Supreme [HELP REQUEST] How to bypass rate limit (without proxies)

[938]

Hi there, how can I bypass the rate limit on https://pcsupport.lenovo.com/us/en/products/
After a few thousand requests, naturally I get banned/rate limited. How can I bypass this WITHOUT proxies?


I'm coding in javascript using axios.get

---

Fixed with basic solution for now that'll hold up for a while

[1.557]

If you're being rate limited and it's strictly IP based, I'm not sure if there's a way around it without throttling requests or introducing proxies. They likely have some kind of "smart" WAF though that factors in a other things besides the source IP address. Generally speaking, if you *have* to use the same IP for a bunch of requests, try to make it seem more legitimate, and that the site is not under attack. Not knowing what you're trying to accomplish and types of requests, I would try to make it appear as though they're coming from a corporation where a large number of employees are hitting the website for some reason.

A few things you can try...
+ Introduce requests to other site pages between requests to the target URL - these are sometimes referred to as safe URL's.
+ Rotating user agents on requests to give the appearance that requests are coming from multiple machines / browsers.
+ Clear cookies after each request or batch of requests to get new session id's.
+ Introduce a random short delay between requests (technically throttling, however it will make your requests appear more natural and less like a bot).

[938]

If you're being rate limited and it's strictly IP based, I'm not sure if there's a way around it without throttling requests or introducing proxies. They likely have some kind of "smart" WAF though that factors in a other things besides the source IP address. Generally speaking, if you *have* to use the same IP for a bunch of requests, try to make it seem more legitimate, and that the site is not under attack. Not knowing what you're trying to accomplish and types of requests, I would try to make it appear as though they're coming from a corporation where a large number of employees are hitting the website for some reason.

A few things you can try...
+ Introduce requests to other site pages between requests to the target URL - these are sometimes referred to as safe URL's.
+ Rotating user agents on requests to give the appearance that requests are coming from multiple machines / browsers.
+ Clear cookies after each request or batch of requests to get new session id's.
+ Introduce a random short delay between requests (technically throttling, however it will make your requests appear more natural and less like a bot).

Thank you very much for this!
I've looked around and found out they use edgesuite which captures loads of details (see http://m.edgesuite.net/ to see all that they collect). But yes, thanks I'll have a look and give some of these a shot.