mirror of
https://github.com/alanorth/cgspace-notes.git
synced 2024-11-17 20:27:05 +01:00
528 lines
29 KiB
HTML
528 lines
29 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en" >
|
|
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
|
|
|
|
|
|
<meta property="og:title" content="January, 2023" />
|
|
<meta property="og:description" content="2023-01-01
|
|
|
|
Apply some more ORCID identifiers to items on CGSpace using my 2022-09-22-add-orcids.csv file
|
|
|
|
I want to update all ORCID names and refresh them in the database
|
|
I see we have some new ones that aren’t in our list if I combine with this file:
|
|
|
|
|
|
" />
|
|
<meta property="og:type" content="article" />
|
|
<meta property="og:url" content="https://alanorth.github.io/cgspace-notes/2023-01/" />
|
|
<meta property="article:published_time" content="2023-01-01T08:44:36+03:00" />
|
|
<meta property="article:modified_time" content="2023-01-15T08:10:16+03:00" />
|
|
|
|
|
|
|
|
<meta name="twitter:card" content="summary"/>
|
|
<meta name="twitter:title" content="January, 2023"/>
|
|
<meta name="twitter:description" content="2023-01-01
|
|
|
|
Apply some more ORCID identifiers to items on CGSpace using my 2022-09-22-add-orcids.csv file
|
|
|
|
I want to update all ORCID names and refresh them in the database
|
|
I see we have some new ones that aren’t in our list if I combine with this file:
|
|
|
|
|
|
"/>
|
|
<meta name="generator" content="Hugo 0.109.0">
|
|
|
|
|
|
|
|
<script type="application/ld+json">
|
|
{
|
|
"@context": "http://schema.org",
|
|
"@type": "BlogPosting",
|
|
"headline": "January, 2023",
|
|
"url": "https://alanorth.github.io/cgspace-notes/2023-01/",
|
|
"wordCount": "2250",
|
|
"datePublished": "2023-01-01T08:44:36+03:00",
|
|
"dateModified": "2023-01-15T08:10:16+03:00",
|
|
"author": {
|
|
"@type": "Person",
|
|
"name": "Alan Orth"
|
|
},
|
|
"keywords": "Notes"
|
|
}
|
|
</script>
|
|
|
|
|
|
|
|
<link rel="canonical" href="https://alanorth.github.io/cgspace-notes/2023-01/">
|
|
|
|
<title>January, 2023 | CGSpace Notes</title>
|
|
|
|
|
|
<!-- combined, minified CSS -->
|
|
|
|
<link href="https://alanorth.github.io/cgspace-notes/css/style.c6ba80bc50669557645abe05f86b73cc5af84408ed20f1551a267bc19ece8228.css" rel="stylesheet" integrity="sha256-xrqAvFBmlVdkWr4F+GtzzFr4RAjtIPFVGiZ7wZ7Ogig=" crossorigin="anonymous">
|
|
|
|
|
|
<!-- minified Font Awesome for SVG icons -->
|
|
|
|
<script defer src="https://alanorth.github.io/cgspace-notes/js/fontawesome.min.f5072c55a0721857184db93a50561d7dc13975b4de2e19db7f81eb5f3fa57270.js" integrity="sha256-9QcsVaByGFcYTbk6UFYdfcE5dbTeLhnbf4HrXz+lcnA=" crossorigin="anonymous"></script>
|
|
|
|
<!-- RSS 2.0 feed -->
|
|
|
|
|
|
|
|
|
|
</head>
|
|
|
|
<body>
|
|
|
|
|
|
<div class="blog-masthead">
|
|
<div class="container">
|
|
<nav class="nav blog-nav">
|
|
<a class="nav-link " href="https://alanorth.github.io/cgspace-notes/">Home</a>
|
|
</nav>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<header class="blog-header">
|
|
<div class="container">
|
|
<h1 class="blog-title" dir="auto"><a href="https://alanorth.github.io/cgspace-notes/" rel="home">CGSpace Notes</a></h1>
|
|
<p class="lead blog-description" dir="auto">Documenting day-to-day work on the <a href="https://cgspace.cgiar.org">CGSpace</a> repository.</p>
|
|
</div>
|
|
</header>
|
|
|
|
|
|
|
|
|
|
<div class="container">
|
|
<div class="row">
|
|
<div class="col-sm-8 blog-main">
|
|
|
|
|
|
|
|
|
|
<article class="blog-post">
|
|
<header>
|
|
<h2 class="blog-post-title" dir="auto"><a href="https://alanorth.github.io/cgspace-notes/2023-01/">January, 2023</a></h2>
|
|
<p class="blog-post-meta">
|
|
<time datetime="2023-01-01T08:44:36+03:00">Sun Jan 01, 2023</time>
|
|
in
|
|
<span class="fas fa-folder" aria-hidden="true"></span> <a href="/categories/notes/" rel="category tag">Notes</a>
|
|
|
|
|
|
</p>
|
|
</header>
|
|
<h2 id="2023-01-01">2023-01-01</h2>
|
|
<ul>
|
|
<li>Apply some more ORCID identifiers to items on CGSpace using my <code>2022-09-22-add-orcids.csv</code> file
|
|
<ul>
|
|
<li>I want to update all ORCID names and refresh them in the database</li>
|
|
<li>I see we have some new ones that aren’t in our list if I combine with this file:</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ cat dspace/config/controlled-vocabularies/cg-creator-identifier.xml | grep - oE <span style="color:#e6db74">'[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}'</span> | sort -u | wc -l
|
|
</span></span><span style="display:flex;"><span>1939
|
|
</span></span><span style="display:flex;"><span>$ cat dspace/config/controlled-vocabularies/cg-creator-identifier.xml 2022-09-22-add-orcids.csv| grep -oE <span style="color:#e6db74">'[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}'</span> | sort -u | wc -l
|
|
</span></span><span style="display:flex;"><span>1973
|
|
</span></span></code></pre></div><ul>
|
|
<li>I will extract and process them with my <code>resolve-orcids.py</code> script:</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ cat dspace/config/controlled-vocabularies/cg-creator-identifier.xml 2022-09-22-add-orcids.csv| grep -oE <span style="color:#e6db74">'[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}'</span> | sort -u > /tmp/2023-01-01-orcids.txt
|
|
</span></span><span style="display:flex;"><span>$ ./ilri/resolve-orcids.py -i /tmp/2023-01-01-orcids.txt -o /tmp/2023-01-01-orcids-names.txt -d
|
|
</span></span></code></pre></div><ul>
|
|
<li></li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ ./ilri/update-orcids.py -i /tmp/2023-01-01-orcids-names.txt -db dspace -u dspace -p <span style="color:#e6db74">'fuuu'</span> -m <span style="color:#ae81ff">247</span>
|
|
</span></span></code></pre></div><ul>
|
|
<li>Load on CGSpace is high around 9.x
|
|
<ul>
|
|
<li>I see there is a CIAT bot harvesting via the REST API with IP 45.5.186.2</li>
|
|
<li>Other than that I don’t see any particular system stats as alarming</li>
|
|
<li>There has been a marked increase in load in the last few weeks, perhaps due to Initiative activity…</li>
|
|
<li>Perhaps there are some stuck PostgreSQL locks from CLI tools?</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ psql -c <span style="color:#e6db74">'SELECT * FROM pg_locks pl LEFT JOIN pg_stat_activity psa ON pl.pid = psa.pid;'</span> | grep -o -E <span style="color:#e6db74">'(dspaceWeb|dspaceApi|dspaceCli)'</span> | sort | uniq -c
|
|
</span></span><span style="display:flex;"><span> 58 dspaceCli
|
|
</span></span><span style="display:flex;"><span> 46 dspaceWeb
|
|
</span></span></code></pre></div><ul>
|
|
<li>The current time on the server is 08:52 and I see the dspaceCli locks were started at 04:00 and 05:00… so I need to check which cron jobs those belong to as I think I noticed this last month too
|
|
<ul>
|
|
<li>I’m going to wait and see if they finish, but by tomorrow I will kill them</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<h2 id="2023-01-02">2023-01-02</h2>
|
|
<ul>
|
|
<li>The load on the server is now very low and there are no more locks from dspaceCli
|
|
<ul>
|
|
<li>So there <em>was</em> some long-running process that was running and had to finish!</li>
|
|
<li>That finally sheds some light on the “high load on Sunday” problem where I couldn’t find any other distinct pattern in the nginx or Tomcat requests</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<h2 id="2023-01-03">2023-01-03</h2>
|
|
<ul>
|
|
<li>The load from the server on Sundays, which I have noticed for a long time, seems to be coming from the DSpace checker cron job
|
|
<ul>
|
|
<li>This checks the checksums of all bitstreams to see if they match the ones in the database</li>
|
|
</ul>
|
|
</li>
|
|
<li>I exported the entire CGSpace metadata to do country/region checks with <code>csv-metadata-quality</code>
|
|
<ul>
|
|
<li>I extracted only the items with countries, which was about 48,000, then split the file into parts of 10,000 items, but the upload found 2,000 changes in the first one and took several hours to complete…</li>
|
|
</ul>
|
|
</li>
|
|
<li>IWMI sent me ORCID identifiers for new scientsts, bringing our total to 2,010</li>
|
|
</ul>
|
|
<h2 id="2023-01-04">2023-01-04</h2>
|
|
<ul>
|
|
<li>I finally finished applying the region imports (in five batches of 10,000)
|
|
<ul>
|
|
<li>It was about 7,500 missing regions in total…</li>
|
|
</ul>
|
|
</li>
|
|
<li>Now I will move on to doing the Initiative mappings
|
|
<ul>
|
|
<li>I modified my <code>fix-initiative-mappings.py</code> script to only write out the items that have updated mappings</li>
|
|
<li>This makes it way easier to apply fixes to the entire CGSpace because we don’t try to import 100,000 items with no changes in mappings</li>
|
|
</ul>
|
|
</li>
|
|
<li>More dspaceCli locks from 04:00 this morning (current time on server is 07:33) and today is a Wednesday
|
|
<ul>
|
|
<li>The checker cron job runs on <code>0,3</code>, which is Sunday and Wednesday, so this is from that…</li>
|
|
<li>Finally at 16:30 I decided to kill the PIDs associated with those locks…</li>
|
|
<li>I am going to disable that cron job for now and watch the server load for a few weeks</li>
|
|
</ul>
|
|
</li>
|
|
<li>Start a harvest on AReS</li>
|
|
</ul>
|
|
<h2 id="2023-01-08">2023-01-08</h2>
|
|
<ul>
|
|
<li>It’s Sunday and I see some PostgreSQL locks belonging to dspaceCli that started at 05:00
|
|
<ul>
|
|
<li>That’s strange because I disabled the <code>dspace checker</code> one last week, so I’m not sure which this is…</li>
|
|
<li>It’s currently 2:30PM on the server so these locks have been there for almost twelve hours</li>
|
|
</ul>
|
|
</li>
|
|
<li>I exported the entire CGSpace to update the Initiative mappings
|
|
<ul>
|
|
<li>Items were mapped to ~58 new Initiative collections</li>
|
|
</ul>
|
|
</li>
|
|
<li>Then I ran the ORCID import to catch any new ones that might not have been tagged</li>
|
|
<li>Then I started a harvest on AReS</li>
|
|
</ul>
|
|
<h2 id="2023-01-09">2023-01-09</h2>
|
|
<ul>
|
|
<li>Fix some invalid Initiative names on CGSpace and then check for missing mappings</li>
|
|
<li>Check for missing regions in the Initiatives collection</li>
|
|
<li>Export a list of author affiliations from the Initiatives community for Peter to check
|
|
<ul>
|
|
<li>Was slightly ghetto because I did it from a CSV export of the Initiatives community, then imported to OpenRefine to split multi-value fields, then did some sed nonsense to handle the quoting:</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ csvcut -c <span style="color:#e6db74">'cg.contributor.affiliation[en_US]'</span> ~/Downloads/2023-01-09-initiatives.csv | <span style="color:#ae81ff">\
|
|
</span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> sed -e 's/^"//' -e 's/"$//' -e 's/||/\n/g' | \
|
|
</span></span><span style="display:flex;"><span> sort -u | \
|
|
</span></span><span style="display:flex;"><span> sed -e 's/^\(.*\)/"\1/' -e 's/\(.*\)$/\1"/' > /tmp/2023-01-09-initiatives-affiliations.csv
|
|
</span></span></code></pre></div><h2 id="2023-01-10">2023-01-10</h2>
|
|
<ul>
|
|
<li>Export the CGSpace Initiatives collection to check for missing regions and collection mappings</li>
|
|
</ul>
|
|
<h2 id="2023-01-11">2023-01-11</h2>
|
|
<ul>
|
|
<li>I’m trying the DSpace 7 REST API again
|
|
<ul>
|
|
<li>While following onathe <a href="https://github.com/DSpace/RestContract/blob/main/authentication.md">DSpace 7 REST API authentication docs</a> I still cannot log in via curl on the command line because I get a <code>Access is denied. Invalid CSRF token.</code> message</li>
|
|
<li>Logging in via the HAL Browser works…</li>
|
|
<li>Someone on the DSpace Slack mentioned that the <a href="https://github.com/DSpace/RestContract/issues/209">authentication documentation is out of date</a> and we need to specify the cookie too</li>
|
|
<li>I tried it and finally got it to work:</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ curl --head https://dspace7test.ilri.org/server/api
|
|
</span></span><span style="display:flex;"><span>...
|
|
</span></span><span style="display:flex;"><span>set-cookie: DSPACE-XSRF-COOKIE=42c78c56-613d-464f-89ea-79142fc5b519; Path=/server; Secure; HttpOnly; SameSite=None
|
|
</span></span><span style="display:flex;"><span>dspace-xsrf-token: 42c78c56-613d-464f-89ea-79142fc5b519
|
|
</span></span><span style="display:flex;"><span>$ curl -v -X POST https://dspace7test.ilri.org/server/api/authn/login --data <span style="color:#e6db74">"user=alantest%40cgiar.org&password=dspace"</span> -H <span style="color:#e6db74">"X-XSRF-TOKEN: 42c78c56-613d-464f-89ea-79142fc5b519"</span> -b <span style="color:#e6db74">"DSPACE-XSRF-COOKIE=42c78c56-613d-464f-89ea-79142fc5b519"</span>
|
|
</span></span><span style="display:flex;"><span>...
|
|
</span></span><span style="display:flex;"><span>authorization: Bearer eyJh...9-0
|
|
</span></span><span style="display:flex;"><span>$ curl -v <span style="color:#e6db74">"https://dspace7test.ilri.org/api/core/items"</span> -H <span style="color:#e6db74">"Authorization: Bearer eyJh...9-0"</span>
|
|
</span></span></code></pre></div><ul>
|
|
<li>I created <a href="https://github.com/DSpace/RestContract/pull/213">a pull request</a> to fix the docs</li>
|
|
<li>I did quite a lot of cleanup and updates on the IFPRI batch items for the Gender Equality batch upload
|
|
<ul>
|
|
<li>Then I uploaded them to CGSpace</li>
|
|
</ul>
|
|
</li>
|
|
<li>I added about twenty more ORCID identifiers to my list and tagged them on CGSpace</li>
|
|
</ul>
|
|
<h2 id="2023-01-12">2023-01-12</h2>
|
|
<ul>
|
|
<li>I exported the entire CGSpace and did some cleanups on all metadata in OpenRefine
|
|
<ul>
|
|
<li>I was primarily interested in normalizing the DOIs, but I also normalized a bunch of publishing places</li>
|
|
<li>After this imports I will export it again to do the Initiative and region mappings</li>
|
|
<li>I ran the <code>fix-initiative-mappings.py</code> script and got forty-nine new mappings…</li>
|
|
</ul>
|
|
</li>
|
|
<li>I added several dozen new ORCID identifiers to my list and tagged ~500 on CGSpace</li>
|
|
<li>Start a harvest on AReS</li>
|
|
</ul>
|
|
<h2 id="2023-01-13">2023-01-13</h2>
|
|
<ul>
|
|
<li>Do a bit more cleanup on licenses, issue dates, and publishers
|
|
<ul>
|
|
<li>Then I started importing my large list of 5,000 items changed from yesterday</li>
|
|
</ul>
|
|
</li>
|
|
<li>Help Karen add abstracts to a bunch of SAPLING items that were missing them on CGSpace
|
|
<ul>
|
|
<li>For now I only did open access journal articles, but I should do the reports and others too</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<h2 id="2023-01-14">2023-01-14</h2>
|
|
<ul>
|
|
<li>Export CGSpace and check for missing Initiative mappings
|
|
<ul>
|
|
<li>There were a total of twenty-five</li>
|
|
<li>Then I exported the Initiatives communinty to check the countries and regions</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<h2 id="2023-01-15">2023-01-15</h2>
|
|
<ul>
|
|
<li>Start a harvest on AReS</li>
|
|
</ul>
|
|
<h2 id="2023-01-16">2023-01-16</h2>
|
|
<ul>
|
|
<li>Batch import four IFPRI items for CGIAR Initiative on Low-Emission Food Systems</li>
|
|
<li>Batch import another twenty-eight items for IFPRI across several Initiatives
|
|
<ul>
|
|
<li>On this one I did quite a bit of extra work to check for CRPs and data/code URLs in the acknowledgements, licenses, volume/issue/extent, etc</li>
|
|
<li>I fixed some authors, an ISBN, and added extra AGROVOC keywords from the abstracts</li>
|
|
<li>Then I checked for duplicates and ran it through csv-metadata-quality to make sure the countries/regions matched and there were no duplicate metadata values</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<h2 id="2023-01-17">2023-01-17</h2>
|
|
<ul>
|
|
<li>Batch import another twenty-three items for IFPRI across several Initiatives
|
|
<ul>
|
|
<li>I checked the IFPRI eBrary for extra CRPs and data/code URLs in the acknowledgements, licenses, volume/issue/extent, etc</li>
|
|
<li>I fixed some authors, an ISBN, and added extra AGROVOC keywords from the abstracts</li>
|
|
<li>Then I found and removed one duplicate in these items, as well as another on CGSpace already (!): 10568/126669</li>
|
|
<li>Then I ran it through csv-metadata-quality to make sure the countries/regions matched and there were no duplicate metadata values</li>
|
|
</ul>
|
|
</li>
|
|
<li>I exported the Initiatives collection to check the mappings, regions, and other metadata with csv-metadata-quality</li>
|
|
<li>I also added a bunch of ORCID identifiers to my list and tagged 837 new metadata values on CGSpace</li>
|
|
<li>There is a high load on CGSpace pretty regularly
|
|
<ul>
|
|
<li>Looking at Munin it shows there is a marked increase in DSpace sessions the last few weeks:</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<p><img src="/cgspace-notes/2023/01/jmx_dspace_sessions-year.png" alt="DSpace sessions year"></p>
|
|
<ul>
|
|
<li>Is this attributable to all the PRMS harvesting?</li>
|
|
<li>I also see some PostgreSQL locks starting earlier today:</li>
|
|
</ul>
|
|
<p><img src="/cgspace-notes/2023/01/postgres_connections_ALL-day.png" alt="PostgreSQL locks day"></p>
|
|
<ul>
|
|
<li>I’m curious to see what kinds of IPs have been connecting, so I will look at the last few weeks:</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span># zcat --force /var/log/nginx/<span style="color:#f92672">{</span>rest,access,library-access,oai<span style="color:#f92672">}</span>.log /var/log/nginx/<span style="color:#f92672">{</span>rest,access,library-access,oai<span style="color:#f92672">}</span>.log.1 /var/log/nginx/<span style="color:#f92672">{</span>rest,access,library-access,oai<span style="color:#f92672">}</span>.log.<span style="color:#f92672">{</span>2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25<span style="color:#f92672">}</span>.gz | awk <span style="color:#e6db74">'{print $1}'</span> | sort | uniq > /tmp/2023-01-17-cgspace-ips.txt
|
|
</span></span><span style="display:flex;"><span># wc -l /tmp/2023-01-17-cgspace-ips.txt
|
|
</span></span><span style="display:flex;"><span>129446 /tmp/2023-01-17-cgspace-ips.txt
|
|
</span></span></code></pre></div><ul>
|
|
<li>I ran the IPs through my <code>resolve-addresses-geoip2.py</code> script to resolve their ASNs/networks, then extracted some lists of data center ISPs by eyeballing them (Amazon, Google, Microsoft, Apple, DigitalOcean, HostRoyale, and a dozen others):</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ csvgrep -c asn -r <span style="color:#e6db74">'^(8075|714|16276|15169|23576|24940|13238|32934|14061|12876|55286|203020|204287|7922|50245|6939|16509|14618)$'</span> <span style="color:#ae81ff">\
|
|
</span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> /tmp/2023-01-17-cgspace-ips.csv | csvcut -c network | \
|
|
</span></span><span style="display:flex;"><span> sed 1d | sort | uniq > /tmp/networks-to-block.txt
|
|
</span></span><span style="display:flex;"><span>$ wc -l /tmp/networks-to-block.txt
|
|
</span></span><span style="display:flex;"><span>776 /tmp/networks-to-block.txt
|
|
</span></span></code></pre></div><ul>
|
|
<li>I added the list of networks to nginx’s <code>bot-networks.conf</code> so they will all be heavily rate limited</li>
|
|
<li>Looking at the Munin stats again I see the load has been extra high since yesterday morning:</li>
|
|
</ul>
|
|
<p><img src="/cgspace-notes/2023/01/cpu-week.png" alt="CPU week"></p>
|
|
<ul>
|
|
<li>But still, it’s suspicious that there are so many PostgreSQL locks</li>
|
|
<li>Looking at the Solr stats to check the hits the last month (actually I skipped December because I was so busy)
|
|
<ul>
|
|
<li>I see 31.148.223.10 is on ALFA TELECOM s.r.o. in Russia and it made 43,000 requests this month (and 400,000 more last month!)</li>
|
|
<li>I see 18.203.245.60 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 3.249.192.212 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 34.244.160.145 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 52.213.59.101 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 91.209.8.29 is in Bulgaria on DGM EOOD and is low risk according to Scamlytics, but their user agent is all lower case and it’s a data center ISP so nope</li>
|
|
<li>I see 54.78.176.127 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 54.246.128.111 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 54.74.197.53 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 52.16.103.133 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 63.32.99.252 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 176.34.141.181 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 34.243.17.80 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 34.240.206.16 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 18.203.81.120 is on Amazon and it uses weird user agents, different with each request</li>
|
|
<li>I see 176.97.210.106 is on Tube Hosting and is rate VERY BAD, malicious, scammy on everything I checked</li>
|
|
<li>I see 79.110.73.54 is on ALFA TELCOM / Serverel and is using a different, weird user agent with each request</li>
|
|
<li>There are too many to count… so I will purge these and then move on to user agents</li>
|
|
</ul>
|
|
</li>
|
|
<li>I purged hits from those IPs:</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ ./ilri/check-spider-ip-hits.sh -f /tmp/ips.txt -p
|
|
</span></span><span style="display:flex;"><span>Purging 439185 hits from 31.148.223.10 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 2151 hits from 18.203.245.60 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1990 hits from 3.249.192.212 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1975 hits from 34.244.160.145 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1969 hits from 52.213.59.101 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 2540 hits from 91.209.8.29 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1624 hits from 54.78.176.127 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1236 hits from 54.74.197.53 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1327 hits from 54.246.128.111 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1108 hits from 52.16.103.133 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1045 hits from 63.32.99.252 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 999 hits from 176.34.141.181 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 997 hits from 34.243.17.80 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 985 hits from 34.240.206.16 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 862 hits from 18.203.81.120 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1654 hits from 176.97.210.106 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1628 hits from 51.81.193.200 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1020 hits from 79.110.73.54 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 842 hits from 35.153.105.213 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 1689 hits from 54.164.237.125 in statistics
|
|
</span></span><span style="display:flex;"><span><span style="color:#960050;background-color:#1e0010">
|
|
</span></span></span><span style="display:flex;"><span><span style="color:#960050;background-color:#1e0010"></span>Total number of bot hits purged: 466826
|
|
</span></span></code></pre></div><ul>
|
|
<li>Looking at user agents in Solr statistics from 2022-12 and 2023-01 I see some weird ones:
|
|
<ul>
|
|
<li><code>azure-logic-apps/1.0 (workflow e1f855704d6543f48be6205c40f4083f; version 08585300079823949478) microsoft-flow/1.0</code></li>
|
|
<li><code>Gov employment data scraper ([[your email]])</code></li>
|
|
<li><code>Microsoft.Data.Mashup (https://go.microsoft.com/fwlink/?LinkID=304225)</code></li>
|
|
<li><code>crownpeak</code></li>
|
|
<li><code>Mozilla/5.0 (compatible)</code></li>
|
|
</ul>
|
|
</li>
|
|
<li>Also, a ton of them are lower case, which I’ve never seen before… it might be possible, but looks super fishy to me:
|
|
<ul>
|
|
<li><code>mozilla/5.0 (x11; ubuntu; linux x86_64; rv:84.0) gecko/20100101 firefox/86.0</code></li>
|
|
<li><code>mozilla/5.0 (macintosh; intel mac os x 11_3) applewebkit/537.36 (khtml, like gecko) chrome/89.0.4389.90 safari/537.36</code></li>
|
|
<li><code>mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/86.0.4240.75 safari/537.36</code></li>
|
|
<li><code>mozilla/5.0 (windows nt 10.0; win64; x64; rv:86.0) gecko/20100101 firefox/86.0</code></li>
|
|
<li><code>mozilla/5.0 (x11; linux x86_64) applewebkit/537.36 (khtml, like gecko) chrome/90.0.4430.93 safari/537.36</code></li>
|
|
<li><code>mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/92.0.4515.159 safari/537.36</code></li>
|
|
<li><code>mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/88.0.4324.104 safari/537.36</code></li>
|
|
<li><code>mozilla/5.0 (x11; linux x86_64) applewebkit/537.36 (khtml, like gecko) chrome/86.0.4240.75 safari/537.36</code></li>
|
|
</ul>
|
|
</li>
|
|
<li>I purged some of those:</li>
|
|
</ul>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-console" data-lang="console"><span style="display:flex;"><span>$ ./ilri/check-spider-hits.sh -f /tmp/agents.txt -p
|
|
</span></span><span style="display:flex;"><span>Purging 1658 hits from azure-logic-apps\/1.0 in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 948 hits from Gov employment data scraper in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 786 hits from Microsoft\.Data\.Mashup in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 303 hits from crownpeak in statistics
|
|
</span></span><span style="display:flex;"><span>Purging 332 hits from Mozilla\/5.0 (compatible) in statistics
|
|
</span></span><span style="display:flex;"><span><span style="color:#960050;background-color:#1e0010">
|
|
</span></span></span><span style="display:flex;"><span><span style="color:#960050;background-color:#1e0010"></span>Total number of bot hits purged: 4027
|
|
</span></span></code></pre></div><ul>
|
|
<li>Then I ran all system updates on the server and rebooted it
|
|
<ul>
|
|
<li>Hopefully this clears the locks and the nginx mitigation helps with the load from non-human hosts in large data centers</li>
|
|
<li>I need to re-work how I’m doing this whitelisting and blacklisting… it’s way too complicated now</li>
|
|
</ul>
|
|
</li>
|
|
<li>Export entire CGSpace to check Initiative mappings, and add nineteen…</li>
|
|
<li>Start a harvest on AReS</li>
|
|
</ul>
|
|
<!-- raw HTML omitted -->
|
|
|
|
|
|
|
|
|
|
|
|
</article>
|
|
|
|
|
|
|
|
</div> <!-- /.blog-main -->
|
|
|
|
<aside class="col-sm-3 ml-auto blog-sidebar">
|
|
|
|
|
|
|
|
<section class="sidebar-module">
|
|
<h4>Recent Posts</h4>
|
|
<ol class="list-unstyled">
|
|
|
|
|
|
<li><a href="/cgspace-notes/2023-01/">January, 2023</a></li>
|
|
|
|
<li><a href="/cgspace-notes/2022-12/">December, 2022</a></li>
|
|
|
|
<li><a href="/cgspace-notes/2022-11/">November, 2022</a></li>
|
|
|
|
<li><a href="/cgspace-notes/2022-10/">October, 2022</a></li>
|
|
|
|
<li><a href="/cgspace-notes/2022-09/">September, 2022</a></li>
|
|
|
|
</ol>
|
|
</section>
|
|
|
|
|
|
|
|
|
|
<section class="sidebar-module">
|
|
<h4>Links</h4>
|
|
<ol class="list-unstyled">
|
|
|
|
<li><a href="https://cgspace.cgiar.org">CGSpace</a></li>
|
|
|
|
<li><a href="https://dspacetest.cgiar.org">DSpace Test</a></li>
|
|
|
|
<li><a href="https://github.com/ilri/DSpace">CGSpace @ GitHub</a></li>
|
|
|
|
</ol>
|
|
</section>
|
|
|
|
</aside>
|
|
|
|
|
|
</div> <!-- /.row -->
|
|
</div> <!-- /.container -->
|
|
|
|
|
|
|
|
<footer class="blog-footer">
|
|
<p dir="auto">
|
|
|
|
Blog template created by <a href="https://twitter.com/mdo">@mdo</a>, ported to Hugo by <a href='https://twitter.com/mralanorth'>@mralanorth</a>.
|
|
|
|
</p>
|
|
<p>
|
|
<a href="#">Back to top</a>
|
|
</p>
|
|
</footer>
|
|
|
|
|
|
</body>
|
|
|
|
</html>
|