Post #2686060

@tdp_org@mastodon.social I can see this escalating, next is that they use semi random user-agent strings and/or don't publish themself. For myself (small open source project server) I just made the simplest behavioral analysis possible: Firewall limits new connections from an IP to a slow rate (after some initial burst). Normal user clients would use pipelining, they wont make hundreds of connection attempts. Webserver gives the first few MB for free and then limits the bandwidth to a crawl.