Comment by mattl
4 days ago
Yep or consider just blocking AS numbers of places people typically aren’t purchasing things from such as cheap VPS companies.
The user agents, can you post those?
4 days ago
Yep or consider just blocking AS numbers of places people typically aren’t purchasing things from such as cheap VPS companies.
The user agents, can you post those?
Check if the client sends the "Accept" and/or "Accept-Language" header. Or check if the order of request headers matches what would be expected from that generic User Agent. You'd be surprised how often they fail to send "Accept-Language", while every "normal" browser does.