@rakoo possibly. From what I've seen, those scrapers that use millions of ips work from a queue. Poison the queue, and you can avoid serving even one such request.

Last December, I was hit by such a wave1, each IP sending no more than 5 requests (usually fewer). But they all hit poisoned urls, and were caught. I taught iocaine to firewall them off, and it's been quiet ever since.

Mind you, poisoning the queue takes time - I've been doing that for almost two years now. Dropping iocaine in does not immediately solve the problem. With that said, I've recently had someone report that they've seen the poisoned urls work their magic within days.

1. I measured ~8k req/sec sustained over a week, from millions of unique, mostly residential IPs from around the globe. It was likely higher, but my vps was unable to handle the tls handhakes and fell over, and I couldn't afford scaling it up further. ↩︎