Re: Unexpected EZProxy traffic from DigitalOcean IP addresses

Dear Kun

Thank you for your response.

Based on Amy's response as well, indicating that she's also seeing legitimate traffic from DigitalOcean, I suspect you're correct that it's a VPN service using DigitalOcean's infrastructure. We're going to keep an eye on things, but the traffic appears to be legitimate for the time being.

Kind regards,
Ian van der Linde
________________________________
From: Kun Lin <[email protected]>
Sent: Friday, 27 September 2019 18:16
To: Van der Linde, Ian, Mnr [[email protected]] <[email protected]>; [email protected] <[email protected]>
Subject: RE: [EZPROXY-L] Unexpected EZProxy traffic from DigitalOcean IP addresses


Could be one of your users using VPN?

Kun



From: EZproxy List <[email protected]<mailto:[email protected]>> On Behalf Of Van der Linde, Ian, Mnr [[email protected]<mailto:[email protected]>]
Sent: Thursday, September 26, 2019 11:28 PM
To: [email protected]<mailto:[email protected]>
Subject: [EZPROXY-L] Unexpected EZProxy traffic from DigitalOcean IP addresses



We keep an eye on EZProxy sessions from disparate IP addresses, and I've recently seen quite a few successful connections originating from DigitalOcean (cloud provider) addresses in Europe. Has anyone else seen this?



The logs seem to show legitimate traffic, in other words, no page-by-page downloading, and the requests have reasonable delays between them. None of the addresses have exceeded our download limits, and I'm also not seeing failed logins from them. I'm thinking it could be something similar to the Google proxy addresses we see now and then.



Some of the addresses we're seeing are - in case you'd like to check your logs:



197.229.0.73

197.229.0.11

197.229.0.50

197.229.0.116

198.211.120.118

197.229.2.49

197.229.2.82

197.229.2.103

197.229.2.92



Any insight is appreciated.



Kind regards,

Ian van der Linde
Systems Administrator: Linux | Stelseladministrateur: Linux

Library and Information Service | Biblioteek- en Inligtingsdiens

Stellenbosch University Library | Universiteit Stellenbosch Biblioteek

e: [email protected]<mailto:[email protected]> | t: +27 21 808 4100

[cid:[email protected]]<https://www.facebook.com/stellenboschuniversity>[cid:[email protected]]<https://twitter.com/StellenboschUni>[cid:[email protected]]<https://www.instagram.com/stellenboschuni>[cid:[email protected]]<https://www.linkedin.com/edu/school?id=19873&trk=tyah&trkInfo=clickedVertical:school,clickedEntityId:19873,idx:3-1-6,tarId:1478079024397,tas:stellenboschu>[cid:[email protected]]<https://www.youtube.com/user/StellenboschUni>

[cid:[email protected]]<http://www.sun.ac.za/>

[http://cdn.sun.ac.za/100/ProductionFooter.jpg]<http://www.sun.ac.za/english/about-us/strategic-documents>

The integrity and confidentiality of this email are governed by these terms. Disclaimer<http://www.sun.ac.za/emaildisclaimer%20>
Die integriteit en vertroulikheid van hierdie e-pos word deur die volgende bepalings bereël. Vrywaringsklousule<http://www.sun.ac.za/emaildisclaimer%20>



________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1


********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].