Discuss mailing list

[Christopher <weblionx AT gmail.com>]

That's definitely strange. Good that a (relatively) simple solution
fixed it. I know there's people that have come and gone talking about
using OpenNIC for this or that, so I wouldn't be surprised if it was
legit, but at the same time it does stink of something like malware.

On Thu, Oct 5, 2017 at 11:16 PM, Jeff Taylor <shdwdrgn AT sourpuss.net> wrote:
> Just a quick update from this morning...  With the new rate-limiting in
> place the bots have almost completely gone away.  Instead of the 300+
> connections/second I was seeing this morning, the server is now down to less
> than TEN (and all of those also look like the same bot, plus the occasional
> hit from the opennic home page).  The overall traffic has slowed so much
> that I'm not even seeing any denials.  Whoever this person is, they are
> obviously paying close attention to the results, so mission accomplished.
>
>
> On 10/05/2017 06:52 AM, Jeff Taylor wrote:
>
> Possibly, but no single IP is making requests quite that fast.  What they're
> doing is flooding me with requests from all over the place, and "they" seem
> to be a whole lot more active after I go to bed.  Yesterday I was seeing
> about 200 IPs per hour and around 50 queries per second.  As I wake up this
> morning I find over 750 IPs per hour and over 300 queries per second.  And
> I'm pretty sure opennic didn't just happen to pick up that many new users
> overnight.
>
>
>
>
>
> --------
> You are a member of the OpenNIC Discuss list.
> You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org
>