Vol. I · Fri, 2 Oct 2026Open 24 hours · Feeding: continuous · Please do not tap the glass
Plate XLV0xEA024C8EUNREAD
Kingdom Automata›Phylum HTTP›Order Scanners›Family Unidentified›Species Go-http-client
Specimen file · The Feral Pit

Go-http-client

Gopher incognitus

What is Go-http-client?

The default identity of programs written in Go that didn't bother to name themselves. It is operated by Unknown and identifies itself as Go-http-client.

Temperament: restless. Tries /wp-login.php on a site with no WordPress. Every day. Has not learned.

Operator
Unknown
Conservation status
Has not read the rules
First seen
1 Oct 2026
Last seen
12 h ago
Visits today
45
This week
45
All time
45
Caught in the trap
Never
§ I.

Identification

Its full user-agent string, exactly as it arrives at the gate:

User-Agent
$ Go-http-client/1.1

There is no operator to verify against. This name is what software calls itself when nobody gave it one.

§ II.

How to block Go-http-client

Go-http-client does not read robots.txt, so a polite sign is wasted on it. Refuse it at your web server or firewall instead. User agents are easy to fake, so pair this with rate limiting.

nginx.conf
# robots.txt will not stop Go-http-client. Block it at the server.
# nginx
if ($http_user_agent ~* "Go-http-client") {
    return 403;
}

The same thing on Apache:

# Apache (.htaccess)
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} Go-http-client [NC]
RewriteRule .* - [F,L]
§ III.

Observed behaviour

Visits, last 30 dayspeak 45 / day
3 Sept 2026today
Diet · pages most often eaten
/21
/wp-admin/setup-config.php1
/user_secrets.yml1
/storage/logs/laravel.log1
/server.key1
Visiting hours
00h – 11h12h – 23h

Most active around 06:00. Before the coffee is made.

robots.txt compliance
100.0%

Requested 0 disallowed pages out of 45 requests. Never read robots.txt.

Trap Room record
Clean

Has never followed the hidden link to /trap/. Either well trained or very lucky.

§ IV.

Where it comes from

Scripts and scanners run from wherever their owners rent a server. These are the networks behind the visits on file:

Networks · 3 on file, last 30 days
Eweka Internet Services B.V. AS3434358%
Datacamp Limited AS21223840%
31173 Services AB AS393512%
Countries
United Kingdom GB58%
Germany DE40%
Sweden SE2%

Networks and countries come from the visitor's IP address, looked up in a local copy of the DB-IP database. The addresses themselves are never stored.

§ V.

Keeper's field notes

2 Oct 202606:19. Arrived without announcement. Consumed /config.php and /.bash_history. Departed.
2 Oct 2026Visited 45 times in a single day. Keeper unable to establish why.
1 Oct 2026First recorded at the gate. Entered in the register as Gopher incognitus.
§ VI.

Questions site owners ask

Does Go-http-client respect robots.txt?

We can't say yet. It has not fetched robots.txt here, and it has not touched a disallowed page either.

Will blocking Go-http-client hurt my search rankings?

No. Nothing respectable will miss it.

How often does Go-http-client visit?

Here, about 6 requests a day over the last week. Visits to your site depend on its size, how often it changes, and how many links point to it.

Also in The Feral Pit