diff --git a/content/2016-05.md b/content/2016-05.md new file mode 100644 index 000000000..26d2f68ac --- /dev/null +++ b/content/2016-05.md @@ -0,0 +1,27 @@ ++++ +date = "2016-05-01T23:06:00+03:00" +author = "Alan Orth" +title = "May, 2016" +tags = ["notes"] +image = "../images/bg.jpg" + ++++ +## 2016-05-01 + +- Since yesterday there have been 10,000 REST errors and the site has been unstable again +- I have blocked access to the API now +- There are 3,000 IPs accessing the REST API in a 24-hour period! + +``` +# awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l +3168 +``` + +- The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29 +- 100% of the requests coming from Ethiopia are like this and result in an HTTP 500: + +``` +GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1 +``` + +- For now I'll block just the Ethiopian IP diff --git a/public/2016-04/index.html b/public/2016-04/index.html index e6267b747..21cc9ff38 100644 --- a/public/2016-04/index.html +++ b/public/2016-04/index.html @@ -550,7 +550,7 @@ dspace.log.2016-04-27:7271 - + diff --git a/public/2016-05/index.html b/public/2016-05/index.html new file mode 100644 index 000000000..d7ee642e5 --- /dev/null +++ b/public/2016-05/index.html @@ -0,0 +1,159 @@ + + + + + + + + + + + + + + + + + + + + + May, 2016 · CGSpace Notes + + + + + + + + + + + + +
+
+

CGSpace Notes

+ +
+ + + + + + + + + +
+ + + + + +
+
+
+ + +
+
+

May, 2016

+
+
+ Posted on + +
+
+ + #notes + +
+
+
+
+ + +

2016-05-01

+ +
    +
  • Since yesterday there have been 10,000 REST errors and the site has been unstable again
    • +
  • I have blocked access to the API now
    • +
  • There are 3,000 IPs accessing the REST API in a 24-hour period!
    • +
+ +
# awk '{print $1}' /var/log/nginx/rest.log  | uniq | wc -l
+3168
+
+ +
    +
  • The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29
    • +
  • 100% of the requests coming from Ethiopia are like this and result in an HTTP 500:
    • +
+ +
GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1
+
+ +
    +
  • For now I’ll block just the Ethiopian IP
    • +
+ +
+ +
+ +
+ + + + + + + + + diff --git a/public/index.html b/public/index.html index e6fd0d2d6..00fbfbb5c 100644 --- a/public/index.html +++ b/public/index.html @@ -58,6 +58,34 @@
+
+
+

May, 2016

+
+
+ Posted on + +
+
+
+
+ 2016-05-01 Since yesterday there have been 10,000 REST errors and the site has been unstable again I have blocked access to the API now There are 3,000 IPs accessing the REST API in a 24-hour period! # awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l 3168 The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29 100% of the requests coming from Ethiopia are like this +
+ + + +
+ + + +
+

April, 2016

diff --git a/public/index.xml b/public/index.xml index e1b4d75b2..69eca4204 100644 --- a/public/index.xml +++ b/public/index.xml @@ -6,9 +6,43 @@ Recent content on CGSpace Notes Hugo -- gohugo.io en-us - Mon, 04 Apr 2016 11:06:00 +0300 + Sun, 01 May 2016 23:06:00 +0300 + + May, 2016 + /cgspace-notes/2016-05/ + Sun, 01 May 2016 23:06:00 +0300 + + /cgspace-notes/2016-05/ + + +<h2 id="2016-05-01:b7bf1a0f8f2415a40e1e11e343b04c0d">2016-05-01</h2> + +<ul> +<li>Since yesterday there have been 10,000 REST errors and the site has been unstable again</li> +<li>I have blocked access to the API now</li> +<li>There are 3,000 IPs accessing the REST API in a 24-hour period!</li> +</ul> + +<pre><code># awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l +3168 +</code></pre> + +<ul> +<li>The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29</li> +<li>100% of the requests coming from Ethiopia are like this and result in an HTTP 500:</li> +</ul> + +<pre><code>GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1 +</code></pre> + +<ul> +<li>For now I&rsquo;ll block just the Ethiopian IP</li> +</ul> + + + April, 2016 /cgspace-notes/2016-04/ diff --git a/public/sitemap.xml b/public/sitemap.xml index be0a4d03a..6e5acc200 100644 --- a/public/sitemap.xml +++ b/public/sitemap.xml @@ -3,10 +3,15 @@ /cgspace-notes/ - 2016-04-04T11:06:00+03:00 + 2016-05-01T23:06:00+03:00 0 + + /cgspace-notes/2016-05/ + 2016-05-01T23:06:00+03:00 + + /cgspace-notes/2016-04/ 2016-04-04T11:06:00+03:00 diff --git a/public/tags/index.html b/public/tags/index.html index d592f9853..90af90e68 100644 --- a/public/tags/index.html +++ b/public/tags/index.html @@ -64,7 +64,7 @@ diff --git a/public/tags/notes/index.html b/public/tags/notes/index.html index 4e1c6137f..61f430cb8 100644 --- a/public/tags/notes/index.html +++ b/public/tags/notes/index.html @@ -61,6 +61,32 @@

Notes

+
+
+
+

May, 2016

+
+
+ Posted on + +
+
+
+
+ 2016-05-01 Since yesterday there have been 10,000 REST errors and the site has been unstable again I have blocked access to the API now There are 3,000 IPs accessing the REST API in a 24-hour period! # awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l 3168 The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29 100% of the requests coming from Ethiopia are like this +
+ + + +
+ +
diff --git a/public/tags/notes/index.xml b/public/tags/notes/index.xml index a18d8952f..fc4fceb48 100644 --- a/public/tags/notes/index.xml +++ b/public/tags/notes/index.xml @@ -6,9 +6,43 @@ Recent content in Notes on CGSpace Notes Hugo -- gohugo.io en-us - Mon, 04 Apr 2016 11:06:00 +0300 + Sun, 01 May 2016 23:06:00 +0300 + + May, 2016 + /cgspace-notes/2016-05/ + Sun, 01 May 2016 23:06:00 +0300 + + /cgspace-notes/2016-05/ + + +<h2 id="2016-05-01:b7bf1a0f8f2415a40e1e11e343b04c0d">2016-05-01</h2> + +<ul> +<li>Since yesterday there have been 10,000 REST errors and the site has been unstable again</li> +<li>I have blocked access to the API now</li> +<li>There are 3,000 IPs accessing the REST API in a 24-hour period!</li> +</ul> + +<pre><code># awk '{print $1}' /var/log/nginx/rest.log | uniq | wc -l +3168 +</code></pre> + +<ul> +<li>The two most often requesters are in Ethiopia and Colombia: 213.55.99.121 and 181.118.144.29</li> +<li>100% of the requests coming from Ethiopia are like this and result in an HTTP 500:</li> +</ul> + +<pre><code>GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1 +</code></pre> + +<ul> +<li>For now I&rsquo;ll block just the Ethiopian IP</li> +</ul> + + + April, 2016 /cgspace-notes/2016-04/