They returned today. I've blocked their whole subnet: 5.10.83.0/24. Let us know if you have friends there ;-)
@Pawel I have a nice set of Rewrite rules based on USER AGENT to scan for bad bots. They will get a 403 page in return. If you are interested I can PM it to you. I do not want to publish them, since the bots might change their signature.
We don't need it at the moment. It was single bot this time. Right now we're mostly crawled by google and within reasonable limits.
I'll keep that in mind in case of similar problem. Thanks!
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.