Thanks. I should have tried it before ask. I used it once, but then replaced by a firewall solution. Now the hackers seem more intelligent, they don't request pages which are served directly by nginx. I'll try it again.