Should be nice to have some feature to put a BAD IP in a black list so we can for example ignore connection from that IP for some time. I was think to the HTTPServer that is a TCP server, because you do the "black list logic" in the createRequestHandler of HTTPRequest is too late because you are already in the thread that serve connection, so a BAD (probably intentional) client can easly block your server