[pnm]

And my guess is the offender is reading these messages, because shortly after there was another run of 325,000 requests from an address in Japan

[pnm]

edit: I re-implemented a solution that was running on the previous server, so now attempts like these should be auto-detected and result in an automatic block

and that runs into an issue with browsers on Android phones: for some reason they try to download Apple icons at a very high rate.
For example, this evening at about 17.55 local time a single user accessed the site with an Android phone, resulting in 50-60 requests for Apple icons per second for about half a minute.

Needless to say, the new software flagged this as a DDOS attack and blocked the user

So now to find a fix for this...

[pnm]

Not DDOS this time: some more filtering + blocking added.

About 500 hacking attemps in the past 12 hours, from 8 different sources:
automated scripts that look for configuration/development files left online by accident.

(this is nothing special, just posted these stats because I thought to look for the attempts
and do something about it.. )