Spammers galore

[youradds]

Hi,

We are getting a LOT of fake traffic it seems. I've been blocking stuff in Cloudflare with rules, but there are still so many getting through.

Clearly spammers with fake UA's, as there is no way someone would hit 2 and 3 pages with 1 second between. I've been blocking hosting AS blocks like https://ipinfo.io/AS47583 (of which an IP was probing the site). But surely there is a better way?

Cheers

Andy

[youradds]

I realised that the spam was coming from api requests sent with fake referers. So I added this in to my nginx config:

    location = /api/event {
        if ($http_origin = "") {
            return 403;
        }

        if ($http_origin !~* "^https://(mysite\.com|www\.mysite\.com)$") {
            return 403;
        }

        proxy_pass http://127.0.0.1:8000;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

It seems to be doing the job now. I thought I would post it here in case it helps anyone in the future

Cheers

Andy