[pnm]

And my guess is the offender is reading these messages, because shortly after there was another run of 325,000 requests from an address in Japan

[pnm]

edit: I re-implemented a solution that was running on the previous server, so now attempts like these should be auto-detected and result in an automatic block

and that runs into an issue with browsers on Android phones: for some reason they try to download Apple icons at a very high rate.
For example, this evening at about 17.55 local time a single user accessed the site with an Android phone, resulting in 50-60 requests for Apple icons per second for about half a minute.

Needless to say, the new software flagged this as a DDOS attack and blocked the user

So now to find a fix for this...

[pnm]

Not DDOS this time: some more filtering + blocking added.

About 500 hacking attemps in the past 12 hours, from 8 different sources:
automated scripts that look for configuration/development files left online by accident.

(this is nothing special, just posted these stats because I thought to look for the attempts
and do something about it.. )

[pnm]

This thread is getting longer and longer: apparently the "Apple bot" can get past the "Anubis anti crawler check" that I put in, and has been hitting the forum with about 6000 requests an hour today alone.

Apple sent ~ 1.7 million of these requests during the past 2 weeks, many of them duplicates

(Apple does not respect the "crawl delay" directive, designed to slow these crawlers down to a normal rate).

I've now added a directive specifically for the forum for this bot, I hope this works

[pnm]

And today I added some smarter filtering to automatically block
a bunch of computers scanning for security holes: over 1000 attemps a day during
the past week from a single "block" of internet addresses