# Too Many Hits **URL:** \ **Category:** Hosting Support\ **Created:** [July 2, 2023, 4:33pm UTC](https://forum.infinityfree.com/t/too-many-hits/78395 "2023-07-02T16:33:13Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![mmaiato](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/mmaiato/32/36131_2.png) [@mmaiato](https://forum.infinityfree.com/u/mmaiato)\ **Post date:** [July 2, 2023, 4:33pm UTC](https://forum.infinityfree.com/t/too-many-hits/78395/1 "2023-07-02T16:33:13Z")
Hello, I am experiencing a problem with my infinityFree hosting. [https://mmaiato.com](https://mmaiato.com) & [Https://mmaiato.com/forum](Https://mmaiato.com/forum) I received a couple of emails about “too many hits” on my site. I don’t quite understand. It can’t really be close to the 50K of hits per day limit. I have hit counters and the numbers are low. I know a single user session can account for a high number of hits, but I also know that the most people who have ever been on myBB forum simultaneously is 14. Is there a way to see a report on how much traffic is incoming and source of it all? If its from legit traffic, I’d be glad to pay the $5 per month for premium. But Unfortunaly I suspect it could be an ongoing DDos attack. If I cant see a report, can someone report back to me about my traffic? Thanks! ---
**Author:** ![Oxy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/oxy/32/37989_2.png) [@Oxy](https://forum.infinityfree.com/u/Oxy)\ **Post date:** [July 2, 2023, 5:16pm UTC](https://forum.infinityfree.com/t/too-many-hits/78395/2 "2023-07-02T17:16:43Z")
Since you use Cloudflare here in the article as well as in the comments below, it is stated how you can see the traffic to some extent > [@How to protect your website that is on Cloudflare plus Logs](https://forum.infinityfree.com/t/how-to-protect-your-website-that-is-on-cloudflare-plus-logs/44751): > > How to protect your website that is on Cloudflare ? (Last update May. 6. 2024.) Don’t expect that if you just set up the CF nameservers everything will be well. Cloudflare is a tool, that you need to understand, learn and put to work for you after proper configuration. We often have the opportunity here on the forum to see that some websites have been suspended for exceeding the limit and mostly this is caused by a bunch of bots doing a vulnerability scan and searching sensitive direct… The version from the comments has now been slightly changed on CF due to changes to Cloudflare and you need to use “skip” * * * You can also have a script on the hosting which will record the traffic, but this is undesirable if it is a DDoS or larger traffic, because the script itself will then use the CPU, RAM, etc., and contribute to the suspension. And of course, since you use Cloudflare, you have to convert the CF IP that the script will see into a visitor IP > **[Restoring original visitor IPs](https://developers.cloudflare.com/support/troubleshooting/restoring-visitor-ips/restoring-original-visitor-ips/)** > > When your website traffic is routed through the Cloudflare network, we act as a reverse proxy. This allows Cloudflare to speed up page load time by routing packets more efficiently and caching static resources (images, JavaScript, CSS, etc.). As a... > [@Cloudflare visitor ip](https://forum.infinityfree.com/t/cloudflare-visitor-ip/64654/2): > > Welcome! HTTP\_CF\_CONNECTING\_IP is a custom header sent by Cloudflare to the origin. You can save it to a variable using the global SESSION variable in PHP, like shown below. You can then save this to a JSON file, a database, or whatever you want to do with it. $user\_ip = $\_SERVER["HTTP\_CF\_CONNECTING\_IP"]; ---
**Author:** ![Oxy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/oxy/32/37989_2.png) [@Oxy](https://forum.infinityfree.com/u/Oxy)\ **Post date:** [July 2, 2023, 5:28pm UTC](https://forum.infinityfree.com/t/too-many-hits/78395/3 "2023-07-02T17:28:29Z")
> [@mmaiato](#): > > I have hit counters and the numbers are low hit counter depends on JS but someone or a bot can request a non-existent address or take any irregular path where there is no hit counter script at all e.g. [https://mmaiato.com/nothingHere.php?blahblahVulnScan](https://mmaiato.com/nothingHere.php?blahblahVulnScan) and it’s a HIT again and the server records it * * * For the forum URL It would be good if you additionally introduce restrictions on Cloudflare for example turnstile or captcha checks, rate limit, etc. or you say “I’m under DDoS” in CF rules for that loc. because spam bots love forums and try to log in or write there. ---
**Author:** ![Admin](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/admin/32/36437_2.png) [@Admin](https://forum.infinityfree.com/u/Admin)\ **Post date:** [July 2, 2023, 6:36pm UTC](https://forum.infinityfree.com/t/too-many-hits/78395/4 "2023-07-02T18:36:33Z")
> [@mmaiato](#): > > It can’t really be close to the 50K of hits per day limit. I have hit counters and the numbers are low. I know a single user session can account for a high number of hits, but I also know that the most people who have ever been on myBB forum simultaneously is 14. That doesn’t really say a lot. A hit counter counts the hits to the hit counter script, which are usually roughly equal to page views. But a single page view can result in dozens of hits to load all the styles, scripts, fonts and images, which no hit counter or most analytics system can account for. The number of concurrent users doesn’t really mean a lot for the total number of hits either. If those 14 active users all read a single post and left, and the rest of the day your site wasn’t being used, your hits usage will be low. If those 14 users were there 24/7 constantly navigating to different pages, your hits usage will be quite high. The hits graph in the control panel shows hardly any usage at all right now, but it’s possible that the wave of traffic only started today, so you should be able to see the usage in the graph tomorrow. ---
**Author:** ![mmaiato](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/mmaiato/32/36131_2.png) [@mmaiato](https://forum.infinityfree.com/u/mmaiato)\ **Post date:** [July 3, 2023, 4:11am UTC](https://forum.infinityfree.com/t/too-many-hits/78395/5 "2023-07-03T04:11:16Z")
I’ve implemented many f your suggestions Oxy & I would like to thank you and Admin for all the great info. Lets see what; captcha checks & under attack mode, Bot Fight Mode, DDoS rules etc, does for me… Thanks again ---
**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\ **Post date:** [July 10, 2023, 4:12am UTC](https://forum.infinityfree.com/t/too-many-hits/78395/6 "2023-07-10T04:12:00Z")
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.