Spike in "more than max_user_connections" errors

[swguy]

[22-Oct-2018 06:05:39 UTC] PHP Warning: mysqli_connect(): (HY000/1203): User user1 already has more than 'max_user_connections' active connections in /home/mystore/public_html/includes/classes/db/mysql/query_factory.php on line 64

Seems like I'm seeing these more often on client sites.

[mc12345678]

What other software is installed that may be common among the installs? Ie. Is there a common plugin that may be associated?

[VDecalS]

I have a vanilla install with ZERO plugins and am also getting the same errors. All seem to be from China 220.243.135.xx and 220.243.136.xx
I've even added these (without success) to my .htaccess:
deny from 220.243.135.0-220.243.135.255
deny from 220.243.136.0-220.243.136.255

[twitchtoo]

I have a vanilla install with ZERO plugins and am also getting the same errors. All seem to be from China 220.243.135.xx and 220.243.136.xx
I've even added these (without success) to my .htaccess:
deny from 220.243.135.0-220.243.135.255
deny from 220.243.136.0-220.243.136.255

I have clients monitoring and tracing these exact connections -> from China's web crawlers. So far all have overwhelmed the server and produced the errors... and found their address on the block list.

Of course there have been other web crawlers from many other countries but none have pushed the max connections limit.

[chadlly2003]

For some reason I too have been getting the exact same error. I found some suggestions on the forum but nothing has been successful yet.

I believe it may be a bot but its hard to pin point the exact cause.

[swguy]

@VDecalS, if you use CIDR format, this should work. The syntax you are using is wrong.

deny from 220.243.0.0/16

[VDecalS]

Thanks SWGuy! That is much cleaner!

[mprough]

We too have been having this issue, I monitor these, so here is my 10 day list to help

#Hackers
Order Deny,Allow
Deny from 5.8.47.0/24
Deny from 41.96.0.0/12
Deny from 52.80.0.0/14
Deny from 54.222.0.0/15
Deny from 123.112.0.0/12
Deny from 139.217.0.0/16
Deny from 203.0.0.0/8
Deny from 220.0.0.0/8

~Melanie

[VDecalS]

@VDecalS, if you use CIDR format, this should work. The syntax you are using is wrong.

deny from 220.243.0.0/16

I'm happy to report ZERO debug logs since 28 OCT 2018.

[swguy]

Glad to hear it. Having just one .htaccess entry like this is quite manageable.