4 ms·
If the bot is running from a cloud instance then you can fairly easily block it using something like Zeek. For example: https://help.shodan.io/zeek-integration/
by achillean 4y ago
If the bot is running from a cloud instance then you can fairly easily block it using something like Zeek. For example: https://help.shodan.io/zeek-integration/4-blocking https://help.shodan.io/zeek-integration/4-blocking
You could also check if the remote IP has any open ports (ex. SSH) and block based on that as most regular visitors probably won't be exposing those types of services to the Internet.