I take comfort in the fact that Oracle hasn’t been able to release new products. They’re basically a legal team wrapped around their existing software.

That said, fuck this guy.

If I had to guess after managing enterprise WAF across hundreds of domains…

It’s either a crowler or vulnerability scanner, and may be scanning by IP address. I don’t think you configured anything wrong.

You may want to add some form of captcha or user agent based filter to get rid of it. Good news is that it’s not necessarily something to worry about.

I’d avoid IP based blocking. It’s only temporarily effective.

The article makes no mention of why the account was frozen in the first place.

I see 803 forks currently, keep up the good work!