mirror of
https://github.com/alanorth/cgspace-notes.git
synced 2024-12-23 05:32:20 +01:00
257 lines
8.4 KiB
HTML
257 lines
8.4 KiB
HTML
|
<!DOCTYPE html>
|
||
|
|
<html lang="en" >
|
||
|
|
|
||
|
|
<head>
|
||
|
|
<meta charset="utf-8">
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
|
||
|
|
|
||
|
|
|
||
|
|
<meta property="og:title" content="June, 2022" />
|
||
|
|
<meta property="og:description" content="2022-06-06
|
||
|
|
|
||
|
|
Look at the Solr statistics on CGSpace
|
||
|
|
|
||
|
|
I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “msnbot-” using the Solr query dns:*msnbot* AND dns:*.msn.com
|
||
|
|
I purged these first so I could see the other “real” IPs in the Solr facets
|
||
|
|
|
||
|
|
|
||
|
|
I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent
|
||
|
|
I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent
|
||
|
|
I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
|
||
|
|
|
||
|
|
There seem to be many more of these:
|
||
|
|
|
||
|
|
|
||
|
|
" />
|
||
|
|
<meta property="og:type" content="article" />
|
||
|
|
<meta property="og:url" content="https://alanorth.github.io/cgspace-notes/2022-06/" />
|
||
|
|
<meta property="article:published_time" content="2022-06-06T09:01:36+03:00" />
|
||
|
|
<meta property="article:modified_time" content="2022-06-06T09:01:36+03:00" />
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<meta name="twitter:card" content="summary"/>
|
||
|
|
<meta name="twitter:title" content="June, 2022"/>
|
||
|
|
<meta name="twitter:description" content="2022-06-06
|
||
|
|
|
||
|
|
Look at the Solr statistics on CGSpace
|
||
|
|
|
||
|
|
I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “msnbot-” using the Solr query dns:*msnbot* AND dns:*.msn.com
|
||
|
|
I purged these first so I could see the other “real” IPs in the Solr facets
|
||
|
|
|
||
|
|
|
||
|
|
I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent
|
||
|
|
I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent
|
||
|
|
I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
|
||
|
|
|
||
|
|
There seem to be many more of these:
|
||
|
|
|
||
|
|
|
||
|
|
"/>
|
||
|
|
<meta name="generator" content="Hugo 0.99.1" />
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<script type="application/ld+json">
|
||
|
|
{
|
||
|
|
"@context": "http://schema.org",
|
||
|
|
"@type": "BlogPosting",
|
||
|
|
"headline": "June, 2022",
|
||
|
|
"url": "https://alanorth.github.io/cgspace-notes/2022-06/",
|
||
|
|
"wordCount": "274",
|
||
|
|
"datePublished": "2022-06-06T09:01:36+03:00",
|
||
|
|
"dateModified": "2022-06-06T09:01:36+03:00",
|
||
|
|
"author": {
|
||
|
|
"@type": "Person",
|
||
|
|
"name": "Alan Orth"
|
||
|
|
},
|
||
|
|
"keywords": "Notes"
|
||
|
|
}
|
||
|
|
</script>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<link rel="canonical" href="https://alanorth.github.io/cgspace-notes/2022-06/">
|
||
|
|
|
||
|
|
<title>June, 2022 | CGSpace Notes</title>
|
||
|
|
|
||
|
|
|
||
|
|
<!-- combined, minified CSS -->
|
||
|
|
|
||
|
|
<link href="https://alanorth.github.io/cgspace-notes/css/style.beb8012edc08ba10be012f079d618dc243812267efe62e11f22fe49618f976a4.css" rel="stylesheet" integrity="sha256-vrgBLtwIuhC+AS8HnWGNwkOBImfv5i4R8i/klhj5dqQ=" crossorigin="anonymous">
|
||
|
|
|
||
|
|
|
||
|
|
<!-- minified Font Awesome for SVG icons -->
|
||
|
|
|
||
|
|
<script defer src="https://alanorth.github.io/cgspace-notes/js/fontawesome.min.f5072c55a0721857184db93a50561d7dc13975b4de2e19db7f81eb5f3fa57270.js" integrity="sha256-9QcsVaByGFcYTbk6UFYdfcE5dbTeLhnbf4HrXz+lcnA=" crossorigin="anonymous"></script>
|
||
|
|
|
||
|
|
<!-- RSS 2.0 feed -->
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<body>
|
||
|
|
|
||
|
|
|
||
|
|
<div class="blog-masthead">
|
||
|
|
<div class="container">
|
||
|
|
<nav class="nav blog-nav">
|
||
|
|
<a class="nav-link " href="https://alanorth.github.io/cgspace-notes/">Home</a>
|
||
|
|
</nav>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<header class="blog-header">
|
||
|
|
<div class="container">
|
||
|
|
<h1 class="blog-title" dir="auto"><a href="https://alanorth.github.io/cgspace-notes/" rel="home">CGSpace Notes</a></h1>
|
||
|
|
<p class="lead blog-description" dir="auto">Documenting day-to-day work on the <a href="https://cgspace.cgiar.org">CGSpace</a> repository.</p>
|
||
|
|
</div>
|
||
|
|
</header>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<div class="container">
|
||
|
|
<div class="row">
|
||
|
|
<div class="col-sm-8 blog-main">
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<article class="blog-post">
|
||
|
|
<header>
|
||
|
|
<h2 class="blog-post-title" dir="auto"><a href="https://alanorth.github.io/cgspace-notes/2022-06/">June, 2022</a></h2>
|
||
|
|
<p class="blog-post-meta">
|
||
|
|
<time datetime="2022-06-06T09:01:36+03:00">Mon Jun 06, 2022</time>
|
||
|
|
in
|
||
|
|
<span class="fas fa-folder" aria-hidden="true"></span> <a href="/cgspace-notes/categories/notes/" rel="category tag">Notes</a>
|
||
|
|
|
||
|
|
|
||
|
|
</p>
|
||
|
|
</header>
|
||
|
|
<h2 id="2022-06-06">2022-06-06</h2>
|
||
|
|
<ul>
|
||
|
|
<li>Look at the Solr statistics on CGSpace
|
||
|
|
<ul>
|
||
|
|
<li>I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “msnbot-” using the Solr query <code>dns:*msnbot* AND dns:*.msn.com</code></li>
|
||
|
|
<li>I purged these first so I could see the other “real” IPs in the Solr facets</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
<li>I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent</li>
|
||
|
|
<li>I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent</li>
|
||
|
|
<li>I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
|
||
|
|
<ul>
|
||
|
|
<li>There seem to be many more of these:</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span># zcat --force /var/log/nginx/access.log* | grep 208.185.238. | awk <span style="color:#e6db74">'{print $1}'</span> | sort | uniq -c | sort -h
|
||
|
|
</span></span><span style="display:flex;"><span> 2 208.185.238.1
|
||
|
|
</span></span><span style="display:flex;"><span> 166 208.185.238.54
|
||
|
|
</span></span><span style="display:flex;"><span> 1293 208.185.238.51
|
||
|
|
</span></span><span style="display:flex;"><span> 2587 208.185.238.59
|
||
|
|
</span></span><span style="display:flex;"><span> 4692 208.185.238.56
|
||
|
|
</span></span><span style="display:flex;"><span> 5480 208.185.238.53
|
||
|
|
</span></span><span style="display:flex;"><span> 6277 208.185.238.52
|
||
|
|
</span></span><span style="display:flex;"><span> 6400 208.185.238.58
|
||
|
|
</span></span><span style="display:flex;"><span> 8261 208.185.238.55
|
||
|
|
</span></span><span style="display:flex;"><span> 17549 208.185.238.57
|
||
|
|
</span></span></code></pre></div><ul>
|
||
|
|
<li>I see 3,000 hits from 178.208.75.33 by a Russian-owned IP in the Netherlands that is making a GET to / every one minute, using a normal user agent</li>
|
||
|
|
<li>I see 3,000 hits from 134.122.124.196 on Digital Ocean to the REST API with a normal user agent</li>
|
||
|
|
<li>I purged all these hits from IPs for a total of about 265,000</li>
|
||
|
|
<li>Then I faceted by user agent and found
|
||
|
|
<ul>
|
||
|
|
<li>1,000 hits by <code>insomnia/2022.2.1</code>, which I also saw last month and submitted to COUNTER-Robots</li>
|
||
|
|
<li>265 hits by <code>omgili/0.5 +http://omgili.com</code></li>
|
||
|
|
<li>150 hits by <code>Vizzit</code></li>
|
||
|
|
<li>132 hits by <code>MetaInspector/5.7.0 (+https://github.com/jaimeiniesta/metainspector)</code></li>
|
||
|
|
<li>73 hits by <code>Scoop.it</code></li>
|
||
|
|
<li>62 hits by <code>bitdiscovery</code></li>
|
||
|
|
<li>59 hits by <code>Asana/1.4.0 WebsiteMetadataRetriever</code></li>
|
||
|
|
<li>32 hits by <code>Sprout Social (Link Attachment)</code></li>
|
||
|
|
<li>29 hits by <code>CyotekWebCopy/1.9 CyotekHTTP/6.2</code></li>
|
||
|
|
<li>20 hits by <code>Hootsuite-Authoring/1.0</code></li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
<li>I purged about 4,100 hits from these user agents</li>
|
||
|
|
</ul>
|
||
|
|
<!-- raw HTML omitted -->
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</article>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</div> <!-- /.blog-main -->
|
||
|
|
|
||
|
|
<aside class="col-sm-3 ml-auto blog-sidebar">
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<section class="sidebar-module">
|
||
|
|
<h4>Recent Posts</h4>
|
||
|
|
<ol class="list-unstyled">
|
||
|
|
|
||
|
|
|
||
|
|
<li><a href="/cgspace-notes/2022-06/">June, 2022</a></li>
|
||
|
|
|
||
|
|
<li><a href="/cgspace-notes/2022-05/">May, 2022</a></li>
|
||
|
|
|
||
|
|
<li><a href="/cgspace-notes/2022-04/">April, 2022</a></li>
|
||
|
|
|
||
|
|
<li><a href="/cgspace-notes/2022-03/">March, 2022</a></li>
|
||
|
|
|
||
|
|
<li><a href="/cgspace-notes/2022-02/">February, 2022</a></li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
</section>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<section class="sidebar-module">
|
||
|
|
<h4>Links</h4>
|
||
|
|
<ol class="list-unstyled">
|
||
|
|
|
||
|
|
<li><a href="https://cgspace.cgiar.org">CGSpace</a></li>
|
||
|
|
|
||
|
|
<li><a href="https://dspacetest.cgiar.org">DSpace Test</a></li>
|
||
|
|
|
||
|
|
<li><a href="https://github.com/ilri/DSpace">CGSpace @ GitHub</a></li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
</section>
|
||
|
|
|
||
|
|
</aside>
|
||
|
|
|
||
|
|
|
||
|
|
</div> <!-- /.row -->
|
||
|
|
</div> <!-- /.container -->
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<footer class="blog-footer">
|
||
|
|
<p dir="auto">
|
||
|
|
|
||
|
|
Blog template created by <a href="https://twitter.com/mdo">@mdo</a>, ported to Hugo by <a href='https://twitter.com/mralanorth'>@mralanorth</a>.
|
||
|
|
|
||
|
|
</p>
|
||
|
|
<p>
|
||
|
|
<a href="#">Back to top</a>
|
||
|
|
</p>
|
||
|
|
</footer>
|
||
|
|
|
||
|
|
|
||
|
|
</body>
|
||
|
|
|
||
|
|
</html>
|