Re: Go-http-client

Path	csiph.com!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From	Chris Hughes <news13@noonehere.co.uk>
Newsgroups	comp.sys.acorn.networking
Subject	Re: Go-http-client
Date	Wed, 31 Jan 2024 12:59:20 GMT
Organization	A noiseless patient Spider
Lines	44
Message-ID	<e9095c2b5b.chris@mytardis> (permalink)
References	<5b2b4df63fNews03@avisoft.f9.co.uk> <a56a552b5b.chris@mytardis> <5b2b591f8fNews03@avisoft.f9.co.uk>
Injection-Info	dont-email.me; posting-host="ec67d43aa6169961e36c1647f8490202"; logging-data="1608542"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/VgLHd5D/iePAH5Nvc+wLXOCypuwnAzPk="
User-Agent	Messenger-Pro/9.01 (MsgServe/9.01) (RISC-OS/5.29) NewsHound/v1.54
Cancel-Lock	sha1:92ROugEiosA+9ueBcC8o5EQa+dY=
X-Editor	EmailEdit 2.04
Xref	csiph.com comp.sys.acorn.networking:5163

Show key headers only | View raw

In message <5b2b591f8fNews03@avisoft.f9.co.uk>
          Martin <News03@avisoft.f9.co.uk> wrote:

> In article <a56a552b5b.chris@mytardis>,
>    Chris Hughes <news13@noonehere.co.uk> wrote:
>> In message <5b2b4df63fNews03@avisoft.f9.co.uk>
>>           Martin <News03@avisoft.f9.co.uk> wrote:

>>> In the last couple of days my website has had an increase in
>>> traffic, from about 30 different IP addresses, all with a
>>> User-Agent of "Go-http-client/1.1".

>>> Each starts with a "GET / HTTP/1.1" request, with various
>>> User-Agents, including Windows, Linux & MaxOS. If that works (as
>>> it will) it then issues GETs for about 30 varied files, then
>>> stops.

>>> It seems that Go-http-client is a package which "provides HTTP
>>> client and server implementations" but it is suddenly being used
>>> by lots of IPs in a suspicious way.

>>> Anyone else seen this?

>>> They obviously do not abide by robots/txt (or even read it), so
>>> the only way I know to block them is to add them to /htaccess as
>>> deny froms - some have the same top two numbers.

>>> Are there any better ways? One way is just to ignore them, I
>>> know, but I would not want a trickle to turn into a flood.

>> Is your web space provided via PlusNet ?
>> If so you could report possible suspicious activity.

> Yes ... but I doubt they would be interested at the current level.

I meant to say via PlusNet's Community Forum, which often gets a faster 
response then ringing the normal customer support, as they frequently 
don't seem to know some users have web space! as you use a legacy system 
i.e. force9



-- 
Chris Hughes

Back to comp.sys.acorn.networking | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-01-31 10:25 +0000
  Re: Go-http-client Chris Hughes <news13@noonehere.co.uk> - 2024-01-31 11:47 +0000
    Re: Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-01-31 12:27 +0000
      Re: Go-http-client Chris Hughes <news13@noonehere.co.uk> - 2024-01-31 12:59 +0000
        Re: Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-01-31 13:11 +0000
  Re: Go-http-client Theo <theom+news@chiark.greenend.org.uk> - 2024-01-31 15:18 +0000
    Re: Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-01-31 16:56 +0000
      Re: Go-http-client Theo <theom+news@chiark.greenend.org.uk> - 2024-01-31 18:32 +0000
  Re: Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-02-22 09:53 +0000
    Re: Go-http-client "Richard Torrens (News)" <News+19772@Torrens.org> - 2024-02-23 10:15 +0000
      Re: Go-http-client Martin <News03@avisoft.f9.co.uk> - 2024-02-23 11:56 +0000

csiph-web