Go Back   vb.org Archive > Community Discussions > Forum and Server Management
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 01-08-2015, 04:31 AM
WeeeBen WeeeBen is offline
 
Join Date: Jan 2013
Posts: 30
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default a thousand visitors

Is my forum being hacked or something?

I have almost 1000 visitors on my forum, growing every minute.

could this be a problem for my forum?
the forum is running fine it;s just that I average around 50 visitors at a time, to see almost 900 now is a bit worrying, how many more will they do?

Should I be blocking the IP address?
Reply With Quote
  #2  
Old 01-08-2015, 08:31 AM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Screenshot of online users or at least a link hard to work with nothing
Reply With Quote
  #3  
Old 01-08-2015, 08:34 AM
RichieBoy67's Avatar
RichieBoy67 RichieBoy67 is offline
 
Join Date: Apr 2004
Location: CT - Down in a hole..
Posts: 3,057
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Most likely search bots and your cache setting being too high.
Reply With Quote
  #4  
Old 01-08-2015, 09:20 AM
Dave Dave is offline
 
Join Date: May 2010
Posts: 2,583
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Either you are being flooded by bots or someone is DDoSing your forum with HTTP GET/POST floods.
Reply With Quote
Благодарность от:
RichieBoy67
  #5  
Old 01-08-2015, 09:35 AM
RichieBoy67's Avatar
RichieBoy67 RichieBoy67 is offline
 
Join Date: Apr 2004
Location: CT - Down in a hole..
Posts: 3,057
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Easy check would be to look at your server logs.
Reply With Quote
  #6  
Old 01-08-2015, 09:37 AM
WeeeBen WeeeBen is offline
 
Join Date: Jan 2013
Posts: 30
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The're all like this..

209.190.82.211
d3.52.be.static.xlhost.com

209.190.82.115
73.52.be.static.xlhost.com

209.190.82.27
1b.52.be.static.xlhost.com

209.190.44.166
a6.2c.be.static.xlhost.com

209.190.43.38
26.2b.be.static.xlhost.com

It went away after an hour but now it's back and even more.

I even reduced cache setting time but there's about 5 different IP's coming in at the same minute, every minute.

Could it have something to do with installing bing ad's? I just did that today but bing send bots already titled bing bot, those IP addresses above don't show they are bots do they?

--------------- Added [DATE]1420717146[/DATE] at [TIME]1420717146[/TIME] ---------------

947 of em now

--------------- Added [DATE]1420717235[/DATE] at [TIME]1420717235[/TIME] ---------------

I contacted my host about them and they say there's no affect to my website.everything still loads up ok.

--------------- Added [DATE]1420717343[/DATE] at [TIME]1420717343[/TIME] ---------------


--------------- Added [DATE]1420717548[/DATE] at [TIME]1420717548[/TIME] ---------------

Quote:
Originally Posted by RichieBoy67 View Post
Easy check would be to look at your server logs.
I tried that recently about another issue but it was all mumbo jumbo to me.

--------------- Added [DATE]1420717903[/DATE] at [TIME]1420717903[/TIME] ---------------

It's almost like someone's playing a game to get my most ever users to over 1000, I reset it before and now they got it back up to 1000 and appear to be dropping off again.

aside from that I can't see what the point of it is, why would anyone bother doing that?
Reply With Quote
  #7  
Old 01-08-2015, 10:04 AM
RichieBoy67's Avatar
RichieBoy67 RichieBoy67 is offline
 
Join Date: Apr 2004
Location: CT - Down in a hole..
Posts: 3,057
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

You really need to see more detail on what they are doing if concerned and you cannot do that without seeing your server logs. Open your log and search for the ips and look to see what the urls they are hitting look like.

If they are doing some kind of a probe you can just ban those ips.

Feel free to post your log here so we can see.
Reply With Quote
  #8  
Old 01-08-2015, 10:18 AM
WeeeBen WeeeBen is offline
 
Join Date: Jan 2013
Posts: 30
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

yeah I can't do it, I tried to save the file and extract it and it ends up as a windows media file.
too complicated for me, guess i'll just have to put up with it.

In the visitor log I can see that each IP goes to a different thread.

--------------- Added [DATE]1420719558[/DATE] at [TIME]1420719558[/TIME] ---------------

There gone now anyway, went from 1090 users to now just 24
Reply With Quote
  #9  
Old 01-10-2015, 02:24 AM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Has this happened again yet?
Reply With Quote
  #10  
Old 01-12-2015, 03:48 AM
WeeeBen WeeeBen is offline
 
Join Date: Jan 2013
Posts: 30
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Happened next day again. They haven't been back like that since but are always online, just a few of them now but constant.

It could of been media.net who do bing ads, they may of been scanning all my pages as I opened up an account at the same time.

I reckon that's who it is since they are still around now, only 3 or 4 though.
Reply With Quote
Благодарность от:
ozzy47
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:31 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04698 seconds
  • Memory Usage 2,253KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (2)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (2)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete