Add notes for 2024-09-14

content/posts/2024-09.md

@@ -53,4 +53,37 @@ $ pm2 status
 
 - I put some of these changes in on DSpace Test and will monitor this week
 
+## 2024-09-10
+
+- Some bot in South Africa made a ton of requests on the API and made the load hit the roof:
+
+```
+# grep -E '10/Sep/2024:[10-11]' /var/log/nginx/api-access.log | awk '{print $1}' | sort | uniq -c | sort -h
+...
+ 149720 102.182.38.90
+```
+
+- They are using several user agents so are obviously a bot:
+
+```
+Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0
+Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0
+Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:11.0) Gecko/20100101 Firefox/11.0
+```
+
+- I added them to the list of bot networks in nginx and the load went down
+
+## 2024-09-11
+
+- Upgrade DSpace 7 Test to Ubuntu 24.04
+- I did some minor maintenance to test dspace-statistics-api with Python 3.12
+  - I tagged version 1.4.4 and released it on GitHub
+
+## 2024-09-14
+
+- Noticed a persistent higher than usual load on CGSpace and checked the server logs
+  - Found some new data center subnets to block because they were making thousands of requests with normal user agents
+- I enabled HTTP/3 in nginx
+- I enabled the SSR patch in Angular: https://github.com/DSpace/dspace-angular/issues/3110
+
 <!-- vim: set sw=2 ts=2: -->