mitchellkrogza/nginx-ultimate-bad-bot-blocker

Features

• Malicious Traffic Blocking - Filters malicious traffic from known bad bots, malware distributors, and scanners using curated blocklists.
• Bot Mitigation Configurations - Filters malicious user agents and scanners using automated blocklists to reduce server load and security risks.
• Login - Detects and blocks repeated login attempts by monitoring request rates and matching attack patterns.
• NGINX Configuration Management - Provides a collection of configuration files and scripts to filter malicious user-agents and IP addresses in Nginx.
• Automated IP Banning - Automatically blocks IP addresses based on repeated error patterns found in server access logs.
• Log-Based Temporary Bans - Monitors server logs for frequent errors to trigger firewall bans for aggressive bots over a set duration.
• Automated Server Hardening - Updates security configurations and blocklists on a schedule to defend against emerging malware and scanners.
• Automated Blocklist Subscriptions - Periodically fetches and merges blocklists from trusted sources to maintain current security rules.
• Custom Blocklist Definitions - Enables the addition of specific user-agents and referrer domains to the blacklist to block emerging malicious sources.
• Intrusion Prevention Systems - Monitors server logs to identify repeat offenders and trigger firewall bans for bots and login attacks.
• Security Rule Auto-Updates - Automatically downloads updated bot definitions and reloads the server on a schedule.
• Log-Based Firewall Integration - Integrates with Fail2Ban to monitor Nginx errors and trigger firewall blocks for repeat offenders.
• Nginx Security Hardening - Acts as a security layer for Nginx to mitigate DDoS attacks, brute-forcing, and vulnerability scanning.
• DDoS Mitigation - Implements configuration rules to detect and limit high-volume request patterns typical of DDoS attacks.
• Referrer Spam Filtering - Prevents traffic from known malicious domains and spammy referrers to stop referral attacks.
• Cron Scheduling - Implements scheduled background tasks using cron expressions to update threat intelligence lists.
• Connection Dropping - Terminates connections from blocked clients immediately without sending a response to make the server appear offline.
• Immediate Connection Dropping - Configures the server to immediately close connections for malicious patterns without returning an HTTP response.
• Referrer Spam Filtering - Inspects the HTTP Referer header and blocks requests from known malicious or spammy domains.
• Search Engine Spam Filtering - Generates disavow lists and robots.txt files to prevent spammy domains and bad bots from indexing sites.
• Crawler Detection - Blocks requests from bots masquerading as legitimate search crawlers to prevent ghost spam.
• Custom Access Rules - Allows the definition of specific IPs, domains, and user agents in configuration files to override default security settings.
• Robots File Automation - Provides scripts to update access control files across multiple websites to keep bot directives current.
• Rate Limiting - Caps the frequency of visits for specific spiders to prevent server strain while maintaining legitimate access.
• IP-Based Rate Limiting - Restricts the number of requests per second from specific IP addresses or bots using Nginx limit modules.
• Robots.txt Generation - Generates standardized robots.txt files to control how automated crawlers index the site.
• Search Engine Optimization - Generates disavow lists and manages robots files to prevent bad bots from impacting site indexing.

Star history