Hacker GitHub

← All repos

mitchellkrogza/nginx-ultimate-bad-bot-blocker

View on GitHub ↗ ★ 4,839 Shell

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

8 mentions on Hacker News by 7 people: 1 story, 7 comments · first 2020-02-24 · latest 2025-03-18

Mentions per year 8 mentions · busiest year 2022 (3)
20082026
AllStoriesComments NewestTopOldest
  1. No, not nextcloud, it's the photos on my website. They are CC-BY-NC-ND-4.0 licensed, which genAI doesn't respect in any form. I added these in nginx.conf: map $http_user_agent $blocked_user_agent { default 0; "~*AI2Bot" 1; "~*AI2Bot-Dolma"…
    comment by pmlnr · 2025-03-18 · in Moving away from US cloud services
  2. ▲ 1
    Nginx Bad Bot and User-Agent Blocker
    story by alexzeitler · 2024-03-07 · 0 comments
  3. I manage a network of several hundred websites. About 2 years ago we started blocking bot/crawler user-agents. Some websites see thousands of these requests every day, skewing analytics and eating bandwidth. Tools like this help:…
    comment by josefresco · 2023-11-16 · in Bad bots account for most internet traffic? Analysis
  4. I have found nginx bad bot blocker [1] very handy for this. I have it setup to respond with 444 and it allows me to add my own rules very easily. https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo...
    comment by technonerd · 2022-08-29 · in Large scale Internet SSH brute force attacks seem to have stopped here
  5. Use nginx anti-bot[1] or product such as Fastly or Cloudflare anti-bot feature, which blocks content scrapping and only allows specific bots using rules or AI. Another option is to block VPN, cloud and hosting companies' ASNs. There is no…
    comment by nixcraft · 2022-08-14 · in Ask HN: Any way to ban GPT-4 and others from harvesting my content and data?
  6. I used the ultimate Nginx bad bot blocker on a couple of my side projects, and it is a pretty good project https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo... . Apart from the Cloudflare offers UA blocking and AI driven bot…
    comment by nixcraft · 2022-04-20 · in Videolan.org robots.txt
  7. Same experience here, one spammer DOSing my site, always with similar patterns. I'm already behind Cloudflare and use https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo... but I still have to identify and block them manually,…
    comment by 7373737373 · 2021-12-23 · in Google Drive may restrict files identified as violating ToS
  8. I use: https://github.com/mitchellkrogza/apache-ultimate-bad-bot-bl... https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo...
    comment by sarcasmatwork · 2020-02-24 · in Nearly 1/3 of bad bots are now using residential IPs