Auto Spider 1.0

[TorontoBoy]

UA: Auto Spider 1.0
Protocol: HTTP/1.1
Robots.txt: No
Host: CHINANET-GD
113.64.0.0 - 113.95.255.255 113.65.228.*
descr: CHINANET Guangdong province network, reference to 189.cn
No known source code
Reference: [webuseragents.com...]

No beating around the bush with this Chinese bot. just 7 POSTs away in quick succession.

113.65.228.* [02/Jul/2018:21:15:07 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:08 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:10 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:13 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:15 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:17 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1
113.65.228.* [02/Jul/2018:21:15:19 POST /example/repairing-my-leaky-suncast-side-tracker/ HTTP/1.1

[keyplyr]

I have the luxury of not allowing POST from outside sources.

[lucy24]

just 7 POSTs away in quick succession.

This kind of thing clearly depends a lot on your individual site. Some sites you can unconditionally block POST requests, or all except to the contact page; some sites it isn’t so easy. The same, only more so, for PUT requests.

[keyplyr]

...only more so, for PUT requests

That too.