This batch right there does since its at the tail end of an 8 hour session of banning everything that connected to the site. The guy does indeed rotate user agents on his bots, I've seen him masquerade as Netscape Navigator 5 at one point, which was impressive since the browser was never released.
map $http_user_agent $baduseragents {
default 0;
"~Trident/[1-7]\." 1;
"~Chrome/(([1-9]{1})|([0-7]{1}[0-9]{1})|(7[0-9]{1}))\." 1;
"~YaBrowser/(([1-9]{1})|([1-9]{1}[0-8]{1}))\." 1;
"~Firefox/(([1-9]{1})|([0-7]{1}[0-9]{1})|(8[0-9]{1}))\." 1;
"~EdgA?/(([1-9]{1})|([0-7]{1}[0-9]{1})|(8[0-6]{1}))\." 1;
"~Version/(([1-9]{1})|([1-9]{1}[0-1]{1}))\." 1;
} 
Oddbean new post about login | logout