logoalt Hacker News

mattllast Wednesday at 6:23 AM1 replyview on HN

Yep or consider just blocking AS numbers of places people typically aren’t purchasing things from such as cheap VPS companies.

The user agents, can you post those?


Replies

lun4rlast Wednesday at 9:27 AM

Check if the client sends the "Accept" and/or "Accept-Language" header. Or check if the order of request headers matches what would be expected from that generic User Agent. You'd be surprised how often they fail to send "Accept-Language", while every "normal" browser does.