2022-06-06 08:45:43 +02:00
<!DOCTYPE html>
< html lang = "en" >
< head >
< meta charset = "utf-8" >
< meta name = "viewport" content = "width=device-width, initial-scale=1, shrink-to-fit=no" >
< meta property = "og:title" content = "June, 2022" / >
< meta property = "og:description" content = "2022-06-06
Look at the Solr statistics on CGSpace
I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “ msnbot-” using the Solr query dns:*msnbot* AND dns:*.msn.com
I purged these first so I could see the other “ real” IPs in the Solr facets
I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent
I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent
I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
There seem to be many more of these:
" />
< meta property = "og:type" content = "article" / >
< meta property = "og:url" content = "https://alanorth.github.io/cgspace-notes/2022-06/" / >
< meta property = "article:published_time" content = "2022-06-06T09:01:36+03:00" / >
2022-06-06 15:54:08 +02:00
< meta property = "article:modified_time" content = "2022-06-06T09:45:43+03:00" / >
2022-06-06 08:45:43 +02:00
< meta name = "twitter:card" content = "summary" / >
< meta name = "twitter:title" content = "June, 2022" / >
< meta name = "twitter:description" content = "2022-06-06
Look at the Solr statistics on CGSpace
I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “ msnbot-” using the Solr query dns:*msnbot* AND dns:*.msn.com
I purged these first so I could see the other “ real” IPs in the Solr facets
I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent
I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent
I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
There seem to be many more of these:
"/>
< meta name = "generator" content = "Hugo 0.99.1" / >
< script type = "application/ld+json" >
{
"@context": "http://schema.org",
"@type": "BlogPosting",
"headline": "June, 2022",
"url": "https://alanorth.github.io/cgspace-notes/2022-06/",
2022-06-06 15:54:08 +02:00
"wordCount": "314",
2022-06-06 08:45:43 +02:00
"datePublished": "2022-06-06T09:01:36+03:00",
2022-06-06 15:54:08 +02:00
"dateModified": "2022-06-06T09:45:43+03:00",
2022-06-06 08:45:43 +02:00
"author": {
"@type": "Person",
"name": "Alan Orth"
},
"keywords": "Notes"
}
< / script >
< link rel = "canonical" href = "https://alanorth.github.io/cgspace-notes/2022-06/" >
< title > June, 2022 | CGSpace Notes< / title >
<!-- combined, minified CSS -->
< link href = "https://alanorth.github.io/cgspace-notes/css/style.beb8012edc08ba10be012f079d618dc243812267efe62e11f22fe49618f976a4.css" rel = "stylesheet" integrity = "sha256-vrgBLtwIuhC+AS8HnWGNwkOBImfv5i4R8i/klhj5dqQ=" crossorigin = "anonymous" >
<!-- minified Font Awesome for SVG icons -->
< script defer src = "https://alanorth.github.io/cgspace-notes/js/fontawesome.min.f5072c55a0721857184db93a50561d7dc13975b4de2e19db7f81eb5f3fa57270.js" integrity = "sha256-9QcsVaByGFcYTbk6UFYdfcE5dbTeLhnbf4HrXz+lcnA=" crossorigin = "anonymous" > < / script >
<!-- RSS 2.0 feed -->
< / head >
< body >
< div class = "blog-masthead" >
< div class = "container" >
< nav class = "nav blog-nav" >
< a class = "nav-link " href = "https://alanorth.github.io/cgspace-notes/" > Home< / a >
< / nav >
< / div >
< / div >
< header class = "blog-header" >
< div class = "container" >
< h1 class = "blog-title" dir = "auto" > < a href = "https://alanorth.github.io/cgspace-notes/" rel = "home" > CGSpace Notes< / a > < / h1 >
< p class = "lead blog-description" dir = "auto" > Documenting day-to-day work on the < a href = "https://cgspace.cgiar.org" > CGSpace< / a > repository.< / p >
< / div >
< / header >
< div class = "container" >
< div class = "row" >
< div class = "col-sm-8 blog-main" >
< article class = "blog-post" >
< header >
< h2 class = "blog-post-title" dir = "auto" > < a href = "https://alanorth.github.io/cgspace-notes/2022-06/" > June, 2022< / a > < / h2 >
< p class = "blog-post-meta" >
< time datetime = "2022-06-06T09:01:36+03:00" > Mon Jun 06, 2022< / time >
in
< span class = "fas fa-folder" aria-hidden = "true" > < / span > < a href = "/cgspace-notes/categories/notes/" rel = "category tag" > Notes< / a >
< / p >
< / header >
< h2 id = "2022-06-06" > 2022-06-06< / h2 >
< ul >
< li > Look at the Solr statistics on CGSpace
< ul >
< li > I see 167,000 hits from a bunch of Microsoft IPs with reverse DNS “ msnbot-” using the Solr query < code > dns:*msnbot* AND dns:*.msn.com< / code > < / li >
< li > I purged these first so I could see the other “ real” IPs in the Solr facets< / li >
< / ul >
< / li >
< li > I see 47,500 hits from 80.248.237.167 on a data center ISP in Sweden, using a normal user agent< / li >
< li > I see 13,000 hits from 163.237.216.11 on a data center ISP in Australia, using a normal user agent< / li >
< li > I see 7,300 hits from 208.185.238.57 from Britanica, using a normal user agent
< ul >
< li > There seem to be many more of these:< / li >
< / ul >
< / li >
< / ul >
< div class = "highlight" > < pre tabindex = "0" style = "color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;" > < code class = "language-console" data-lang = "console" > < span style = "display:flex;" > < span > # zcat --force /var/log/nginx/access.log* | grep 208.185.238. | awk < span style = "color:#e6db74" > ' {print $1}' < / span > | sort | uniq -c | sort -h
< / span > < / span > < span style = "display:flex;" > < span > 2 208.185.238.1
< / span > < / span > < span style = "display:flex;" > < span > 166 208.185.238.54
< / span > < / span > < span style = "display:flex;" > < span > 1293 208.185.238.51
< / span > < / span > < span style = "display:flex;" > < span > 2587 208.185.238.59
< / span > < / span > < span style = "display:flex;" > < span > 4692 208.185.238.56
< / span > < / span > < span style = "display:flex;" > < span > 5480 208.185.238.53
< / span > < / span > < span style = "display:flex;" > < span > 6277 208.185.238.52
< / span > < / span > < span style = "display:flex;" > < span > 6400 208.185.238.58
< / span > < / span > < span style = "display:flex;" > < span > 8261 208.185.238.55
< / span > < / span > < span style = "display:flex;" > < span > 17549 208.185.238.57
< / span > < / span > < / code > < / pre > < / div > < ul >
< li > I see 3,000 hits from 178.208.75.33 by a Russian-owned IP in the Netherlands that is making a GET to / every one minute, using a normal user agent< / li >
< li > I see 3,000 hits from 134.122.124.196 on Digital Ocean to the REST API with a normal user agent< / li >
< li > I purged all these hits from IPs for a total of about 265,000< / li >
< li > Then I faceted by user agent and found
< ul >
< li > 1,000 hits by < code > insomnia/2022.2.1< / code > , which I also saw last month and submitted to COUNTER-Robots< / li >
< li > 265 hits by < code > omgili/0.5 +http://omgili.com< / code > < / li >
< li > 150 hits by < code > Vizzit< / code > < / li >
< li > 132 hits by < code > MetaInspector/5.7.0 (+https://github.com/jaimeiniesta/metainspector)< / code > < / li >
< li > 73 hits by < code > Scoop.it< / code > < / li >
< li > 62 hits by < code > bitdiscovery< / code > < / li >
< li > 59 hits by < code > Asana/1.4.0 WebsiteMetadataRetriever< / code > < / li >
< li > 32 hits by < code > Sprout Social (Link Attachment)< / code > < / li >
< li > 29 hits by < code > CyotekWebCopy/1.9 CyotekHTTP/6.2< / code > < / li >
< li > 20 hits by < code > Hootsuite-Authoring/1.0< / code > < / li >
< / ul >
< / li >
< li > I purged about 4,100 hits from these user agents< / li >
2022-06-06 15:54:08 +02:00
< li > Run all system updates on AReS server (linode20) and reboot< / li >
< li > I want to try to update some of the build dependencies of OpenRXV since Node.js 12 is no longer supported< / li >
< li > Upgrade linode20 to Ubuntu 22.04 and start an AReS harvest< / li >
2022-06-06 08:45:43 +02:00
< / ul >
<!-- raw HTML omitted -->
< / article >
< / div > <!-- /.blog - main -->
< aside class = "col-sm-3 ml-auto blog-sidebar" >
< section class = "sidebar-module" >
< h4 > Recent Posts< / h4 >
< ol class = "list-unstyled" >
< li > < a href = "/cgspace-notes/2022-06/" > June, 2022< / a > < / li >
< li > < a href = "/cgspace-notes/2022-05/" > May, 2022< / a > < / li >
< li > < a href = "/cgspace-notes/2022-04/" > April, 2022< / a > < / li >
< li > < a href = "/cgspace-notes/2022-03/" > March, 2022< / a > < / li >
< li > < a href = "/cgspace-notes/2022-02/" > February, 2022< / a > < / li >
< / ol >
< / section >
< section class = "sidebar-module" >
< h4 > Links< / h4 >
< ol class = "list-unstyled" >
< li > < a href = "https://cgspace.cgiar.org" > CGSpace< / a > < / li >
< li > < a href = "https://dspacetest.cgiar.org" > DSpace Test< / a > < / li >
< li > < a href = "https://github.com/ilri/DSpace" > CGSpace @ GitHub< / a > < / li >
< / ol >
< / section >
< / aside >
< / div > <!-- /.row -->
< / div > <!-- /.container -->
< footer class = "blog-footer" >
< p dir = "auto" >
Blog template created by < a href = "https://twitter.com/mdo" > @mdo< / a > , ported to Hugo by < a href = 'https://twitter.com/mralanorth' > @mralanorth< / a > .
< / p >
< p >
< a href = "#" > Back to top< / a >
< / p >
< / footer >
< / body >
< / html >
