# 帮助我理解匿名用户统计信息

**URL:** https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772
**Category:** Data & reporting
**Created:** [2019年三月5日 19:53 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772 "2019-03-05T19:53:12Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![DigitalStartup](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/digitalstartup/32/118242_2.png) [@DigitalStartup](https://meta.discourse.org/u/DigitalStartup)
#### Post date: [2019年三月5日 19:53 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/1 "2019-03-05T19:53:12Z")

</div>

For some reason, over the past week my **Anonymous users** statistics have exploded. According to Google Analytics, I’ve only had around 200 Sessions during this period.

 ![anon_users](https://global.discourse-cdn.com/meta/original/3X/8/1/81062568622b3c4d862694af443d4fd70f4a1e4c.png)

No idea if it has anything to do with crawlers but I have the default “blacklisted crawler user agents” set to `mauibot`, `Yandex`, `Daum` & `BLEXBox` already.

I’m hoping someone can help explain:

- What these statistics reflect in more detail
- Why this would happen

Thanks

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [2019年三月5日 20:12 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/2 "2019-03-05T20:12:55Z")

</div>

Have you looked at the origin IPs for this traffic?

---

<div class="post-metadata">

### Author: ![DigitalStartup](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/digitalstartup/32/118242_2.png) [@DigitalStartup](https://meta.discourse.org/u/DigitalStartup)
#### Post date: [2019年三月5日 20:15 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/3 "2019-03-05T20:15:26Z")

</div>

Where would I find that data?

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [2019年三月5日 20:22 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/4 "2019-03-05T20:22:59Z")

</div>

If you’ve got SSH access you can:

`./launcher enter app`

and then

`cd /var/log/nginx`

Which has access logs for the nginx instance within the Discourse container.

You can throw them at your log analyser of choice to look at where requests are coming from and their frequency.

It’s likely to be one or more crawlers and/or spam bots. How new is your community?

---

<div class="post-metadata">

### Author: ![DigitalStartup](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/digitalstartup/32/118242_2.png) [@DigitalStartup](https://meta.discourse.org/u/DigitalStartup)
#### Post date: [2019年三月5日 20:48 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/5 "2019-03-05T20:48:07Z")

</div>

Thanks, I learned something new today 👍

Initially, some IP from Mexico looks like the culprit. I’ll dig through some more logs.

Thank you

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2019年三月6日 01:29 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/6 "2019-03-06T01:29:49Z")

</div>

Usually the crawler reports by user agent under Admin cover this just fine cc @Stephen.

 ![image](https://global.discourse-cdn.com/meta/original/3X/3/d/3df135b0c1c8e5237edc6b49a5d859c88cfde40c.png)

---

<div class="post-metadata">

### Author: ![Chaboi\_3000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chaboi_3000/32/163015_2.png) [@Chaboi\_3000](https://meta.discourse.org/u/Chaboi_3000)
#### Post date: [2019年三月6日 01:31 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/7 "2019-03-06T01:31:47Z")

</div>

From what I can see, there’s considerably high numbers of Mozilla crawlers.

---

<div class="post-metadata">

### Author: ![DigitalStartup](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/digitalstartup/32/118242_2.png) [@DigitalStartup](https://meta.discourse.org/u/DigitalStartup)
#### Post date: [2019年三月6日 19:14 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/8 "2019-03-06T19:14:06Z")

</div>

So, you methodology allowed me to identify a rogue IP address that was spamming my server. I blacklisted that address 22 hours ago and my latest stats look like this under my Anonymous Report:

| Date | Count |
| --- | --- |
| March 6, 2019 | 28 |
| March 5, 2019 | 2665 |
| March 4, 2019 | 3076 |
| March 3, 2019 | 1172 |
| March 2, 2019 | 1448 |
| March 1, 2019 | 3179 |

Thanks again 👍

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [2019年三月6日 19:55 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/9 "2019-03-06T19:55:08Z")

</div>

Yeah, from the numbers @digitalstartup was querying (3979 vs 62) I didn’t point him in that direction because I assume the crawler list that goes into that report to be pretty up-to-date.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [2019年四月5日 19:55 UTC](https://meta.discourse.org/t/help-me-understand-the-anonymous-users-statistics/110772/10 "2019-04-05T19:55:09Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
