Just a heads up that...
On 5/7/25 22:32, Bob Proulx wrote:
Dora Scilipoti wrote:
I don't know much about how bots behave but AFAICT they seem to have
started attacking viewvc at least a month ago, practically 24/7.
Yes. That is a correct observation.
In case it might help, I want to report that apart from the 502/504
errors, I also sometimes get:
An error occurred while reading CGI reply (no response received)
That's another variation that is also seen. A different part of the
processes times out and it does not even get a 500 level reply.
Also, when following a link to a diff page, sometimes the usual URL
redirects to a different one which includes an extra www dir. For
example, this URL:
http://web.cvs.savannah.gnu.org/viewcvs/www/server/standards/translations/po-how-to.html?cvsroot=www&r1=1.11&r2=1.12
That is an extremely interesting report!
Sometimes returns the 502/504 error, sometimes the CGI error, and
sometimes it redirects to:
https://web.cvs.savannah.gnu.org/viewvc/www/www/server/standards/translations/po-how-to.html?r1=1.11&r2=1.12
Note the extra www dir.
it's been several days that there is no 502/504/CGI errors, just a blank
page.
Thank you for that odd variation. I have not seen that before. But I
was not looking for it before. I will look for that variation. I do
not have a guess as to what is happening there.
I admit that I was not spending much time looking at viewvc because
cgit has been the same problem and haven't been able to mitigate it
there yet. Have to solve it on at least one place before we know how
to solve it other places.
I have been looking at the URL patterns. There are a few clues there.
I am going to start blocking some of the patterns that I am seeing
now. Hopefully that will give some relief.
Bob
--
Dora Scilipoti
gnu.org/education
stallmansupport.org -- Disinformation succeeds because so many people
care deeply about injustice but do not take the time to check the facts.
