I was recently guilty of abusing the pkg.go.dev website to get license info for checks in CI. We got rate limited and have self corrected the quick implementation that lead to this.

Rate limiting is a better first step, especially if they have high IP correlation for abuse