mirror of
https://github.com/alanorth/cgspace-notes.git
synced 2024-11-18 12:47:04 +01:00
28 lines
718 B
Markdown
28 lines
718 B
Markdown
|
+++
|
||
|
|
date = "2016-05-01T23:06:00+03:00"
|
||
|
|
author = "Alan Orth"
|
||
|
|
title = "May, 2016"
|
||
|
|
tags = ["notes"]
|
||
|
|
image = "../images/bg.jpg"
|
||
|
|
|
||
|
|
+++
|
||
|
|
## 2016-05-01
|
||
|
|
|
||
|
|
- Since yesterday there have been 10,000 REST errors and the site has been unstable again
|
||
|
|
- I have blocked access to the API now
|
||
|
|
- There are 3,000 IPs accessing the REST API in a 24-hour period!
|
||
|
|
|
||
|
|
```
|
||
|
|
# awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l
|
||
|
|
3168
|
||
|
|
```
|
||
|
|
|
||
|
|
- The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29
|
||
|
|
- 100% of the requests coming from Ethiopia are like this and result in an HTTP 500:
|
||
|
|
|
||
|
|
```
|
||
|
|
GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1
|
||
|
|
```
|
||
|
|
|
||
|
|
- For now I'll block just the Ethiopian IP
|