The perils of the “real” client IP
I'd argue that this whole concept is inherently flawed.  My home internet is behind a carrier grade NAT.  Many services have rate limited the IP.  It's to the point where I'm strongly considering paying a "streaming friendly" VPN to black hat subvert these reputation schemes.<p>The biggest offenders are internet of things backends for registered devices I "own" and streaming services I'm paying for.<p>Edit: Here's a concrete example:  I looked up my CGNAT IP and saw that it was flagged as a malicious actor because someone ran a port scan from it a month ago.<p>Now that this offence has started to age out, a few services started working again.  My entire ISP can be trivially DOS'ed with a raspberry pi and NMAP!<p>Of course, other services seem to just do per-IP rate limiting, so they run at << 1MB/s during peak hours.  Fast.com and Speedtest.net claim the connection is healthy.