We work on a site that someone else hosts and about once a week the site goes down and the error has to do with database connections not being available. The site is on a dedicated server and the database is on another dedicated server. I'm suspecting bots hitting the site but don't have a way of watching the traffic to see.
So I've done a query to find duplicate userIds in the ac_PageViews table where the duplicate count is really high.
SELECT userid, COUNT(1) as CNT
FROM ac_PageViews
GROUP BY userid
HAVING COUNT(1) > 20000;

When I check on these users, the user ids are used by various bots- see image below. This particular user had over 46,600 page views. The activity date for the ones listed below are 2/15/22, but the last active date for the user is 1/7/2018.
How can this be?
Thanks
2022-02-21_11-38-06.png (144kb) downloaded 7 time(s).