I upgraded from apache 2.2 to to 2.4 (my blog) in the most cack handed way ever but somewhere along the change got noticed as the bash exploits (my blog) have mostly stopped apart from few dedicated testers on a sunday – although they never worked to begin with, spam bots (my blog) are down. and botnet computers on lists are down. Since i do not know if the bot or the idiot user is sending the traffic deny seems an great default.
bash exploit 0 bot count today: 1 /var/www/xxx/yyy/bot.txt mod_spamhaus logs 0
Anyhow i neither mind or dont mind that the trailer trash of the internet does not visit the zoo, but the config will remain.