3 ms·
Very similar experience here. Started July 30, sustained through August 6, when it started a significant ramp-up in volume (5x or so). Most of the traffic is o
by oasisbob 2mo ago
Very similar experience here. Started July 30, sustained through August 6, when it started a significant ramp-up in volume (5x or so).
Most of the traffic is originating in GCP. We're seeing ~70k req/min sustained from Google Cloud IP space (AS396982). Reported to GCP Abuse, they've been non-responsive so far.
The main distinguishing factor is the reuse of a bunch of legit AI-training bot UserAgent strings. It's clear that the traffic is under the same centralized control because of how it changes volume across thousands of IP addresses simultaneously.
- gavinhking 2mo agoSeems like you’re part of the group represented in this dataset trend then, many of these visits are also from (compromised) Google servers in that same ASN.
- mcmcmc 2mo agoIf how they’ve handled Gmail abuse is any indicator, they’re not likely to do anything. They’re still getting paid for the server time