I've got a dedicated server at RackShack.

It serves about 3.5 GB per day. On October 6, 2002 and on March 6, 2003 there was an additional download of about 2.5 GB by one URL in one session.

The total size of all the sites on my server is about 50 MB, so I wonder why anyone would download 2.5 GB?

I know about spiders from search engines, but I don't understand why they would download everything several times over.

Incidentally, this does cost me anything, because the server is on a plan with 400 GB per month, and i use less than 120 per month. Also the additional 2.5 GB does not seem to interfere with the server.

I would appreciate any information about this situation.

Tom

check the logs for what was being accessed/downloaded.

I think you can safely rule out me as a suspect. I'm on dialup.

:D

Haha! Me too.

yup, look in yer logs:

/var/log

they're in there, if yer running one of the redhat boxes..

you could have been farked or something?

Farked!? If so, I didn't feel anything ... yet.

I looked at the log, and it was very brief, I guess I don't know how to read it anyway.

I logged into the RackShack member's area and saw a message from Valerie Stinson, saying that RS had been severely attacked, and the HeadSurfer would post a message soon, but now RS is down for me.

I wonder if the RS attack and my anomaly, in which I may in fact have been farked, are related.

Tom

Originally posted by Tom
Farked!? If so, I didn't feel anything ... yet.

I looked at the log, and it was very brief, I guess I don't know how to read it anyway.

I logged into the RackShack member's area and saw a message from Valerie Stinson, saying that RS had been severely attacked, and the HeadSurfer would post a message soon, but now RS is down for me.

I wonder if the RS attack and my anomaly, in which I may in fact have been farked, are related.

Tom What does 'Farked' mean?

Originally posted by Axi
What does 'Farked' mean?

www.fark.com -- extremely popular news site. Actually rivals of another site I frequent, somethingawful.com. Kind of like being "slashdotted", when you get massive amounts of hits in a short period of time from being linked on one of these popular sites.

Doesnt farked also mean the increased traffic comes from multiple URL's/IP's not one?

yup.

www.fark.com

you know when you've been farked, cause you look at your bandwidth usage and say "oh fark". :)

yes, it would be from multiple IP's. I dunno bout the attack, I guess I better go have a look...sigh.

Perhaps you are being packeted :p. If you need someone to view your logs for you, drop me a note. I can help you analyse it. Cheers.

we had 20 gb/ day on a server with usage of les than 3 gb/day due DDoS attack. So someone may be constatly attacking your server with weak DdoS's

Someone I was talking to yesterday mentioned he was being DOS at 45kb/s.... So anything is possible :)