Page MenuHomePhabricator

Improve Bot Detection Heuristics
Closed, DuplicatePublic

Description

This is an epic to address a number of issues and proposed improvements related to bot detection.

Event Timeline

I recently discovered the public_cloud key in X-Analytics. If I understand it correctly, it might be a simple additional heuristic to just label all of that traffic as likely automated (given that it's coming via Google/Amazon/Microsoft/etc. cloud)? Or would that capture a bunch of proxies too used by actual readers?

I also found T326337 and T326339 which presumably should be linked here too as subtasks?

In 2023 pageview data, we are seeing spikes in automated traffic that are now affecting external (search engine) referrer traffic (chart)

image.png (2,276×1,540 px, 297 KB)

We need to improve bot detection as most of the traffic seems to be coming from a few UAs (like Chrome 111 on Android 10) look pretty clearly like human traffic, which also means we need to re-prioritize our work on T295073 as the cause seems to be that the implementation by Chrome of the more generic user-agent seems to finally be rolling out (timeline) and so is breaking the bot detection pipelines in pretty significant ways .

Update:
Automated traffic spikes we saw in March continued into April 2023. We observed that automated traffic which usually shows up as None or Direct referer traffic is dropping and subsequently increasing in External Search Engine referer traffic. (chart)

Screenshot 2023-05-23 at 3.14.52 PM.png (1,605×800 px, 131 KB)