gavinhking

Seems like you’re part of the group represented in this dataset trend then, many of these visits are also from (compromised) Google servers in that same ASN.

Appreciate it, I'll check out your posts.

Basically, unless CF is counting static asset network requests etc. For what it's worth, GA also miscategorizes some bots as humans as well.

(Insert spider man meme)

Good to know, thank you. Would you do this by fully blocking particular ASNs? Or something more granular?

Fair enough

That doesn't change the data/math brother

What's your strategy?

Not asking for trust, just sharing the data/math

Totally. I'm sure this campaign was inspired by sloppy vibe coding

This is a random sample of completely unrelated websites, which indicates that the total scale is much larger. This is not saying that it is difficult to make thousands of requests.

Looks like many of the paths relate to AI coding tools. There are some examples below the chart

Another interesting thing here is the paths they're targeting, many are for newish AI coding tools

Definitely, the point here though is there is a stat sig surge in the chart in the last week, across thousands of websites. At least a surge in this particular spoofing pattern.