Skip to Content.
Sympa Menu

discuss - Re: [opennic-discuss] Excessive calls to the geoip API page

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] Excessive calls to the geoip API page


Chronological Thread 
  • From: Jeff Taylor <shdwdrgn AT sourpuss.net>
  • To: discuss AT lists.opennicproject.org
  • Subject: Re: [opennic-discuss] Excessive calls to the geoip API page
  • Date: Thu, 5 Oct 2017 21:16:37 -0600
  • Authentication-results: mx5.sourpuss.net; dmarc=none header.from=sourpuss.net
  • Dmarc-filter: OpenDMARC Filter v1.3.0 mx5.sourpuss.net 575B92D76C

Just a quick update from this morning...  With the new rate-limiting in place the bots have almost completely gone away.  Instead of the 300+ connections/second I was seeing this morning, the server is now down to less than TEN (and all of those also look like the same bot, plus the occasional hit from the opennic home page).  The overall traffic has slowed so much that I'm not even seeing any denials.  Whoever this person is, they are obviously paying close attention to the results, so mission accomplished.


On 10/05/2017 06:52 AM, Jeff Taylor wrote:
Possibly, but no single IP is making requests quite that fast.  What they're doing is flooding me with requests from all over the place, and "they" seem to be a whole lot more active after I go to bed.  Yesterday I was seeing about 200 IPs per hour and around 50 queries per second.  As I wake up this morning I find over 750 IPs per hour and over 300 queries per second.  And I'm pretty sure opennic didn't just happen to pick up that many new users overnight.




Archive powered by MHonArc 2.6.19.

Top of Page