80.53.75.114
4 0 80.49.9.245
4 0 217.173.196.3
4 0 80.55.64.226
3 0 80.49.9.98
3 0 81.15.211.2
3 0 213.17.230.246
3 0 62.233.192.38
3 0 81.210.11.250
3 0 213.134.169.37
3 0 217.173.196.2
3 0 217.11.141.202
3 0 62.179.81.219
3 0 213.17.219.45
3 0 212.76.33.66
3 0 80.55.202.242
3 0 80.48.154.2
3 0 80.51.241.42
3 0 80.54.114.60
3 0 80.51.203.188
3 0 80.55.56.242
3 0 213.76.144.148
3 0 62.233.231.6
3 0 212.76.33.75
3 0 212.244.154.66
3 0 62.233.233.58
3 0 80.54.72.22
3 0 62.179.0.61
3 5 213.76.28.218
3 0 213.77.230.251
3 0 62.233.196.188
3 0 217.153.81.246
3 0 212.76.33.65
3 5 80.55.35.94
3 0 80.53.29.246
3 0 212.33.82.6
3 2 80.51.249.122
3 0 80.55.185.66
3 0 217.97.147.210
3 0 156.17.52.68
3 0 193.91.30.210
3 0 195.205.163.242
3 0 62.233.185.58
3 0 217.99.18.209
3 0 217.99.92.231
3 0 217.153.159.3
3 1 62.233.235.122
3 0 62.111.216.226
3 0 193.108.228.155
3 0 212.182.119.210
3 0 213.227.72.54
3 0 82.143.154.74
3 5 83.28.2.108
3 0 62.233.233.118
3 0 217.98.238.28
3 0 194.149.228.178
3 0 212.14.47.202
3 0 213.199.214.33
3 1 80.53.252.10
3 0 80.51.255.10
3 2 80.49.30.128
3 0 62.111.198.22
2 0 217.98.57.129
2 0 62.179.10.117
2 0 217.98.105.254
2 0 80.50.142.180
2 0 81.210.9.67


Then - You know you got a bot on your page... (This is off a single ad page as I removed the cj site 3 days ago - And the bot is still running!!!)

[alex79]

what about this method?

add a hiden link on your page and see what domain refferers click on that link..

will be this a good hitbot detection method?

[fvurakki]

What the hell is a hitbot???

[HarlotCash Dyker]

Originally posted by alex79
what about this method?

add a hiden link on your page and see what domain refferers click on that link..

will be this a good hitbot detection method?

Theory sounds ok -
But I think hitbotters tend to work on known links - Set this into their shitbot programme and let it run

[kios]

study the logs carefully! its the only way to detect it... scan suspecting ip:s and try to detect if its proxys.