Technical write-up
Panopticon: Behavioural Abuse Detection Engine
Why rate limiting by IP address trusts the wrong signal, and an engine that clusters traffic on behaviour and JA4 fingerprints, with a population check for fleets that look too unique to be real.
First published elsewhere
The full article is published on Medium. This page keeps a summary and links it to related research and projects.