Repeated requests with changing addresses
Automated traffic can switch internet addresses while repeating the same browser fingerprint. A limit based only on an address can miss that pattern.
How sign-in helps: a protected request must include a valid signed-in session; changing an address alone does not provide one.
