Yeah, because someone downloading documents, at the rate supplied by your server(!), is obviously an attacker. For what it's worth, it would have been obvious

Yeah, because someone downloading documents, at the rate supplied by your server(!), is obviously an attacker. For what it's worth, it would have been obvious they weren't facing a DoS.