in regards to your IPv6 comment... IPv6 is actually very easy to restrict; only allow one freebie per /64 and also check if any requests made within a short space of each-other have come from the same /56 or /48 and if so, block accordingly.