1

My Google Analytics shows a very high increase of traffic from one ISP, being all unique visits coming from the same ISP and all of them using IE9/8/7/6. I'm getting 32% new (unique) visits, but now people stays 8min average, it was around 20min 3 days ago before this change. Pageviews remain the same.

My site is growing in traffic, but I'm getting red flags because I'm getting all this new visitors from the same ISP and all of them are using IE, also the site-stay is decreasing.

My bandwidth stills the same, CPU usage has not rised, which is weird if I'm really getting 30% new visits in two days.

The site runs on three servers with nginx and PHP5, I took a peek in the log to see if I was getting more hits per user than usual, but nothing weird there. Nothing new has been deployed to production.

EDIT: All the new uniques are coming from uninet/telmex. They come from direct traffic, no referers. The major ones still having the same numbers.

Any tips?

Alex Barredo
  • 23
  • 3
Adirael
  • 135
  • 1
  • 6

2 Answers2

2

Could be that those ISPs weren't properly loading Google Analytics (as in they "banned" it for whatever reasons) to most users?

Other reason could be that those ISPs recently upgraded their customers with better connection speeds or better DNS?

Alex Barredo
  • 23
  • 3
  • 1
    I don't think so, it would be weird. We had a big userbase on that ISP, wouldn't it be weird for them to "ban" only some users? – Adirael May 25 '11 at 16:04
2

If Google Analytics is showing an increase, it's very unlikely to be an attack. Google Analytics is Javascript based. DDOS attack clients do not execute Javascript.

I wouldn't worry too much about it unless the traffic continues to increase to the point where you start seeing load issues.

devicenull
  • 5,622
  • 1
  • 26
  • 31
  • Thanks. It seems to be stable now, numbers are a bit weird but it seems an ISP there doubled their bandwith, so that may explain it. – Adirael Jun 06 '11 at 13:51