What makes no sense is that someone decided to allow all access from a US or UK internet connection without ever challenging it, and decided that any attempt to visit the site from the rest of the world is a possible botnet attack that needs challenging.