I'm sure they could differentiate the hug of death due to sudden popularity vs the continued onslaught of scripted bots just by frequency of requests, right? As in, single IP frequency of pings measured out across a batch of addresses. Those malicious would be more regimented with short recycle times, while those unmalicious would be browsing making their repeated calls erratic. (Honest question, I'm genuinely curious.)