Just anecdotally I still see as many bots as always. Embrace the bots, have fun with them.

    # nginx rule to Awaken AWS GuardDuty and GCP SCC, maybe get them to fix a few VMs, enable on all non-wordpress sites after testing in dev/qa
    location ~* /(xmlrpc|wp-login\.php|wp-admin) { log_not_found off; access_log off; return 301 http://169.254.169.254$request_uri; }

▲ jmuguy 2 hours ago | parent | next [-]

I really ought to do something like this rather than just allowing our logs to endlessly fill with requests for wp-admin.

▲ za_creature 2 hours ago | parent | prev | next [-]

▲ antonvs an hour ago | parent | prev [-]

There are different kinds of bots. The ones of interest that would have been using Yandex are those that post political comments or misinformation on social media sites. Bots that are just trying generic hacks are more likely to be much more widely distributed, because not every country is trying to hack the US psyche.

	▲	Bender an hour ago \| parent [-]
		The ones of interest that would have been using Yandex are those that post political comments or misinformation on social media sites. For those bots I put their networks into an nginx geo file along with detecting other characteristics and set a variable that tells my app to allow them to post, but all their posts go into a moderator review queue. Some use residential proxies but I've learned how to automatically detect the never-before-seen residential proxies almost instantly now even when they are properly instrumenting Headless Chrome. Only I see Статуя Свободы мертва.