Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My Google Analytics shows a very high increase of traffic from one ISP, being all unique visits coming from the same ISP and all of them using IE9/8/7/6. I'm getting 32% new (unique) visits, but now people stays 8min average, it was around 20min 3 days ago before this change. Pageviews remain the same.

My site is growing in traffic, but I'm getting red flags because I'm getting all this new visitors from the same ISP and all of them are using IE, also the site-stay is decreasing.

My bandwidth stills the same, CPU usage has not rised, which is weird if I'm really getting 30% new visits in two days.

The site runs on three servers with nginx and PHP5, I took a peek in the log to see if I was getting more hits per user than usual, but nothing weird there. Nothing new has been deployed to production.

EDIT: All the new uniques are coming from uninet/telmex. They come from direct traffic, no referers. The major ones still having the same numbers.

Any tips?

share|improve this question
up vote 2 down vote accepted

If Google Analytics is showing an increase, it's very unlikely to be an attack. Google Analytics is Javascript based. DDOS attack clients do not execute Javascript.

I wouldn't worry too much about it unless the traffic continues to increase to the point where you start seeing load issues.

share|improve this answer
Thanks. It seems to be stable now, numbers are a bit weird but it seems an ISP there doubled their bandwith, so that may explain it. – Adirael Jun 6 '11 at 13:51

Could be that those ISPs weren't properly loading Google Analytics (as in they "banned" it for whatever reasons) to most users?

Other reason could be that those ISPs recently upgraded their customers with better connection speeds or better DNS?

share|improve this answer
I don't think so, it would be weird. We had a big userbase on that ISP, wouldn't it be weird for them to "ban" only some users? – Adirael May 25 '11 at 16:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.