matt-savvy

matt-savvy

Anyone here using Honeybadger?

My Honeybadger account is being overwhelmed with noise from some bots. Seeing a lot of

  • Bandit.HTTPError and Bandit.TransportErrors (looks like someone is trying to send packets that aren’t HTTP requests)
  • Plug.CSRFProtection.InvalidCSRFTokenError (trying to make bogus POST requests)
  • Phoenix.NotAcceptableError (Expected one of [“html”] but got the following formats: * “text/plain” …)

For the Bandit errors, I would imagine these should be ignored since I have log_protocol_errors: false .
My endpoint that looks like this:

  config :my_app, MyApp.Endpoint,
    url: [host: host, port: 443, scheme: "https"],
    https: [
      ...
      http_options: [log_protocol_errors: false]
    ],
	...

Relevant bandit docs:

I’m not really sure why I’m getting these Phoenix errors at all. The urls they’re making requests to are totally bogus, I would think that these would just 404.

As for the rest, what are you doing to filter these out? Or just bulk ignoring in Honeybadger and getting on with your day?

Thanks

Showing Posts 1 to 2

matt-savvy

matt-savvy OP

Also, if anyone has anything to share on how they’re filtering these bots out in the first place, I’m all ears.

fastjames

fastjames

If we know that we will never take action on an error, then we filter it out in our honeybadger config:

config :honeybadger,
ecto_repos: [MyApp.Repo],
exclude_errors: [
"Phoenix.NotAcceptableError",
"Plug.CSRFProtection.InvalidCSRFTokenError"
],...

— All posts loaded —

Where Next? Top

Trending in Questions Top

RSP87
I’m working on a project that simulates the bumbl example in the programming phoenix book. It acts almost like an email client. We have a...
New
kszambelanczyk
Hello! Could someone please give me a help/sample code, how to delete a file from s3 using waffle/waffle_ecto from Phoenix app. I creat...
New
RemyXRenard
I’m seeing that a list inside a Kino.DataTable will be interpreted as a charlist, even if the Kino.configure() is set to charlists: :as_l...
New
velrest
So my question is quite simple and i have found no conclusive answer on forum, google or AI. Should we use :erlang.float for Integer to ...
New
samoloth
Hi, I’ve just set up an application with ash_authentication. There is only magic link strategy for now, so there is no confirmation add o...
New
FlyingNoodle
If a change or preparation module uses Ash.Changeset.get_argument/2 or Ash.Query.get_argument/2 (or any of the other get_argument functio...
New
nseaSeb
Hello, I know there is an approach for handling lists that allows for optimized traversal, but I can’t recall the specific method (somet...
New

Other Trending Topics Top

mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Dmk
Xamal is a deployment tool for Elixir apps that deploys native releases to bare metal servers over SSH. It’s a port of GitHub - basecamp/...
New
Damirados
Hello everyone. After busy few months I am happy to announce v0.1.0 of Emerge & Solve. They are GUI (Emerge) and State management (S...
New
netoum
Corex is an accessible, unstyled UI component library for Phoenix that integrates Zag.js state machines using Vanilla JavaScript and Live...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews