TikTokSpider - crashed our server

47.128.121.68

[Bewenched]

47.128.121.68 (Canada)3/14/2025 5:01:33 PM/images/products/thumbnails/KCH5205.jpg1.21 KB614206 - Partial ContentGEThttps://www.xxxxx.com/xxx/xxx/xxx/page_1.htmMozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [e-mail])

Hammered our site so hard it crashed our server twice, never asked for robots.txt

[Brett_Tabke]

Is it still on your site? Do you know why they targeted your site for spidering? Did someone drop a link in a comment on TT or? Do you produce TikToks? Was there a "link in bio" that they followed?

I ask because none of our sites have seen the spider.

[lucy24]

whois says 47.128.0.0/14 is an Amazon range. Are you sure it isn’t some random faker? I don't see vast numbers from 47.128.121, but probably half of them are “Go-http-client/2.0”, which does not inspire confidence.

[tangor]

Hmmm... missed this first time around. As for the range, it appears denied via a UA mask re go-http which apparently seems to abound there.

[Brett_Tabke]

tiktok does use aws...

[lucy24]

Well, if they want to get themselves blocked a priori ...

[SumGuy]

Yea the IP is AWS and you really should be IP-blocking most of AWS. I think the geo-location is Singapore, not Canada.