High load / memory use with lots of bruteforce attempt entries #43528
Labels
0. Needs triage
Pending check for reproducibility or if it fits our roadmap
bug
needs info
performance 🚀
stale
Ticket or PR with no recent activity
I've been experiencing extremely high load and memory usage both on MySql and the Apache process (I'm using the Docker image for Nextcloud 19.0.1 using Apache). The problem occurred especially when touching my webdav calendar (updates happened after dozens of seconds, if at all); other operations were a bit slowish, but not so strongly affected as the webdav stuff. After a restart, everything went calm - until the next calendar change.
On the website I was greeted with a "30 seconds delay due to bruteforce", which brought to my mind an experiment from a couple of days ago... and sure enough, I left my script running, which failed to login every 5 minutes. Inspecting the DB, I found 69447 rows in the
oc_bruteforce_attempts
table - almost all of them caused by my script (easy due to distinguish due to the username). After adelete from oc_bruteforce_attempts where ip="a.b.c.d";
, 34 entries were left - and performance was back to normal.So there seems some unholy interaction between the anti-bruteforce-plugin and the webdav interface...
The text was updated successfully, but these errors were encountered: