> there's no legitimate (non-crawling) reason for someone to request your site from an AWS resource
I used to run an X instance in the cloud that I would sometimes browse websites from. It sucked but it was also legitimate.
I used to run an X instance in the cloud that I would sometimes browse websites from. It sucked but it was also legitimate.
In fact, the ability to move to a different cloud on short notice is also part of the CAPTCHA, because large cloud-based botnets usually can't. They'd get instabanned if they tried to move their crawling boxes to something like DigitalOcean.