Maybe this is a naive question, but why not just cut an IP off temporarily if it sends too many requests or sends them too fast?
Maybe this is a naive question, but why not just cut an IP off temporarily if it sends too many requests or sends them too fast?
They use many IPs, often not identifiable as the same bot.