Skip to content

High load / memory use with lots of bruteforce attempt entries #43528

Description

@Skyr

I've been experiencing extremely high load and memory usage both on MySql and the Apache process (I'm using the Docker image for Nextcloud 19.0.1 using Apache). The problem occurred especially when touching my webdav calendar (updates happened after dozens of seconds, if at all); other operations were a bit slowish, but not so strongly affected as the webdav stuff. After a restart, everything went calm - until the next calendar change.

On the website I was greeted with a "30 seconds delay due to bruteforce", which brought to my mind an experiment from a couple of days ago... and sure enough, I left my script running, which failed to login every 5 minutes. Inspecting the DB, I found 69447 rows in the oc_bruteforce_attempts table - almost all of them caused by my script (easy due to distinguish due to the username). After a delete from oc_bruteforce_attempts where ip="a.b.c.d";, 34 entries were left - and performance was back to normal.

So there seems some unholy interaction between the anti-bruteforce-plugin and the webdav interface...

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions