95 users at the moment on Z ??

John Cooper · Post by **John Cooper** » Fri Feb 11, 2005 3:24 pm

Seems kindof high, doesn't it?
Right now, it's more like 35.
Could be sessions aren't expiring?
Could be getting scanned by google or something?

Not too worried about it...

Gordon Gekko · Post by **Gordon Gekko** » Fri Feb 11, 2005 3:51 pm

the music forum is getting so good...

Faxi Nadu · Post by **Faxi Nadu** » Sat Feb 12, 2005 10:15 am

yoyooy
guys
its an exploit i am almost sure.
we had the same problem on our forums with huge amounts of guests. (also using phbb)
I'm not in charge of security on my site (a firend is) but he found info about it on the phbb forums.
There is an exploit on phbb worms can find on google that needs to be upgraded asap. Once he patched the exploit the guests (worm) were gone, and a few days later he upgraded our phbb to a new version that isn't vaulnerable in the first place.
Don' take this so lightly

Peace

_________________
Elmooht - Faxi Nadu - Cider Groove
Postunder Records @ http://www.postunder.com

[ This Message was edited by: Faxi Nadu on 2005-02-12 10:17 ]

John Cooper · Post by **John Cooper** » Sat Feb 12, 2005 12:08 pm

Our version of phpBB is *not* vulnerable to the Santy worm exploit. However, I think we are being hit by santy worm ATTEMPTS, which are probably showing up as guests.

I've added some code to kick off santy worm attempts, at their initial contact. Let's see if it works- maybe our # guests will go down now??

Cheers,
-John

Gordon Gekko · Post by **Gordon Gekko** » Sat Feb 12, 2005 2:19 pm

nah its da music fhuuuruuuuum

Gordon Gekko · Post by **Gordon Gekko** » Sat Feb 12, 2005 2:20 pm

[ This Message was edited by: legros on 2005-02-12 14:21 ]

Post by **hubird** » Sat Feb 12, 2005 8:26 pm

it must depend from where the biggest cluster of members live, and that combined with the time set which is most convenient for the biggest part of the cluster to be online.
The number of actual users reflects the spread over the world, you can see when America is starting to take it over from Europe

I'm a night worker:-D, so mostly Australia gets active when I go to bed.
As the world turns...

[ This Message was edited by: hubird on 2005-02-12 20:30 ]

at0m · Post by **at0m** » Sun Feb 13, 2005 11:51 am

Number of browsing members doesn't just quadruple over night like it did here, Huub. No matter what timezone yer in eh.
And indeed, they're quite nicely spread over all forums, even the usually 'less visited' ones. It must be them machines.

Another good motivation not to post your email adress here in plain pipo@spammers.com form - at least make it a bit more cryptic

John Cooper · Post by **John Cooper** » Tue Feb 15, 2005 12:40 am

Yeah, back down to 4 users online right now

I guess it took awhile for the bots to worm their way back out of the z.

Cheers,
-John

BingoTheClowno · Post by **BingoTheClowno** » Tue Feb 15, 2005 10:30 am

What were some of those bot's IPs if I may ask?

[ This Message was edited by: BingoTheClowno on 2005-02-15 10:31 ]

wayne · Post by **wayne** » Fri Feb 18, 2005 12:18 am

...and back up to 86...

John Cooper · Post by **John Cooper** » Mon Feb 21, 2005 11:50 am

Currently 9.
Perhaps that 86 was legit???

Sorry didn't have time to scan the logs for IP's. Not sure what use that would be anyways...

Cheers,
-John

borg · Post by **borg** » Mon Feb 21, 2005 12:45 pm

well... a few days ago, there was this big 'debate' going on at the ableton Live forum. lately there has been a lot of mac vs pc wars, rude ways of saying hi to new users asking, granted, the most obvious and well documented things.
i kinda took planetZ as the example of how a internet community should be, as well how a music forum should be organised...

that forum has got the double amount of users, and that thread had a lot of spectators. could be the reason for that latest number of visitors.

if that was not a smart move, i won't do it again. promise! i don't want this piece of heaven turned into a Live-ing hell.

BingoTheClowno · Post by **BingoTheClowno** » Mon Feb 21, 2005 1:25 pm

On 2005-02-21 11:50, John Cooper wrote:

Sorry didn't have time to scan the logs for IP's. Not sure what use that would be anyways...

Cheers,
-John

Tracing their source...
(using SamSpade)

Aries · Post by **Aries** » Sat Mar 12, 2005 1:43 pm

back up to 142

[ This Message was edited by: Aries on 2005-03-12 13:44 ]

next to nothing · Post by **next to nothing** » Sat Mar 12, 2005 10:15 pm

over 80 now

Nestor · Post by **Nestor** » Sun Mar 13, 2005 2:57 pm

Post by **hubird** » Sun Mar 13, 2005 8:01 pm

346.859

John Cooper · Post by **John Cooper** » Mon Mar 14, 2005 12:30 am

Yeah, 52 right now. Must be some new variant of the worm... Urg, what a waste of time!

-John

emzee · Post by **emzee** » Mon Mar 14, 2005 2:52 am

Not possible that some of us are logged in automatically when we go on the net?