A whole eight seconds? Talk about lucky. We have misbehaving bots that attempt to hit the same page or small handful of pages on our site 50-100 times simultaneously, repeating this every couple of seconds. And they have tons of IP addresses they do it from so you don't see the same IP in your logs more than a couple of times a day. They seem to be doing it specifically to attempt to evade simple IP detection in order to make it harder to block them. And there aren't that many IPv4 addresses in the world anymore, so the conspiracy theorist in me wonders if the AI chucklefucks are using some manner of malware to route their traffic through botnets these days. Stealing people's bandwidth and not just their copyrighted content. It'd certainly be on brand.

For my block lists I have to look at patterns of behavior now instead, and even that's not a sure fire thing. It'd be easy to block a legitimate user who just so happens to be trying to load the same page/product at the same time the clankers are fixated on it.

Putting the entire thing behind Cloudflare helped a lot. Unfortunately, I just got an email from them which seems to imply that by default they're going to start letting more bots through, which seems like a counterproductive move...