Then what did he do?
https://gator.io does a pretty good job at identifying data center IP ranges
Since LE certs have 90 day expiration, I use a monitoring/notification service called https://letsmonitor.org
You can see visitors segmented by datacenter/TOR/spoofed user agent/hidden attributes. There is an API to score users in realtime.
The issue I've had with LetsEncrypt is the short expirations. LetsMonitor.org sets up an alert system for expirations
Then what did he do?
https://gator.io does a pretty good job at identifying data center IP ranges
Since LE certs have 90 day expiration, I use a monitoring/notification service called https://letsmonitor.org
You can see visitors segmented by datacenter/TOR/spoofed user agent/hidden attributes. There is an API to score users in realtime.
The issue I've had with LetsEncrypt is the short expirations. LetsMonitor.org sets up an alert system for expirations