Page 1 of 2
Posted: Fri Feb 11, 2005 3:24 pm
by John Cooper
Seems kindof high, doesn't it?
Right now, it's more like 35.
Could be sessions aren't expiring?
Could be getting scanned by google or something?
Not too worried about it...
Posted: Fri Feb 11, 2005 3:51 pm
by Gordon Gekko
the music forum is getting so good...

Posted: Sat Feb 12, 2005 10:15 am
by Faxi Nadu
yoyooy
guys
its an exploit i am almost sure.
we had the same problem on our forums with huge amounts of guests. (also using phbb)
I'm not in charge of security on my site (a firend is) but he found info about it on the phbb forums.
There is an exploit on phbb worms can find on google that needs to be upgraded asap. Once he patched the exploit the guests (worm) were gone, and a few days later he upgraded our phbb to a new version that isn't vaulnerable in the first place.
Don' take this so lightly

Peace
_________________
Elmooht - Faxi Nadu - Cider Groove
Postunder Records @
http://www.postunder.com
<font size=-1>[ This Message was edited by: Faxi Nadu on 2005-02-12 10:17 ]</font>
Posted: Sat Feb 12, 2005 12:08 pm
by John Cooper
Our version of phpBB is *not* vulnerable to the Santy worm exploit. However, I think we are being hit by santy worm ATTEMPTS, which are probably showing up as guests.
I've added some code to kick off santy worm attempts, at their initial contact. Let's see if it works- maybe our # guests will go down now??
Cheers,
-John
Posted: Sat Feb 12, 2005 2:19 pm
by Gordon Gekko
Posted: Sat Feb 12, 2005 2:20 pm
by Gordon Gekko
<font size=-1>[ This Message was edited by: legros on 2005-02-12 14:21 ]</font>
Posted: Sat Feb 12, 2005 8:26 pm
by hubird
it must depend from where the biggest cluster of members live, and that combined with the time set which is most convenient for the biggest part of the cluster to be online.
The number of actual users reflects the spread over the world, you can see when America is starting to take it over from Europe
I'm a night worker:-D, so mostly Australia gets active when I go to bed.
As the world turns...
<font size=-1>[ This Message was edited by: hubird on 2005-02-12 20:30 ]</font>
Posted: Sun Feb 13, 2005 11:51 am
by at0m
Number of browsing members doesn't just quadruple over night like it did here, Huub. No matter what timezone yer in eh.
And indeed, they're quite nicely spread over
all forums, even the usually 'less visited' ones. It must be them machines.
Another good motivation not to post your email adress here in plain
pipo@spammers.com form - at least make it a bit more cryptic

Posted: Tue Feb 15, 2005 12:40 am
by John Cooper
Yeah, back down to 4 users online right now

I guess it took awhile for the bots to worm their way back out of the z.
Cheers,
-John
Posted: Tue Feb 15, 2005 10:30 am
by BingoTheClowno
What were some of those bot's IPs if I may ask?
<font size=-1>[ This Message was edited by: BingoTheClowno on 2005-02-15 10:31 ]</font>
Posted: Fri Feb 18, 2005 12:18 am
by wayne
...and back up to 86...
Posted: Mon Feb 21, 2005 11:50 am
by John Cooper
Currently 9.
Perhaps that 86 was legit???
Sorry didn't have time to scan the logs for IP's. Not sure what use that would be anyways...
Cheers,
-John
Posted: Mon Feb 21, 2005 12:45 pm
by borg
well... a few days ago, there was this big 'debate' going on at the ableton Live forum. lately there has been a lot of mac vs pc wars, rude ways of saying hi to new users asking, granted, the most obvious and well documented things.
i kinda took planetZ as the example of how a internet community should be, as well how a music forum should be organised...
that forum has got the double amount of users, and that thread had a lot of spectators. could be the reason for that latest number of visitors.
if that was not a smart move, i won't do it again. promise! i don't want this piece of heaven turned into a Live-ing hell.

Posted: Mon Feb 21, 2005 1:25 pm
by BingoTheClowno
On 2005-02-21 11:50, John Cooper wrote:
Sorry didn't have time to scan the logs for IP's. Not sure what use that would be anyways...
Cheers,
-John
Tracing their source...
(using SamSpade)
Posted: Sat Mar 12, 2005 1:43 pm
by Aries
back up to 142
<font size=-1>[ This Message was edited by: Aries on 2005-03-12 13:44 ]</font>
Posted: Sat Mar 12, 2005 10:15 pm
by next to nothing
over 80 now
Posted: Sun Mar 13, 2005 2:57 pm
by Nestor
66
Posted: Sun Mar 13, 2005 8:01 pm
by hubird
346.859
Posted: Mon Mar 14, 2005 12:30 am
by John Cooper
Yeah, 52 right now. Must be some new variant of the worm... Urg, what a waste of time!
-John
Posted: Mon Mar 14, 2005 2:52 am
by emzee
Not possible that some of us are logged in automatically when we go on the net?