diff --git a/content/post/2017-11.md b/content/post/2017-11.md
index 1ec7f75c8..7ba8ba4d8 100644
--- a/content/post/2017-11.md
+++ b/content/post/2017-11.md
@@ -851,3 +851,22 @@ $ grep 70.32.83.92 dspace.log.2017-11-23 | grep -o -E 'session_id=[A-Z0-9]{32}'
 ```
 
 - I should probably tell CGIAR people to have CGNET stop that
+
+## 2017-11-26
+
+- Linode alerted that CGSpace server was using too much CPU from 5:18 to 7:18 AM
+- Yet another mystery because the load for all domains looks fine at that time:
+
+```
+# cat /var/log/nginx/access.log /var/log/nginx/access.log.1 /var/log/nginx/library-access.log /var/log/nginx/library-access.log.1 | grep -E "26/Nov/2017:0[567]" | awk '{print $1}' | sort -n | uniq -c | sort -h | tail
+    190 66.249.66.83
+    195 104.196.152.243
+    220 40.77.167.82
+    246 207.46.13.137
+    247 68.180.229.254
+    257 157.55.39.214
+    289 66.249.66.91
+    298 157.55.39.206
+    379 66.249.66.70
+   1855 66.249.66.90
+```
diff --git a/public/2017-11/index.html b/public/2017-11/index.html
index e8a86b33c..26d8b9882 100644
--- a/public/2017-11/index.html
+++ b/public/2017-11/index.html
@@ -38,7 +38,7 @@ COPY 54701
 
 <meta property="article:published_time" content="2017-11-02T09:37:54&#43;02:00"/>
 
-<meta property="article:modified_time" content="2017-11-24T00:59:11&#43;02:00"/>
+<meta property="article:modified_time" content="2017-11-25T10:39:20&#43;02:00"/>
 
 
 
@@ -86,9 +86,9 @@ COPY 54701
   "@type": "BlogPosting",
   "headline": "November, 2017",
   "url": "https://alanorth.github.io/cgspace-notes/2017-11/",
-  "wordCount": "5032",
+  "wordCount": "5107",
   "datePublished": "2017-11-02T09:37:54&#43;02:00",
-  "dateModified": "2017-11-24T00:59:11&#43;02:00",
+  "dateModified": "2017-11-25T10:39:20&#43;02:00",
   "author": {
     "@type": "Person",
     "name": "Alan Orth"
@@ -1108,6 +1108,26 @@ $ grep -c com.atmire.utils.UpdateSolrStatsMetadata dspace.log.2017-11-19
 <li>I should probably tell CGIAR people to have CGNET stop that</li>
 </ul>
 
+<h2 id="2017-11-26">2017-11-26</h2>
+
+<ul>
+<li>Linode alerted that CGSpace server was using too much CPU from 5:18 to 7:18 AM</li>
+<li>Yet another mystery because the load for all domains looks fine at that time:</li>
+</ul>
+
+<pre><code># cat /var/log/nginx/access.log /var/log/nginx/access.log.1 /var/log/nginx/library-access.log /var/log/nginx/library-access.log.1 | grep -E &quot;26/Nov/2017:0[567]&quot; | awk '{print $1}' | sort -n | uniq -c | sort -h | tail
+    190 66.249.66.83
+    195 104.196.152.243
+    220 40.77.167.82
+    246 207.46.13.137
+    247 68.180.229.254
+    257 157.55.39.214
+    289 66.249.66.91
+    298 157.55.39.206
+    379 66.249.66.70
+   1855 66.249.66.90
+</code></pre>
+
   
 
   
diff --git a/public/sitemap.xml b/public/sitemap.xml
index b4e557a80..5a4b06fec 100644
--- a/public/sitemap.xml
+++ b/public/sitemap.xml
@@ -4,7 +4,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/2017-11/</loc>
-    <lastmod>2017-11-24T00:59:11+02:00</lastmod>
+    <lastmod>2017-11-25T10:39:20+02:00</lastmod>
   </url>
   
   <url>
@@ -134,7 +134,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/</loc>
-    <lastmod>2017-11-24T00:59:11+02:00</lastmod>
+    <lastmod>2017-11-25T10:39:20+02:00</lastmod>
     <priority>0</priority>
   </url>
   
@@ -145,7 +145,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/tags/notes/</loc>
-    <lastmod>2017-11-24T00:59:11+02:00</lastmod>
+    <lastmod>2017-11-25T10:39:20+02:00</lastmod>
     <priority>0</priority>
   </url>
   
@@ -157,13 +157,13 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/post/</loc>
-    <lastmod>2017-11-24T00:59:11+02:00</lastmod>
+    <lastmod>2017-11-25T10:39:20+02:00</lastmod>
     <priority>0</priority>
   </url>
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/tags/</loc>
-    <lastmod>2017-11-24T00:59:11+02:00</lastmod>
+    <lastmod>2017-11-25T10:39:20+02:00</lastmod>
     <priority>0</priority>
   </url>