Developed an extra security module for the Latency component. Added two values: “default” and “attack”. When no attacks are detected, BotShield will use the default value for all incoming connections, while when an attack is detected, BotShield will use “attack” for all incoming connections.
This approach helps to block slow proxies effectively because, when an attack is detected, BotShield uses “attack” value, which is significantly lower than the default.