How You Secure Your Website From Bots, Proxy and VPN Traffic?

[PlusMein]

Hello,
One of our SaaS businesses that have restricted countries where we are not interested in work, or we see that from those countries we have a massive amount of spam or fraud, scam activity.
We use Cloudflare premium, but it will not help us to secure the website from some bots, proxies, and VPN traffic.

So I would like to ask whether you know some services or have experience protecting the website from such kind of traffic?
As well, what kind of security method do you as well use on your website?

 

[sscaz]

Hello,
One of our SaaS businesses that have restricted countries where we are not interested in work, or we see that from those countries we have a massive amount of spam or fraud, scam activity.
We use Cloudflare premium, but it will not help us to secure the website from some bots, proxies, and VPN traffic.

So I would like to ask whether you know some services or have experience protecting the website from such kind of traffic?
As well, what kind of security method do you as well use on your website?

I did it with cloudflare rules on free plan without problem but it took me days to figure out how to make those rules

 

[PlusMein]

I did it with cloudflare rules on free plan without problem but it took me days to figure out how to make those rules

What do you mean? Standard security - yes, CF is an excellent tool for protection. But are you sure that you can protect the website from Proxy and VPN traffic in CF?

 

[sscaz]

What do you mean? Standard security - yes, CF is an excellent tool for protection. But are you sure that you can protect the website from Proxy and VPN traffic in CF?

Yeah i can even block entire countries while letting good google bots in

 

[gooddevxd]

If you have a big budget Datadome is the best, but it's still not perfect. There is plenty of APIs to detect VPN/non-4G proxies.

If you're facing an experienced attacker using 4G proxy and good bots, it's gonna be hard to detect, I would look into what make their bots distinguishable(referral, fingerprint, pattern of actions, weird mouse movements)

 

[PlusMein]

Yeah i can even block entire countries while letting good google bots in

We blocked the countries, IPs, and set-upped many other things, but as I told are you sure that you can face proxy and VPN traffic blocking via the CF? If you know how to do this, please let me know. Thanks

 

[PlusMein]

If you have a big budget Datadome is the best, but it's still not perfect. There is plenty of APIs to detect VPN/non-4G proxies.

If you're facing an experienced attacker using 4G proxy and good bots, it's gonna be hard to detect, I would look into what make their bots distinguishable(referral, fingerprint, pattern of actions, weird mouse movements)

many thanks.