4 ms·
Parent probably meant hundreds or thousands of IPs. Last week I had a web server with a high load. After some log analysis I found 66,000 unique IPs from resid
by aorth 2y ago
Parent probably meant hundreds or thousands of IPs.
Last week I had a web server with a high load. After some log analysis I found 66,000 unique IPs from residential ISPs in Brazil had made requests to the server in a few hours. I have broad rate limits on data center ISPs, but this kinda shocked me. Botnet? News coverage of the site in Brazil? No clue.
Edit: LOL didn't read the article unity after posting—they mention the Fedora Pagure server getting this traffic from Brazil last week too!
Rate limiting vast swathes of Google Cloud, Amazon EC2, Digital Ocean, Hetzner, Huawei, Alibaba, Tencent, and a dozen other data center ISPs by subnet has really helped keep the load on my web servers down.
Last year I had one incident with 14,000 unique IPs in Amazon Singapore making requests in one day. What the hell is that?
I don't even bother trusting user agents any more. My nginx config has gotten too complex over the years and I wish I didn't need all this arcane mapping and whatnot.