I will contact support to see if I can somehow figure out which User-Agents I could block, but usually these guys are sending false user agents to disguise themselves as chrome on windows or something similar.
I’ve had Anti-Crawler on when I’ve seen 1000+ users from a small town in Iowa all within 30 minutes, all from rotating IP addresses on Google Cloud. Anti-Crawler was missing them because they learn to hit the site maybe 5 times with an IP before rotating to the next IP.
I was able to write a plugin tha watches the entire IP address range and progressively go from giving a 403 to an IP for a short time, increasing the length on subsequent violations and then if it sees traffic from the same IP range violating the rules, then it starts blocking the range for increasingly longer times.
I’ll share it with support.
Thank you for such a quick easy fix!
I’d upgraded the affected sites to PHP 8.1 and neglected to add the CURL extensions for PHP 8 and 8.1 to Apache.
This is a MUST HAVE Plugin. I love it.