What's going on with my site

[SuperJETT]

www.superjett.com

Some people in/around Moscow are downloading 15 and 20Gb per day from my site, so I took the entire site offline for a few days to get a handle on things. I may change things around too where you HAVE to save the videos instead of being able to view them from the server.

I have to dig through the logs to see what was really going on, but for now my site is offline, sorry if this affects anyone.

Darin

 

[MADMAT]

WOW! What were they doing?!?

 

[Frosty]

I know, them crazy Ruskies... what's up with that shiite!

 

[SuperJETT]

Here's the thing, 20.58Gb by one IP address in a single day.

I'm on a T1, which maxes at about 180Kb/sec.

180Kb/sec
10.8Mb/min
648Mb/hr
15.55Gb/day

20.58Gb in one day, just for that IP, but I should theoretically max at around 15Gb for ALL traffic in one day. Doesn't make sense. Even being generous and saying 200Kb/sec only gets me to 17.3Gb in a day.

 

[Frosty]

I'm not a computer tech guy, but something sounds really strange.

 

[SuperJETT]

Yeah, plus add in the fact that my stats show

hits  files     Kb    visits     IP[SIZE=-1][B]
 810[/B][/SIZE]   [SIZE=-1][B] 810[/B][/SIZE]  [SIZE=-1][B]  20.58 Gb[/B][/SIZE]    [SIZE=-1][B]0[/B][/SIZE]  [SIZE=-1]  83.237.104.189

 [/SIZE][SIZE=-1][B]513[/B][/SIZE]    [SIZE=-1][B]504[/B][/SIZE]    [SIZE=-1][B]14.72 Gb[/B][/SIZE]    [SIZE=-1][B]1[/B][/SIZE]  [SIZE=-1]  83.237.48.128[/SIZE]

 [SIZE=-1][B] 94[/B][/SIZE]   [SIZE=-1][B]  94[/B][/SIZE]  [SIZE=-1][B]   3.41 Gb[/B][/SIZE]    [SIZE=-1][B]0[/B][/SIZE]    [SIZE=-1]85.140.173.189[/SIZE]

0 visits???

 

[Frosty]

Now that's crazy bro... :bigeyes:

 

[vomitspot]

Umm What?

 

[Jr.]

Really doesn't surprise me........... The freestyle movement is as big, if not bigger in Russia right now.................. there have been several teams from here, going to train riders over there...... Big name teams!!
It's also reflected in the amount of motor inquiries I have been getting.
If the world is worried about this Brit kid...... Watch out! The Russians are coming!!

 

[MADMAT]

Really doesn't surprise me........... The freestyle movement is as big, if not bigger in Russia right now.................. there have been several teams from here, going to train riders over there...... Big name teams!!
It's also reflected in the amount of motor inquiries I have been getting.
If the world is worried about this Brit kid...... Watch out! The Russians are coming!!

That is so killer!!! We are at the infancy of big surf freeridin'!!

 

[Frosty]

Yeah, Rick Roy was over in Russia for a while training some kids.

 

[jetskier79]

not sure what you are using for your stats....but one of my stat programs doesn't do very well keeping track of actual data served to individual IPs. Mine makes some general guesstimation based on the number of times a file transfer is started and the size of the file (I think). The numbers from my stats never matches the number my hosting provider tracks.

 

[SuperJETT]

not sure what you are using for your stats....but one of my stat programs doesn't do very well keeping track of actual data served to individual IPs. Mine makes some general guesstimation based on the number of times a file transfer is started and the size of the file (I think). The numbers from my stats never matches the number my hosting provider tracks.

I'm using Webalizer on this one, and it's one of my servers here at work, so I don't have provider stats to compare with. It's a dedicated T-1, maxes at like 175Kb/sec (1.5mbps). The problem is I need to keep some of the bandwidth available for "real" use and for someone to be pulling that much which is pretty much all day, and I only have like 4Gb TOTAL on my site, is ridiculous. I may have to limit Apache to 50% bandwidth or something.

 

[WAB]

Disclaimer: I don't know anything about this stuff, but just had an idea.
Maybe you can disable the left mouse button on the video pages? So they can't just click to view, it must be left clicked and saved? Some sites have the right button disabled so you can't copy & paste, maybe you can do that with the right button. ?

 

[onesojourner]

just put them in zip files so you have no other option other than save it.

 

[SuperJETT]

Disclaimer: I don't know anything about this stuff, but just had an idea.
Maybe you can disable the left mouse button on the video pages? So they can't just click to view, it must be left clicked and saved? Some sites have the right button disabled so you can't copy & paste, maybe you can do that with the right button. ?

I acknowledge the disclaimer.

As far as disabling the right button, anyone can get around that, Firefox allows you to disable the disabling, plus you can always view the source for a page to see the location of stuff, etc.

My goal is to allow anyone/everyone to see the videos, but when certain people/places/etc abuse it, it makes everyone suffer. I've always said as soon as the videos cause a problem with our company's circuit, they are gone. I'm hoping I can bring them back in a few days and not have the problem, or at least isolate it.

Honestly, I'm worried it's something else, like a security hole in Apache or something that is being taken advantage of, so i really do need to update/verify everything. I will probably update to the latest Apache tomorrow.

 

[Glory_Freestyle]

One other thought, unless you're positive they're downloading the videos, check for any unfamiliar files. We had a problem a while back where some jack-off sniffed out a web server that we were just beginning to build, and uploaded a bunch of game files, in effect, using it as their personal FTP server so all their buddies could download and trade the games.

 

[SuperJETT]

Just did that, nothing new in the past month other than new stuff I've added.

I'm digging through a 450mb log file right now to see what those IP's are hitting.

One other thought, unless you're positive they're downloading the videos, check for any unfamiliar files. We had a problem a while back where some jack-off sniffed out a web server that we were just beginning to build, and uploaded a bunch of game files, in effect, using it as their personal FTP server so all their buddies could download and trade the games.

 

[Glory_Freestyle]

I'm digging through a 450mb log file right now to see what those IP's are hitting.

That sounds like fun.:banghead: :banghead: :banghead:

 

[SuperJETT]

That sounds like fun.:banghead: :banghead: :banghead:

Yeah, heh, I may actually import it into mssql so I can run queries against it instead of manualling searching in notetab light.