| View previous topic :: View next topic |
| Author |
Message |
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location: 
|
 Posted: Sat Jan 20, 2007 6:34 pm Post subject: Something fishy going on |
 |
|
Does anybody know what's the story with "marketing.internet-publications.net". I notice them creating unusually high downloading from my site (this month already 234285 KB = 22.7 %) plus an unusually high views count (now 10604) on a nonsense topic (http://www.korat-info.com/forum/viewtopic.php?t=353), that had been started by somebody from their IP (67.15.118.17).
There's gotta be something wrong!
Klaus
_________________
Thailand Forum - Korat Forum.. |
|
| Back to top |
|
 |
Mike
Site Admin
Joined: 07 Sep 2004
Posts: 4512
Location:
|
|
| Back to top |
|
|
Mike
Site Admin
Joined: 07 Sep 2004
Posts: 4512
Location:
|
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
| Posted: Sat Jan 20, 2007 7:24 pm Post subject: |
|
|
Nobody I know, though in the recess of my memory I think I saw that nick on another forum before. I thought of the whole thing as harmless before, somebody who's so bored that he keeps playing nonsense clicking. But noticing the download volume and the name "marketing.internet-publications.net" made me wonder. 
_________________
Thailand Forum - Korat Forum.. |
|
| Back to top |
|
|
Mike
Site Admin
Joined: 07 Sep 2004
Posts: 4512
Location:
|
| Posted: Sat Jan 20, 2007 7:28 pm Post subject: |
|
|
did a search for suburban eskimo
is a spammer on many websites
i would delete that user and his post and see what happens to the download stats
_________________
Asia Expats Forum
Expat Friends Dating |
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
| Posted: Sat Jan 20, 2007 7:35 pm Post subject: |
|
|
Funny thing is that he did not post any spam on my site, just seems to have clicking software running on that thread. Deleting him as user wouldn't help. He never logs in, but that IP Nr. is present very often. The webstats also don't count any visits from that adress, just downloading volume, files and hits. Visits = 0. Banning that url might help. What the hell is that guy up to?
So, "marketing.internet-publications.net" isn't something that needs access to my site?
_________________
Thailand Forum - Korat Forum..
Last edited by KoratCat on Sat Jan 20, 2007 7:45 pm; edited 1 time in total |
|
| Back to top |
|
|
Mike
Site Admin
Joined: 07 Sep 2004
Posts: 4512
Location:
|
| Posted: Sat Jan 20, 2007 7:41 pm Post subject: |
|
|
I'll admit
I dont understand what is happening on your site--but I would block that user and anything associated with that user
_________________
Asia Expats Forum
Expat Friends Dating |
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
| Posted: Sat Jan 20, 2007 7:55 pm Post subject: |
|
|
And upon entering the hostname for banning it displayed another IP: 72.249.26.23, meaning that host does have more IPs than only 67.15.118.17, or they have a way to conceal their real IP.
_________________
Thailand Forum - Korat Forum.. |
|
| Back to top |
|
|
Mike
Site Admin
Joined: 07 Sep 2004
Posts: 4512
Location:
|
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
|
| Back to top |
|
|
CoffeeBreak
Novice
Joined: 24 Jan 2007
Posts: 30
Location:
|
| Posted: Wed Jan 24, 2007 5:21 pm Post subject: |
|
|
If that IP is eating up bandwidth as well it could be something to do with a DDOS attack maybe
As Mike suggested, I would ban the IP |
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
| Posted: Wed Jan 24, 2007 9:41 pm Post subject: |
|
|
I banned not only one IP associated to that guy, all!
What is a DDOS attack?
_________________
Thailand Forum - Korat Forum.. |
|
| Back to top |
|
|
CoffeeBreak
Novice
Joined: 24 Jan 2007
Posts: 30
Location:
|
| Posted: Thu Jan 25, 2007 6:05 am Post subject: |
|
|
| DOS means "denial of service attack" which is caused by thousands of zombie computers affected by spyware or a virus targeting a website eating up its bandwidth. This often results in the host taking the site offline until the attack finishes, this is to keep other sites on the same server online. A host should be able block an attack by filtering and blocking the IPs that the attack is coming from |
|
| Back to top |
|
|
KoratCat
Centurion
Joined: 26 Mar 2006
Posts: 640
Location:
|
| Posted: Thu Jan 25, 2007 11:04 am Post subject: |
|
|
Considering the title "Website down?!" he gave that thread this was obviously the intention of the guy. He just didn't have enough capacity to succeed. But I heard of another website here that had this kind of problem . . . Webmaster had to pay for more bandwith to get it running again.
That's just an argument not to allow uploading of pics etc. by posters on your website. Downloading those creates much higher bandwidth use and might cause problems. 
_________________
Thailand Forum - Korat Forum.. |
|
| Back to top |
|
|
CoffeeBreak
Novice
Joined: 24 Jan 2007
Posts: 30
Location:
|
| Posted: Thu Jan 25, 2007 11:33 am Post subject: |
|
|
Yep its a good idea NOT to allow uploads, then if people wanted to post pics etc they could post them via urls or image shack or something like that  |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Album
FAQ
Quizzes
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
