5 ms·

There is plenty of information to go off of. They just don't want to put in the engineering effort required to utilize it. Is there really a constant DDoS atta

• tracker1 11y ago
  On a given site, not necessarily, but on some sites that cloudflare is protecting, pretty much always would be my guess... cloudflare doesn't know you're not the spammer/bot/malicious actor using the same exit node... it only knows that you don't have any cookies, and that means you look a lot like the bad guys coming from the same IP. One could setup an IDENT-like service that delivers a hash for the source's route, and that would enable better scoring, but also could be used as a tracking measure... you can't have one without the other. Even then, it would take either the user allowing cookies, or the TOR system to change their exit nodes.
  • lqdc13 11y ago
    There are a number of other ways to identify abuse. Listed those in other responses.