My point is simple: - if you’re running out of resources, do you care whether it’s a deliberate, malicious attack or just traffic that takes your site down? - if you’re not running out of resources, what is really being attacked? “attack” is irrelevant. If you have resources you need to protect from over use or incorrect use, do so. Stop trying to decide WHY; it’s enough to address HOW. Joe |