Page 1 of 1

51 после нескольких кликов траф становится ноукукис

Posted: Mon Jul 04, 2016 5:36 pm
by darkover
Привет, наблюдаю картину
прилетает чел с се, мобайл, делает несколько кликов и становится потом ноукукис
хранение данных в кеше ( был редис, тестирую на файлах сейчас )
http://my.jetscreenshot.com/10779/20160704-ex6u-16kb
на тцмс такого вроде не наблюдается

билд 201603221213
ап для очистки совести проводил, бил остался тот же, ничего не изменилось.

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Mon Jul 04, 2016 5:45 pm
by admin
А как конкртено вы видите что слетает ?
по наличию 4х кликов нокуки с этого ИП ?

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Mon Jul 04, 2016 5:51 pm
by darkover
admin wrote:А как конкртено вы видите что слетает ?
по наличию 4х кликов нокуки с этого ИП ?
Этот ипи к примеру я привел, если бы там было 4 клика, но там несколько тысяч, и ипишники не гугловские и не ботовые, я логи грепнул и более детально изучил.

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Tue Jul 05, 2016 5:15 am
by admin
А можете показать из логов что на этот ип в логе вебсервера ?
есть предположение что меняется UA

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Tue Jul 05, 2016 5:04 pm
by darkover
admin wrote:А можете показать из логов что на этот ип в логе вебсервера ?
есть предположение что меняется UA
Вот, выбрал по этому ip
42.61.251.227 - - [04/Jul/2016:20:18:27 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:18:43 +0300] "GET /flv.php?url=/video/taiwan-aletheia-university-of-4-3.html&idd1=48&idd2=26&idd3=605648 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:18:44 +0300] "GET /video/taiwan-aletheia-university-of-4-3.html HTTP/1.1" 200 5616 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:18:44 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/taiwan ... f-4-3.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:02 +0300] "GET /video/taiwan-aletheia-university-of-4-3.html HTTP/1.1" 200 5616 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:12 +0300] "GET /flv.php?url=/video/gemma-lee-singapore-1.html&idd1=48&idd2=32&idd3=605836 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:13 +0300] "GET /video/gemma-lee-singapore-1.html HTTP/1.1" 200 5587 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:13 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/gemma- ... ore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:25 +0300] "GET /flv.php?url=/video/super-slim-singapore-babe-shouts.html&idd1=48&idd2=46&idd3=604113 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:25 +0300] "GET /video/super-slim-singapore-babe-shouts.html HTTP/1.1" 200 5764 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:19:26 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/super- ... houts.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:20:01 +0300] "GET /flv.php?url=/video/super-slim-singapore-babe-shouts.html&idd1=48&idd2=46&idd3=604113 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:20:02 +0300] "GET /video/super-slim-singapore-babe-shouts.html HTTP/1.1" 200 5764 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:20:02 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/super- ... houts.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:21:47 +0300] "GET /list/best/singapore-1.html HTTP/1.1" 200 13396 "https://www.google.com.sg/" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:21:48 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:21:53 +0300] "GET /flv.php?url=/video/--14.html&idd1=48&idd2=3&idd3=605745 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:21:53 +0300] "GET /video/--14.html HTTP/1.1" 200 5605 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:21:54 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/--14.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:22:16 +0300] "GET /flv.php?url=/video/phone-87-fuck-amp-cum-core-preety.html&idd1=48&idd2=4&idd3=605300 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:22:17 +0300] "GET /video/phone-87-fuck-amp-cum-core-preety.html HTTP/1.1" 200 5702 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:22:17 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/phone- ... reety.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:15 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:27 +0300] "GET /list/new/singapore-1.html HTTP/1.1" 200 12321 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:28 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/list/new/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:53 +0300] "GET /flv.php?url=/video/japan-3.html&idd1=48&idd2=4&idd3=605805 HTTP/1.1" 302 5 "http://www.domains.com.net/list/new/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:53 +0300] "GET /video/japan-3.html HTTP/1.1" 200 5542 "http://www.domains.com.net/list/new/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:54 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/japan-3.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:28:59 +0300] "GET /flv.php?url=/video/husufengnurses-taiwanese.html&idd1=48&idd2=16&idd3=605928 HTTP/1.1" 302 5 "http://www.domains.com.net/list/new/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:10 +0300] "GET / HTTP/1.1" 200 11779 "http://www.domains.com.net/list/new/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:11 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:25 +0300] "GET /flv.php?url=/video/ang-spectacular-naman-ng-girl-super.html&idd1=48&idd2=24&idd3=604092 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:25 +0300] "GET /video/ang-spectacular-naman-ng-girl-super.html HTTP/1.1" 200 5994 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:26 +0300] "GET /stylesheet.css HTTP/1.1" 404 714 "http://www.domains.com.net/video/ang-sp ... super.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"
42.61.251.227 - - [04/Jul/2016:20:29:50 +0300] "GET /flv.php?url=/video/--82.html&idd1=48&idd2=70&idd3=605070 HTTP/1.1" 302 5 "http://www.domains.com.net/list/best/singapore-1.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" "-"

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Tue Jul 05, 2016 6:30 pm
by admin
И на файловом кеше тоже самое ?

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Tue Jul 05, 2016 6:33 pm
by darkover
admin wrote:И на файловом кеше тоже самое ?
Да, тож самое

Re: 51 после нескольких кликов траф становится ноукукис

Posted: Tue Jul 05, 2016 7:30 pm
by admin
Конкретно по этому куску не видно, но на 90% я уверен что меняется UA где-то либо плавающий ИП

Скидывайте шел, поставим какой лог что б конкретно посмотреть что ставится нокук.