{"id":123874,"date":"2025-04-30T09:05:06","date_gmt":"2025-04-30T07:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ispolzovanie-zip-bomby-dlya-borby-s-vredonosnymi-web-botami"},"modified":"2025-04-30T09:05:06","modified_gmt":"2025-04-30T07:05:06","slug":"ispolzovanie-zip-bomby-dlya-borby-s-vredonosnymi-web-botami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ispolzovanie-zip-bomby-dlya-borby-s-vredonosnymi-web-botami","title":{"rendered":"Utilizarea bombei zip pentru combaterea bot-urilor web mali\u021bioase","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Recent times have seen a significant increase in the activity of web bots indexing traffic. In addition to properly functioning bots, there has been a rise in 'rampant' bots that ignore the indexing rules of robots.txt, crawling from tens of thousands of different IPs, pretending to be legitimate users and disregarding reasonable request rate policies. These bots create a huge parasitic load on servers, disrupt the normal functioning of systems, and waste administrators' time. The activity of such bots is perceived by many as malicious actions. <\/p>\n
As a measure to slow down the operation of such bots, as well as bots scanning unpatched vulnerabilities in typical web applications, one of the administrators proposed a method called 'zip bombs'. The essence of the method is that in response to a page request, the web bot is sent content efficiently compressed by the 'deflate' method, where the size upon unpacking greatly exceeds the size of data sent over the network. For example, using the 'deflate' method, content from \/dev\/zero packed in 10 MB will require 1 GB of disk space upon unpacking. By using the 'brotli' compression method, they achieved a level where transferring 81 MB results in unpacking 100 TB of data. <\/p>\n
This type of protection can be activated by creating traps that are accessible via invisible links marked with the flag \u2018rel=\u2019nofollow\u2019\u2019, excluded from indexing via robots.txt, and triggered at a sufficiently high level of recursion for bots attempting to pretend to be ordinary users. In practice, it is not recommended to use the proposed method, as the site may be blacklisted by Google and will start being marked as malicious in the Chrome browser with 'Safe Browsing' mode enabled. \n Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"