@phnt @cjd

> I think you could do blocking based on UA for older browsers

Yeah, that, plus X-Forwarded-For, etc. Look at the line in the image in the thread where you were CC'd, there are a lot of things that stick out.

> Anybody that goes there with older browsers or things like curl/wget gets nullrouted for like a day

curl/wget are fine. They are the use-case, more than a browser. The web interface is intended for both people and machines.

> Also you are probably already doing that

Indeed. The problem is solved: the mystery is not.