EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #10385

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] Advice on mitigating bot attacks targeting Advanced Search in EPrints

CAUTION: This e-mail originated outside the University of Southampton.
Hello.

Dear all,

We are experiencing repeated bot attacks targeting the Advanced Search functionality on our EPrints repository. The bots generate a large number of requests to /cgi/search/archive/advanced, causing high server load and affecting our repository's availability.

As an immediate mitigation, we have:

  • Placed the repository behind a Web Application Firewall (WAF).
  • Temporarily disabled the Advanced Search feature.

Our repository is now accessible again, but we would like to know whether anyone in the community has experienced a similar issue.

We would appreciate any recommendations on any best practices for protecting the Advanced Search endpoint from bots, etc.

Thank you in advance.