Stuart Henderson wrote:

> However nginx would allow blocking user agents by regex (and also would
> avoid another problem that these sites run into from time..)

I observe a lot of malicious bot traffic that masquerades as Chrome so
this technique is only effective against the lowest hanging fruit. Either
that or there are a lot of bored Chrome users with unusual interest in my
honeypot.

Would solving a CAPTCHA to access CVSWeb per-session be more effective?

Reply via email to