Edge & Network

Geo-blocking & IP Intelligence

Edge policy for every dooit platform · geo-fencing, IP reputation and tracking, rate limits, bots, WAF and DDoS

Rate-limit rules

Rule	Route	Counted by	Limit	When exceeded	Hits · 24 h	Status
RL-101	/login	IP + device ID	10/min · burst 20	Challenge	41,880	Active
RL-102	/api/str/submit	API key	600/min · burst 200	Throttle	2,114	Active
RL-103	/report (Whistleblower)	Privacy token	30/hour · burst 5	Proof-of-work	312	Active
RL-104	/v2/str/search	mTLS certificate	120/min · burst 60	Throttle	908	Active
RL-105	/password/reset	IP + account	3 per 15 min	Block 10 min	1,227	Active
RL-106	/circulars	IP	300/min	Challenge	0	Active

Bot score distribution · 24 h

1–9 · automated

8.2%

10–29 · likely automated

3.6%

30–59 · uncertain

5.9%

60–99 · likely human

82.3%

Known bots

Bot	Category	Verification	Action
Googlebot	Search	Reverse DNS + published ranges	Allow
Bingbot	Search	Reverse DNS	Allow
Uptime monitor	Monitoring	Signed header	Allow
AI crawlers	AI training	User agent + ranges	Challenge
Unknown headless Chrome	Unverified	TLS fingerprint + behaviour	Challenge

Challenge ladder

1 · Silent

Proof of a real browser, no interaction

2 · Managed

Invisible check with an accessible fallback

3 · Proof-of-work

Whistleblower Portal: no cookies, no CAPTCHA, no IP kept

4 · Interactive

Last resort, screen-reader friendly

Escalate when

Bot score below 30 or IP risk at or above 0.85

Open-source options

ALTCHA, mCaptcha (proof-of-work)