Comment by jamesmawm

Good read. Some thoughts: - Add throttling at nginx level - Proactive monitoring and alerts needed - Should fool the attacker into querying a fake endpoint