[chillfox]

They were talking about logged in accounts, so you would group by accounts for the rate limiting and not by ip addresses.

[nijave]

They were unauthenticated requests making GETs to the login page