Bandwidth Issue

[Trekkie101]

I know this isnt really an SMF issue but I upgraded to 1.1 Beta 3 and the day after my bandwidth use rocketed, the forum was down for several hours during the upgrade. Today I went into Awstats to have a look at the early july figures and was shocked.

Unique visitors Number of visits   Pages   Hits   Bandwidth
18                        33             3412     4345  145.87 MB

33 visits and yet its had 4345 hits, but only 3412 pages, weird, its not search engines, those are clearly listed, instead its a single IP that seems to be sucking all the bandwidth 65.19.150.251

Which shows HE.net http://whois.sc/65.19.150.251

SMF is all I have, is there anything I could toggle to try and see where its coming from and what its doing, its definately a lot of bandwidth.

[JackTripper]

Erm, Well maybe somebody is calling up your server allot - because HE is a hosting server.

I would send them an e-mail, but unless the Server is comprimised (maybe a DDOS attack?) then it seems to be a hostee calling up your server.

[Trekkie101]

Ive denied the IP in cPanel from getting to my site, hopefully, it should work.

[Tony Lagio]

Hurricane Electric
OrgID:      HURC
Address:    760 Mission Court
City:       Fremont
StateProv:  CA

This IP number, 65.19.150.251, supposedly owned by the above company is actually owned by a proxy service out of, I seem to remember, the Philippines. For 30 bucks a year anyone can use it and in fact I did several years ago, but not for nasty reasons like the guy who is doing this to you.  It's a pretty cheap company, I asked them once to change my IP number as I didn't want to appear to be "Hurricane Electric" forever. They said no, they can't do that. I am unaware of any other numbers they might own.

You did the right thing by blocking it, the culprit will be forced to buy another proxy number if he intends to persist. He is obviously unaware of how to play his nasty games for free. Good luck. :-)