@mhoye @jrconlin @jwz I had good luck applying a 10 byte/sec throttle to IP addresses that hammer more than 10 requests per second. Nothing long-term, just transient.