Blocking Multiple User Agents for a Single IP Connection

blu7000 · 22nd May 2019, 15:57

Greetings,

I'm noticing that my shoutcast logs are listing multiple user-agents for individual IP connections. I'm quite certain that these are probably bots sucking endless amounts of bandwidth from my streaming server. Does anyone know a good way to manage this? I try and ban the the IP, but within seconds a new one comes back with multiple user-agents attached to it. I'm attaching a screen shot for reference. Please help!

Thank you!

NurLutix · 22nd May 2019, 19:36

As far as I know, you can block the IP.
If these then come back with a new IP, I would not know any solution for the time being.

blu7000 · 22nd May 2019, 19:44

If you look at the screenshot, you'll see an IP in parenthesis. This is the one that keeps showing up with a different IP listed right above it. I've tried banning, but keeps regenerating a new IP. I'm also seeing that this one connection has the XFF file icon in the log. Maybe that's how it is able to bypass with a spoofed IP. What a pita.

22nd May 2019, 15:57	#1
blu7000 Junior Member Join Date: Apr 2019 Posts: 11	Blocking Multiple User Agents for a Single IP Connection Greetings, I'm noticing that my shoutcast logs are listing multiple user-agents for individual IP connections. I'm quite certain that these are probably bots sucking endless amounts of bandwidth from my streaming server. Does anyone know a good way to manage this? I try and ban the the IP, but within seconds a new one comes back with multiple user-agents attached to it. I'm attaching a screen shot for reference. Please help! Thank you! Attached Thumbnails

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

22nd May 2019, 19:36	#2
NurLutix Senior Member Join Date: Oct 2017 Location: Germany Posts: 146	As far as I know, you can block the IP. If these then come back with a new IP, I would not know any solution for the time being.

22nd May 2019, 19:44	#3
blu7000 Junior Member Join Date: Apr 2019 Posts: 11	If you look at the screenshot, you'll see an IP in parenthesis. This is the one that keeps showing up with a different IP listed right above it. I've tried banning, but keeps regenerating a new IP. I'm also seeing that this one connection has the XFF file icon in the log. Maybe that's how it is able to bypass with a spoofed IP. What a pita.