@jpfox I think it's better to make sure those 'bots' (I have a suspicion they are manually operated) can't sign-up after all. According @href https://gist.github.com/patf/1ae99fdd15718483fc15b1e8c8f25fe2#file-naughty_list_nginx-conf this should work.