Hi,
Is anyone else noticing a surprisingly large number of clients that tend to
repeat connections, as if they are doing some very aggressive prefetching
and breaking down connections into pieces?
I've had to lower the mod_cband limits to 5 rps and 5 conns on my Apache
to get them to be bearable, and banned some particularly annoying clients
completely, otherwise the server was hitting MaxClients limit way too often.
Even after doing that, I get:
% tail -100 /var/log/apache2/ftp.linux.hr/ftp.linux.hr-access.log | awk '$9 =
'503' {print $1}' | sort | uniq -c | sort -n | tail -5
6 82.209.198.29
7 168.209.97.42
13 83.219.141.138
17 69.147.79.131
42 124.156.3.17
And of those:
% for i in $(tail -100 /var/log/apache2/ftp.linux.hr/ftp.linux.hr-access.log |
awk '$9 = '503' {print $1}' | sort -u | tail -5); do echo $i:; awk "/^$i/
"'{print $7}' /var/log/apache2/ftp.linux.hr/ftp.linux.hr-access.log | sort |
uniq -c | sort -n | grep openoffice; done
74.6.67.113:
81.52.143.16:
82.209.198.29:
110 /openoffice/localized/ru/2.2.0/OOo_2.2.0_Win32Intel_install_ru.exe
83.219.141.138:
43 /openoffice/localized/ru/2.2.0/OOo_2.2.0_Win32Intel_install_ru.exe
89.19.164.9:
11 /openoffice/localized/ru/2.2.0/OOo_2.2.0_Win32Intel_install_ru.exe
Why does anyone think it is a good idea to fetch that installer file
one hundred and ten times?!
--
2. That which causes joy or happiness.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
