Dora Scilipoti wrote:
> I don't know much about how bots behave but AFAICT they seem to have
> started attacking viewvc at least a month ago, practically 24/7.

Yes.  That is a correct observation.

> In case it might help, I want to report that apart from the 502/504
> errors, I also sometimes get:
>
>    An error occurred while reading CGI reply (no response received)

That's another variation that is also seen.  A different part of the
processes times out and it does not even get a 500 level reply.

> Also, when following a link to a diff page, sometimes the usual URL
> redirects to a different one which includes an extra www dir. For
> example, this URL:
>
> http://web.cvs.savannah.gnu.org/viewcvs/www/server/standards/translations/po-how-to.html?cvsroot=www&r1=1.11&r2=1.12

That is an extremely interesting report!

> Sometimes returns the 502/504 error, sometimes the CGI error, and
> sometimes it redirects to:
>
> https://web.cvs.savannah.gnu.org/viewvc/www/www/server/standards/translations/po-how-to.html?r1=1.11&r2=1.12
>
> Note the extra www dir.

Thank you for that odd variation.  I have not seen that before.  But I
was not looking for it before.  I will look for that variation.  I do
not have a guess as to what is happening there.

I admit that I was not spending much time looking at viewvc because
cgit has been the same problem and haven't been able to mitigate it
there yet.  Have to solve it on at least one place before we know how
to solve it other places.

I have been looking at the URL patterns.  There are a few clues there.
I am going to start blocking some of the patterns that I am seeing
now.  Hopefully that will give some relief.

Bob

Reply via email to