Bots Overload OT Commerce Store on OT Box, Spike Paid OTAPI Calls Mistaken for DDoS Attack
An online store built on OT Commerce faced severe performance degradation and sharply rising operational costs when automated bots began systematically crawling product pages. CPU utilization repeatedly hit 98–100% while the number of paid calls to the external OTAPI platform increased six- to seven-fold over three days.
The owner initially described the problem as a DDoS attack because requests arrived from many different IP addresses across multiple countries. However, the traffic was not a volumetric network-layer assault but rather automated HTTP requests that triggered heavy server-side logic and billable OTAPI operations.
The store uses the ready-made OT Box solution, which integrates with the OpenTrade Commerce platform via OTAPI. When a visitor opens a category, search result or product card, the engine may call paid methods such as SearchItemsFrame, GetItemInfo or GetItemFullInfo to fetch live data from Taobao, Tmall, 1688, Alibaba and other marketplaces. Each such call is metered, and some operations carry a multiplier cost.
A previously installed anti-bot module running directly on the VPS failed to stop the problematic traffic. The module’s vendor confirmed it was not designed to address large-scale parsing scenarios. After the owner restricted access to product cards for unauthenticated users, the automated activity persisted.
Switching the site behind the CRONARMOR WAF reversed the situation. Within hours of the cut-over on 16 September, CPU load fell from peaks of 80–100% to mostly single-digit percentages. Over the following 24 hours the server rarely exceeded 9% utilization.
Filtering statistics for the partial period showed 279,680 total HTTP requests, of which 276,100 targeted web pages. Automated requests blocked at the earliest stage numbered 115,660 (41.9%), with 99.3% of them never reaching the origin. Behavioral bots visible in analytics accounted for only 1,367 requests (0.5%), while 27,190 legitimate search-engine crawlers were explicitly permitted.
The case illustrates that high CPU combined with rising external API costs can result from scraping bots rather than classic L7 DDoS. Proper distinction requires analysis of request patterns, not merely the number of source countries or visible analytics events.
Related articles
Teenage Smartphone Addiction: Causes, Consequences, and Treatment Approaches
Smartphone use has become an integral part of adolescent life, but problematic usage patterns rather than device ownership itself are the focus of concern. Medical experts avoid the term smartphone addiction and instead address issues like disrupted self-control, social media overuse, and gaming disorder that interfere with sleep, studies, relationships, and mental health. Data from Pew Research indicates nearly 50% of U.S. teens aged 13-17 are online almost constantly, while CDC findings link four or more hours of daily screen time to elevated anxiety and depression symptoms. Family digital habits strongly influence teen behavior, and rigid bans often fail without addressing underlying issues such as boredom, anxiety, or social isolation. Parents are advised to track specific disruptions over a week and consider professional help when signs of depression, bullying, or self-harm appear alongside device overuse.
VK WorkSpace Federation Enables Secure Multi-Organization On-Premise Messaging Without Infrastructure Merge
VK Tech has released federation capabilities for its VK WorkSpace corporate messenger that connect independent On-Premise installations while preserving each organization's full control over data, administration, and security policies. The feature, first piloted in November 2025 and expanded in the July 2026 26.2 release, supports multi-party chats across more than two separate environments. Federation relies on mutual trust establishment and per-user access grants rather than full directory replication or proxy access to a single host instance. Each participating organization maintains local copies of messages, files, and chat metadata, allowing continued access even if a partner installation becomes unavailable. The architecture deliberately avoids both centralized hosting and open protocols such as Matrix to keep changes to the existing messenger core minimal. Administrators retain independent levers to create or revoke trusts and to limit which employees may communicate externally.
Sergey Volkov of Cloud.ru Named Top CISO in Russian IT Sector Ranking
Sergey Volkov, Director of the Cyber Protection Center at Cloud.ru, has secured first place in the information security category of the annual Top-1000 Russian Managers ranking. The ranking, published by the Association of Managers in the Kommersant newspaper since 2001, is compiled through peer evaluations by top executives followed by review from expert commissions. Volkov oversees information security strategy and operations for Cloud.ru, and his top position reflects professional recognition of his leadership results. The Association also analyzed broader achievements among laureates and identified key trends in Russian management. Artificial intelligence adoption for business process optimization appeared in 80 percent of reviewed accomplishments. Client orientation through user experience analysis and personalized solutions ranked second, while operational efficiency via cost reduction, automation, and digitalization took third place.
Russia Hands Down First Conviction Under New Criminal Article for Online Drug Propaganda
A resident of Orenburg became the first person in Russia to receive a criminal sentence under Article 230.3 of the Criminal Code, which criminalizes online drug propaganda following repeated administrative violations. The man was fined 100,000 rubles and had his mobile phone confiscated after he printed and posted leaflets containing a QR code that directed users to job advertisements linked to drug distribution. The scheme began when he was recruited via messenger to place the leaflets for 10 rubles each, without realizing the content involved narcotics-related vacancies. Prior to this case, the individual had already been sanctioned twice within the same year for illegal drug advertising, allowing prosecutors to escalate the matter to the new criminal provision that took effect on 1 March. The court considered his prior record as a recidivism aggravating factor yet imposed the minimum fine after he admitted guilt, expressed remorse, and cooperated with investigators. The ruling has already entered into force, marking the initial application of the statute that permits penalties up to two years of imprisonment or fines between 100,000 and 300,000 rubles.