Stuart Henderson wrote: > However nginx would allow blocking user agents by regex (and also would > avoid another problem that these sites run into from time..)
I observe a lot of malicious bot traffic that masquerades as Chrome so this technique is only effective against the lowest hanging fruit. Either that or there are a lot of bored Chrome users with unusual interest in my honeypot. Would solving a CAPTCHA to access CVSWeb per-session be more effective?