@aaron lol, nice, one time I tried to do this on our git server by returning 4mb of text at ~10 bytes per second... It was all fun and games until it started mistaking human users for bots 😔
Sounds like you've solved that by letting the bots out themselves and trap themselves by navigating too deeply into a nonsense area that's separate from the actual site...?
@forestjohnson That's another classic technique. Send headers fast and slow walk the body, most http client implementations won't time out.
Nepenthes does this to a small degree as well. It computes how many bytes to send to have a least one packet per second while still spending the requested delay time to send the whole body.