Getting slammed by a client

[cmccabe at rawtext.club]

I had a few too:

      1 2020-07-23T21:13:27Z
      1 2020-07-24T18:16:29Z
     43 2020-07-24T18:16:27Z
     69 2020-07-24T18:16:28Z


On Fri, Jul 24, 2020 at 08:54:33PM -0400, Paul Boyd wrote:
> I had a few of these too. Not nearly as many though. Request counts by
> minute (UTC):
> 
>       3 2020-07-24T18:16
>       2 2020-07-24T18:24
>       1 2020-07-24T18:27
>       1 2020-07-24T19:36
>      29 2020-07-24T19:59
>       1 2020-07-24T20:00
>      22 2020-07-24T23:25
>       3 2020-07-24T23:33
>       2 2020-07-24T23:34
>       1 2020-07-24T23:40
>      24 2020-07-24T23:41
> 
> On Fri, Jul 24, 2020 at 8:46 PM <colecmac at protonmail.com> wrote:
> 
> > Same here, over 1494 requests since Jul 23 17:22:40. It ended
> > at Jul 24 19:41:05 for me. That's in EST timezone.
> >
> > And yes, I can confirm the URL parsing was horribly done, approximately
> > 300 of those requests (20%) resulted in 51 NOT FOUND errors, seemingly
> > all because of incorrectly constructed relative URLs. If this happens
> > again I will likely ban the IP.
> >
> > Thanks for bringing this to my/our attention, I wasn't aware of until now.
> > Do you have some monitoring system in place? How did you find out?
> >
> > Cheers,
> > makeworld
> >