Worried about my Website
I have my game website and from last year i am working hard for it! My daily traffic is about 300-400
visitors, from which 30-40 are direct visitors.
Today i saw Google analytic report for my site, and found 146 direct visits from a single location. A
couple of months ago the same happened two times. I got 266 & 76 direct visitors respectively. I checked
the country & location in report and found that it was from United States & California in all cases.
I don't understand what's this! Is some one trying to hack or something else my site? OR what i can be
Please help me i am so worried!
Do you offer direct downloads from your site? If so it could be multiple connections from a download manager, etc? Otherwise using your stats you should be able to see what exactly they are trying to access.
If you have access to the web server's log files, see what the 146 visits actually do. What urls do they access? What's the user-agent? How long is the time span between accesses? etc.
Originally Posted by max196
If you know the IP run a reverse DNS lookup. It may tell you something about the domain this IP belongs to and give a hint on the service residing there.
146 sounds too low to be a serious intrusion attempt. For example until I've installed an automatic ban service on my server, I got 3000-5000 brute force password attempts on my SSH login per day. If you manage your server and run linux and have problems with break-in attempts, I recommend fail2ban (www.fail2ban.org). It scans arbitrary log files (web, mail, ssh, etc.) for a given pattern and temporarily blocks IPs if more than X attempts are found within Y seconds. Then again your number sounds too low, at least to be a brute force attempt. It may still be searching for installed web apps with known security flaws (that is IF it is something malicious).
Originally Posted by JGOware
Thanks for reply! Actually i am an affiliate for a game developer company & i place their links on my website. The download is direct. But today i got maximum direct visitors on the home page. As i told previously i have daily only 30-40 direct visitors on home page. Additionally, how can i see their status?
I've seen some weird things in my logs sometimes as well. Like some file from my site gets downloaded several thousands of times from one address. I'm guessing someone is measuring bandwidth and uses a random target, or something.
Sounds like a search engine spidering your site. As Ciardhubh said, you need to look at your logs and see what pages are being hit and what the user-agent is.
As your site grows you'll see all sorts of weird things in your logs. I'm convinced there are people out there who want to obfuscate data collection by doing weird things like reversing their referrer chains.