Gentoo Closes Bugzilla Over AI Scraper Overload

Gentoo Linux pulled the plug on its public Bugzilla, and the culprit isn’t a hardware failure or a botched migration. It’s AI scraper bots. According to Hacker News, where the story climbed with a score of 167, the distribution’s bug tracker buckled under a flood of automated traffic from crawlers harvesting data, most of it feeding the training and retrieval pipelines behind large language models.

This is the same story hitting open-source projects everywhere, and Gentoo is just the latest name on the list.

What happened

Gentoo’s Bugzilla is where volunteers file, triage, and fix bugs across thousands of software packages. It’s a working tool for maintainers, not a marketing site. When aggressive bots hammer a service like that with relentless requests, they don’t just slow it down. They can drown the server, spike hosting costs, and lock out the actual humans trying to get work done.

Hacker News reports the tracker was taken offline to stop the bleeding. For a volunteer-run project, that’s often the only lever available. You can’t negotiate with a swarm that ignores your rules.

Why this keeps happening

Modern AI companies need enormous volumes of text and code. Bug trackers, mailing lists, wikis, and git forges are gold mines: structured, technical, human-written content. So the crawlers come.

The problem is behavior. Many of these bots:

  • Ignore robots.txt, the long-standing convention for telling crawlers where not to go.
  • Rotate IP addresses and fake user agents, which makes them hard to block.
  • Re-scrape the same dynamic pages over and over, generating far more load than a normal visitor.

What stands out here is the target. Dynamic pages like Bugzilla queries are expensive to serve. Each request can trigger database work. A human clicks a few times a minute. A bot fleet can fire thousands of requests a second.

This isn’t isolated

Gentoo joins a growing roster of open-source and nonprofit projects that have taken drastic steps against AI crawlers over the past year. The Fedora project, KDE, the GNOME desktop community, Read the Docs, and code-hosting service SourceHut have all reported crushing bot traffic and rolled out countermeasures, from aggressive rate limiting to full-on challenge pages.

Some maintainers have started deploying tools like Anubis, a proof-of-work gate that forces every visitor’s browser to solve a small computational puzzle before loading a page. It’s cheap for a real person and expensive for a bot farm running at scale. The fact that projects are reaching for tactics like that tells you how bad it’s gotten.

The status quo before this wave was simple: you published robots.txt, well-behaved crawlers respected it, and everyone coexisted. That social contract is breaking down.

Why it matters for the industry

The AI industry runs on data, and the cheapest data is public. But “public” was never meant to mean “free to strip-mine at any volume.” When open infrastructure goes dark because scrapers made it unusable, everyone loses, including the AI labs that depend on that same open ecosystem for training material.

There’s a real risk of a feedback loop. If projects wall off their bug trackers, docs, and forums to survive, the open web that made these models possible starts to shrink. Future models get worse data, and developers lose shared resources they’ve relied on for decades.

What to watch next

A few things are worth tracking if you build or maintain anything public-facing:

  1. More gates, fewer open doors. Expect proof-of-work challenges and mandatory logins to spread across community infrastructure.
  2. Pressure on AI vendors. Calls are growing for crawlers to identify themselves honestly and respect rate limits, possibly enforced through legal or contractual means.
  3. A market for polite scraping. Licensed data deals and official APIs become more attractive as raw scraping gets blocked and litigated.

Gentoo’s shutdown is a small event with a large signal. The open web and the AI systems feeding on it are on a collision course, and infrastructure maintainers are the ones absorbing the hit. You can find the full discussion and details at the original source.

Scroll to Top