Forum Moderators: phranque
Would it do any good to block the user agent?To expand on not2easy's answer: Start by checking some small part of the UA, like “Chrome/114”. If this turns up recent humans as well, expand to a larger chunk of the UA, ending up with the whole thing. I have an environmental variable called botnet_agent that matches a short list of humanoid UAs, which I check every few months to see if they’re still active. (If you’re on shared hosting, using htaccess-or-equivalent, you don’t want to put the server to too much work. If it’s your own server, with a config file that’s read at startup, it is less of an burden, though still non-zero.)