Skip to content

Web throughput peak

Created to monitor DDoS attacks and other dangerous bots/hackers activity.

Plan

Find the source of the issue and fix it:

  1. Check the most popular web transactions
  2. Check logs /admin/logs and other ones
  3. Check errors on New Relic

What you can find in logs:

  1. 404 requests created from a single IP address created by a crawler (please check User-Agent)

Check site, Transactions, choose "Web", choose Sort By "Throughput (calls per minute)" web-throughput on NewRelic

This view may help you understand the target of requests (if there is a specific target). If it's a bot, it's often literature.authors.show route.

It's also possible a Google Calendar Importer or other calendar clients are fetching course calendars for our Members. UA examples:

  • begenda-calendar-app
  • Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.5495; Pro)
  • Microsoft Exchange/15.20 (Windows NT 10.0; Win64; x64)
  • Mac+OS+X/10.13.6 (17G14042) CalendarAgent/399.5.1
  • BusyCal-6.1.1 (Calendar) Mac OS X/13.0.1
  • Fantastical iOS (Calendar)/4.0.12 iOS/18.5 Darwin/24.5.0
  • Fantastical 2 for Mac (Calendar)/4.0.11 Mac OS X/15.4 Darwin/24.4.0
  • BusyCal-2025.2.1 (Calendar) Mac OS X/13.0.1
  • Nextcloud Webcal Service
  • ProtonCalendar/1.0

Unknown UAs:

  • Java/1.8.0_452 (probably Amazon.com)