I just recognised a peak in our access logs and I'm curious how to explain this or if my suggestion how to explain is right.
There about 600 requests in 3 minutes with a referrer like this:
The number in the
s= parameter within the
u= parameter, in this case
23842660217050537, is changing every request. (The
s= parameter has no function on the website).
My guess is that somebody is posting many URLs with the changing
Isn't facebook doing a rate limiting for those requests?
Is this some kind of extremely ineffective reflection attack or more likely an attempt to crawl our website with requesting the same page?