V4.2019.06.1634 [ci skip]

This commit is contained in:
Travis 2019-06-27 10:52:35 +02:00
parent 6fac493778
commit 8125dcded8
39 changed files with 19498 additions and 2085 deletions

View file

@ -38,10 +38,11 @@
# More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)" # More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)"
# If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block. # If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block.
if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) { # UNCOMMENT THE NEXT 4 LINES TO ACTIVATE THE SUPER WHITELIST
#if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) {
#set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s) #set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s)
#set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s) #set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s)
} #}
# -------------- # --------------
# BLOCK BAD BOTS # BLOCK BAD BOTS

View file

@ -33,4 +33,4 @@
# 111.111.111.111 0; # 111.111.111.111 0;
35.192.85.2 0; 34.66.178.120 0;

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1633 ### Version: V4.2019.06.1634
### Updated: Thu Jun 27 09:10:20 SAST 2019 ### Updated: Thu Jun 27 10:50:24 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -38,10 +38,11 @@
# More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)" # More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)"
# If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block. # If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block.
if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) { # UNCOMMENT THE NEXT 4 LINES TO ACTIVATE THE SUPER WHITELIST
#if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) {
#set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s) #set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s)
#set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s) #set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s)
} #}
# -------------- # --------------
# BLOCK BAD BOTS # BLOCK BAD BOTS

View file

@ -33,4 +33,4 @@
# 111.111.111.111 0; # 111.111.111.111 0;
35.192.85.2 0; 34.66.178.120 0;

View file

@ -1,22 +1,21 @@
### ********************************** ### -----------------------------------------------------------
### THE ULTIMATE NGINX BAD BOT BLOCKER ### THE NGINX ULTIMATE BAD BOT, BAD IP AND BAD REFERRER BLOCKER
### ********************************** ### -----------------------------------------------------------
### !!!!!!!!!!!!!
### TEST TEMPLATE
### THIS VERSION IS USED FOR TESTING ANY POTENTIAL BREAKING CHANGES
### !!!!!!!!!!!!!
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V3.2019.06.1633 ### Version: V3.2019.06.1634
### Updated: Thu Jun 27 09:10:21 SAST 2019 ### Updated: Thu Jun 27 10:50:26 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################
### VERSION INFORMATION ## ### VERSION INFORMATION ##
### --------------------------------------------
### HELP SUPPORT THIS PROJECT - Send Me a Coffee
### https://ko-fi.com/mitchellkrog
### --------------------------------------------
############################################################################## ##############################################################################
# _ __ _ # # _ __ _ #
# / |/ /__ _(_)__ __ __ # # / |/ /__ _(_)__ __ __ #
@ -34,12 +33,16 @@
### and also has rate limiting functionality for bad bots who you only want to rate limit ### and also has rate limiting functionality for bad bots who you only want to rate limit
### and not actually block out entirely. It is very powerful and also very flexible. ### and not actually block out entirely. It is very powerful and also very flexible.
### --------------------------------------------------------------------------
### Created By: https://github.com/mitchellkrogza/ ### Created By: https://github.com/mitchellkrogza/
### Repo Url: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker ### Repo Url: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
### Copyright Mitchell Krog - <mitchellkrog@gmail.com> ### Copyright Mitchell Krog - <mitchellkrog@gmail.com>
### Contributors: Stuart Cardall - https://github.com/itoffshore ### Contributors: Stuart Cardall - https://github.com/itoffshore
### --------------------------------------------------------------------------
### --------------------------------------------------------------------------
### Tested on: nginx/1.10.3 up to latest Mainstream Version (Ubuntu 16.04) ### Tested on: nginx/1.10.3 up to latest Mainstream Version (Ubuntu 16.04)
### --------------------------------------------------------------------------
### This list was developed and is in use on a live Nginx server running some very busy web sites. ### This list was developed and is in use on a live Nginx server running some very busy web sites.
### It was built from the ground up using real data from daily logs and is updated almost daily. ### It was built from the ground up using real data from daily logs and is updated almost daily.
@ -47,9 +50,9 @@
### spam referrers, rogue IP address, scanners, scrapers and domain hijacking sites are extensively checked ### spam referrers, rogue IP address, scanners, scrapers and domain hijacking sites are extensively checked
### before they are added. It is monitored extensively for any false positives. ### before they are added. It is monitored extensively for any false positives.
### ********* ### ---------
### Features: ### Features:
### ********* ### ---------
### Clear formatting for Ease of Maintenance. ### Clear formatting for Ease of Maintenance.
### Alphabetically ordered lists for Ease of Maintenance. ### Alphabetically ordered lists for Ease of Maintenance.
### Extensive Commenting for Ease of Reference. ### Extensive Commenting for Ease of Reference.
@ -60,40 +63,38 @@
### IP range blocking / whitelisting. ### IP range blocking / whitelisting.
### Rate Limiting Functions. ### Rate Limiting Functions.
### ************ ### ------------
### INSTALLATION ### INSTALLATION
### ************ ### ------------
### PLEASE use the install, setup and update scripts provided for you to ease your installation. ### PLEASE use the install, setup and update scripts provided for you to ease your installation.
### This Auto Installation procedure is documented in the README.md and AUTO-CONFIGURATION.md files. ### This Auto Installation procedure is documented in the README.md and AUTO-CONFIGURATION.md files.
### Installation, Setup and Update Scripts Contributed by Stuart Cardall - https://github.com/itoffshore ### Installation, Setup and Update Scripts Contributed by Stuart Cardall - https://github.com/itoffshore
### There are also manual configuration instructions provided for those not wishing to do an auto install. ### There are also manual configuration instructions provided for those not wishing to do an auto install.
### *********************************************** ### -----------------------------------------------
### !!!!! PLEASE READ INLINE NOTES ON TESTING !!!!! ### !!!!! PLEASE READ INLINE NOTES ON TESTING !!!!!
### *********************************************** ### -----------------------------------------------
### Note that: ### SETTINGS:
### ---------------------------------------------
### 0 = allowed - no limits ### 0 = allowed - no limits
### 1 = allowed or rate limited less restrictive ### 1 = allowed or rate limited less restrictive
### 2 = rate limited more ### 2 = rate limited more
### 3 = block completely ### 3 = block completely
### ---------------------------------------------
### ************************************************************ ### ------------------------------------------------------------
### CONTRIBUTING / PULL REQUESTS / ADDING YOUR OWN BAD REFERRERS ### CONTRIBUTING / PULL REQUESTS / ADDING YOUR OWN BAD REFERRERS
### ************************************************************ ### ------------------------------------------------------------
### For contributing, corrections or adding bots or referrers to this repo, ### For contributing, corrections or adding bots or referrers to this repo,
### Send a Pull Request (PR) on any of the .list files in the _generator_lists folder ### Send a Pull Request (PR) on any of the .list files in the _generator_lists folder
### All Pull Requests will be checked for accuracy before being merged. ### All Pull Requests will be checked for accuracy before being merged.
# ********************************* # -----------------------
# FIRST BLOCK BY USER-AGENT STRINGS
# *********************************
# ***********************
# !!!!! PLEASE TEST !!!!! # !!!!! PLEASE TEST !!!!!
# *********************** # -----------------------
# ALWAYS test any User-Agent Strings you add here to make sure you have it right # ALWAYS test any User-Agent Strings you add here to make sure you have it right
# Use a Chrome Extension called "User-Agent Switcher for Chrome" where you can create your # Use a Chrome Extension called "User-Agent Switcher for Chrome" where you can create your
@ -104,36 +105,46 @@
# curl -I http://www.yourdomain.com -A "GoogleBot" ---- GIVES YOU: HTTP/1.1 200 OK (Meaning web page was served to Client) # curl -I http://www.yourdomain.com -A "GoogleBot" ---- GIVES YOU: HTTP/1.1 200 OK (Meaning web page was served to Client)
# curl -I http://www.yourdomain.com -A "80legs" ---- GIVES YOU: curl: (52) Empty reply from server (Meaning Nginx gave a 444 Dropped Connection) # curl -I http://www.yourdomain.com -A "80legs" ---- GIVES YOU: curl: (52) Empty reply from server (Meaning Nginx gave a 444 Dropped Connection)
# In this section we allow/disallow specific User Agents / Bots.
# ********************************************************************* # =======================
# Now we map all good and bad user agents to a variable called $bad_bot # START BLOCKER FUNCTIONS
# ********************************************************************* # =======================
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# DO NOT EDIT ANYTHING BELOW THIS LINE !!!
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# =============================
# BEGIN SECTION 1 - USER-AGENTS
# =============================
# ALLOW / BLOCK User Agents / Bots
# -------------------------------------------------------------------
# Map all GOOD and BAD UA (User Agents) to a variable called $bad_bot
# -------------------------------------------------------------------
map $http_user_agent $bad_bot { map $http_user_agent $bad_bot {
default 0; default 0;
# *********************************************** # -----------------------------------------------------------------------------------
# Include your Own Custom List of Bad User Agents
# ***********************************************
# Use the include file below to further customize your own list of additional user-agents you wish to permanently block
# This include file allows whitelisting and blacklisting of anything specified below it, meaning you can over-ride anything in this blocker to your liking.
# ***********************************************************************************
# START CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *********************************************************************************** # -----------------------------------------------------------------------------------
# Include your Own Custom List of Bad User Agents
# Use the include file below to further customize your own list of additional user-agents you wish to permanently block
# This include file allows whitelisting and blacklisting of anything specified below it.
# This include file alows you to over-ride any Bad / Good UA (Bot) declared in this blocker to your liking.
include /etc/nginx/bots.d/blacklist-user-agents.conf; include /etc/nginx/bots.d/blacklist-user-agents.conf;
# ********************************************************************************* # ---------------------------------------------------------------------------------
# END CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************************* # ---------------------------------------------------------------------------------
# ********************************************* # --------------------------------------------------
# Bad User-Agent Strings That We Block Outright # BAD UA (User-Agent) Strings That We Block Outright
# ********************************************* # --------------------------------------------------
# START BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)360Spider(?:\b|)" 3; "~*(?:\b)360Spider(?:\b|)" 3;
@ -694,9 +705,16 @@ map $http_user_agent $bad_bot {
"~*(?:\b)ZyBorg(?:\b|)" 3; "~*(?:\b)ZyBorg(?:\b|)" 3;
# END BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# *********************************************** # --------------------------------------------
# Allow Good User-Agent Strings We Know and Trust # GOOD UA User-Agent Strings We Know and Trust
# *********************************************** # --------------------------------------------
# -----------------------------------------------------------------------
# You can over-ride these in /etc/nginx/bots.d/blacklist-user-agents.conf
# by adding the same UA line there and chaning its value of 1
# If you think GoogleBot is bad you would simply add them to
# blacklist-user-agents.conf with a value of 1
# -----------------------------------------------------------------------
# START GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)adidxbot(?:\b|)" 0; "~*(?:\b)adidxbot(?:\b|)" 0;
@ -733,12 +751,13 @@ map $http_user_agent $bad_bot {
"~*(?:\b)yahoo(?:\b|)" 0; "~*(?:\b)yahoo(?:\b|)" 0;
# END GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# *************************************************** # --------------------------------------------------------
# User-Agent Strings Allowed Through but Rate Limited # GOOD UA User-Agent Rate Limiting 1 - Disabled by Default
# *************************************************** # --------------------------------------------------------
# Some people block libwww-perl, it used widely in many valid (non rogue) agents # TO ACTIVATE THIS RATE LIMITING Uncomment these two lines in blockbots.conf
# I allow libwww-perl as I use it for monitoring systems with Munin but it is rate limited #limit_conn bot1_connlimit 100;
#limit_req zone=bot1_reqlimitip burst=50;
# START ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)jetmon(?:\b|)" 1; "~*(?:\b)jetmon(?:\b|)" 1;
@ -749,9 +768,14 @@ map $http_user_agent $bad_bot {
"~*(?:\b)Wget/1.15(?:\b|)" 1; "~*(?:\b)Wget/1.15(?:\b|)" 1;
# END ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# ************************************************************** # -------------------------------------------------------
# Rate Limited User-Agents who get a bit aggressive on bandwidth # GOOD UA User-Agent Rate Limiting 2 - Enabled by Default
# ************************************************************** # -------------------------------------------------------
# -----------------------------------------------------------------------
# You can over-ride these in /etc/nginx/bots.d/blacklist-user-agents.conf
# by adding the same UA line there and chaning its value of 1
# -----------------------------------------------------------------------
# START LIMITED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START LIMITED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)Alexa(?:\b|)" 2; "~*(?:\b)Alexa(?:\b|)" 2;
@ -775,162 +799,185 @@ map $http_user_agent $bad_bot {
} }
# ===========================
# END SECTION 1 - USER-AGENTS
# ===========================
# ***************************************** # =======================================
# SECOND BLOCK BY REFERRER STRINGS AND URLS # BEGIN SECTION 2 - REFERRERS AND DOMAINS
# ***************************************** # =======================================
# ***************** # ----------------
# PLEASE TEST !!!! # PLEASE TEST !!!!
# ***************** # ----------------
# ------------------------------------------------------------------------------------------------------------------------------
# ALWAYS test referrers that you add. This is done manually as follows # ALWAYS test referrers that you add. This is done manually as follows
# ------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://anything.adcash.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://anything.adcash.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://www.goodwebsite.com/not-adcash --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://www.goodwebsite.com/not-adcash --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://www.betterwebsite.com/not/adcash --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://www.betterwebsite.com/not/adcash --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://www.google.com --- GIVES YOU: full html output of the web page # curl -I http://www.yourdomain.com -e http://www.google.com --- GIVES YOU: full html output of the web page
# curl -I http://www.yourdomain.com -e http://www.microsoft.com --- GIVES YOU: full html output of the web page # curl -I http://www.yourdomain.com -e http://www.microsoft.com --- GIVES YOU: full html output of the web page
# ------------------------------------------------------------------------------------------------------------------------------
# Because of case-insensitive matching any combination of capitilization in the names will all produce a positive hit # Because of case-insensitive matching any combination of capitilization in the names will all produce a positive hit
# make sure you always test thoroughly and monitor logs. This section below also does NOT check for a preceding www. # make sure you always test thoroughly and monitor logs. This section below also does NOT check for a preceding www.
# and it also does not care if the referrer request was sent with http https or even ftp. # and it also does not care if the referrer request was sent with http https or even ftp.
# ------------------------------------------------------------------------------------------------------------------------------
# *********************************************************************** # ----------------------------------------------------------------
# Now we map all bad referrer words below to a variable called $bad_words # Map all BAD referrer words below to a variable called $bad_words
# *********************************************************************** # ----------------------------------------------------------------
# --------------------------------
# START Bad Referrer Word Scanning
# --------------------------------
map $http_referer $bad_words { map $http_referer $bad_words {
default 0; default 0;
# ************************** # -------------------------------------------------------------------------------------------
# Bad Referrer Word Scanning
# **************************
# These are Words and Terms often found tagged onto domains or within url query strings. # These are Words and Terms often found tagged onto domains or within url query strings.
# Create and Customize Your Own Bad Referrer Words Here using the new Include File Method # Create and Customize Your Own Bad Referrer Words Here using the new Include File Method
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# customized list of bad referrer words are automatically now included for you # customized list of bad referrer words are automatically now included for you
# Read Comments inside bad-referrer-words.conf for customization tips. # Read Comments inside bad-referrer-words.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# BE VERY CAREFUL using the bad-referrer-words.conf file - please read the comment and # BE VERY CAREFUL using this bad-referrer-words.conf file - please read the comments and
# examples inside the include file for detailed explanations into how seriously this can # examples inside the include file for detailed explanations into how seriously this can
# affect your own site from serving assets or other innocent sites from accessing your site # affect your own site from serving assets or other innocent sites from accessing your site
# For safety sake the whitelist-domains.conf file is also loaded here before the bad-referrer-words.conf file. # For safety sake the whitelist-domains.conf file is also loaded here before the
# bad-referrer-words.conf file is loaded.
# -------------------------------------------------------------------------------------------
# ************************************************************************ # ------------------------------------------------------------------------
# START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-domains.conf; include /etc/nginx/bots.d/whitelist-domains.conf;
# ********************************************************************** # ----------------------------------------------------------------------
# END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************** # ----------------------------------------------------------------------
# ****************************************************************************** # ------------------------------------------------------------------------------
# START CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ****************************************************************************** # ------------------------------------------------------------------------------
include /etc/nginx/bots.d/bad-referrer-words.conf; include /etc/nginx/bots.d/bad-referrer-words.conf;
# **************************************************************************** # ----------------------------------------------------------------------------
# END CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# **************************************************************************** # ----------------------------------------------------------------------------
} }
# --------------------------------
# END Bad Referrer Word Scanning
# --------------------------------
# *************************
# Bad Referrer Domain Names
# *************************
# Now a list of bad referrer urls these domains or any combination of them ie .com .net # ----------------------------------------
# will be blocked out. Doesn't matter if the protocol is http, https or even ftp # START Good and Bad Referrer Domain Names
# ----------------------------------------
# -------------------------------------------------------------------------------------
# Good and Bad referrer urls Doesn't matter if the protocol is http, https or even ftp
# -------------------------------------------------------------------------------------
# ----------------------
# This section includes: # This section includes:
# ********************** # ----------------------
# --------------------------------------------------------------------------------
# Blocking of SEO company Semalt.com (now merged into this one section) # Blocking of SEO company Semalt.com (now merged into this one section)
# MIRAI Botnet Domains Used for Mass Attacks # MIRAI Botnet Domains Used for Mass Attacks
# Other known bad SEO companies and Ad Hijacking Sites # Other known bad SEO companies and Ad Hijacking Sites
# Sites linked to malware, adware, clickjacking and ransomware # Sites linked to malware, adware, clickjacking and ransomware
# Domain names and referrers used in referrer spam and seo hijacking
# Whitelisting of your own GOOD domains / referrers
# Whitelisting of any other GOOD domains / referrers you want explicitly NOT block
# --------------------------------------------------------------------------------
# ***************** # ----------------
# PLEASE TEST !!!! # PLEASE TEST !!!!
# ***************** # ----------------
# ------------------------------------------------------------------------------------------------------------------------------------
# ALWAYS test referrers that you add. This is done manually as follows # ALWAYS test referrers that you add. This is done manually as follows
# ------------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------------
# Because of case-insensitive matching any combination of capitilization will all produce a positive hit - make sure you always test. # Because of case-insensitive matching any combination of capitilization will all produce a positive hit - make sure you always test.
# ------------------------------------------------------------------------------------------------------------------------------------
# For Example any of the following variations below of 8gold.com will be detected and blocked # For Example any of the following variations below of 8gold.com will be detected and blocked
# ------------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://NOT-8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://NOT-8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://this.is.not8gOlD.net --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://this.is.not8gOlD.net --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e ftp://8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e ftp://8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e ftp://www.weare8gold.NET --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e ftp://www.weare8gold.NET --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e https://subdomain.8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e https://subdomain.8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e https://NOT8GolD.org --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e https://NOT8GolD.org --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------------
# So if you see a bad referrer from wearegoogle.com and you want to block them just add # So if you see a bad referrer from wearegoogle.com and you want to block them just add
# them as "~*wearegoogle.com" don't ever go and do something like "~*google(-|.)" you will # them as "~*wearegoogle.com" don't ever go and do something like "~*google(-|.)" you will
# kill all your SEO in a week. # kill all your SEO in a week.
# ------------------------------------------------------------------------------------------------------------------------------------
# To add your own custom bad referrers use the custom include file # To add your own custom bad referrers use the custom include file
# /etc/nginx/bots.d/custom-bad-referrers.conf # /etc/nginx/bots.d/custom-bad-referrers.conf
# Or send a Pull Request to add it to the global blacklist for other users. # Or send a Pull Request to add it to the global blacklist for other users.
# In the bad referrers section I also include sites that hotlink images without permission. # In the bad referrers section I also include sites that hotlink images without permission.
# ------------------------------------------------------------------------------------------------------------------------------------
# *********************************************************************** # --------------------------------------------------------------------
# Now we map all good & bad referrer urls to variable called #bad_referer # Map all good & bad referrer DOMAINS to a variable called bad_referer
# *********************************************************************** # --------------------------------------------------------------------
map $http_referer $bad_referer { map $http_referer $bad_referer {
hostnames; hostnames;
default 0; default 0;
# ************************************* # --------------------------------------------
# GOOD REFERRERS - Spared from Checking # GOOD REFERRER DOMAINS - Spared from Checking
# ************************************* # --------------------------------------------
# ---------------------------------------------------------------------------------------
# Add all your own web site domain names and server names in this section # Add all your own web site domain names and server names in this section
# WHITELIST Your Own Domain Names Here using the new Include File Method # WHITELIST Your Own Domain Names Here using the new Include File Method
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# whitelisted domain names are automatically now included for you. # whitelisted domain names are automatically now included for you.
# Read Comments inside whitelist-domains.conf for customization tips. # Read Comments inside whitelist-domains.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# ---------------------------------------------------------------------------------------
# ************************************************************************ # ------------------------------------------------------------------------
# START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-domains.conf; include /etc/nginx/bots.d/whitelist-domains.conf;
# ********************************************************************** # ----------------------------------------------------------------------
# END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************** # ----------------------------------------------------------------------
# *********************************** # -----------------------------------
# CUSTOM BAD REFERRERS - Add your Own # CUSTOM BAD REFERRERS - Add your Own
# *********************************** # -----------------------------------
# Add any extra bad referrers in the following include file to have them # Add any extra bad referrers in the following include file to have them
# permanently included and blocked - avoid duplicates in your custom file # permanently included and blocked - avoid duplicates in your custom file
# custom-bad-referrers.conf is BOTH a BLACKLIST AND WHITELIST
# custom-bad-referrers.conf ALLOWS complete over-riding of anything
# If you think google.com is bad you would simply add them to
# custom-bad-referrers.conf with a value of 1
# ************************************************************************* # -------------------------------------------------------------------------
# START CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************* # -------------------------------------------------------------------------
include /etc/nginx/bots.d/custom-bad-referrers.conf; include /etc/nginx/bots.d/custom-bad-referrers.conf;
# *********************************************************************** # -----------------------------------------------------------------------
# END CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *********************************************************************** # -----------------------------------------------------------------------
# START BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ### # START BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)000free\.us(?:\b|)" 1; "~*(?:\b)000free\.us(?:\b|)" 1;
@ -7650,26 +7697,24 @@ map $http_referer $bad_referer {
# END BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ### # END BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ###
} }
# =====================================
# END SECTION 2 - REFERRERS AND DOMAINS
# =====================================
# *********************************************** # ========================================================================
# WHITELISTING AND BLACKLISTING IP ADDRESS RANGES # BEGIN SECTION 3 - WHITELISTING AND BLACKLISTING IP ADDRESSESE AND RANGES
# *********************************************** # ========================================================================
# Geo directive to deny and also whitelist certain ip addresses # --------------------------------------------------------------------------------------
# Map all GOOD and BAD IP Addresses and Ranges to a variable called geo $validate_client
# --------------------------------------------------------------------------------------
geo $validate_client { geo $validate_client {
# ********************
# First Our Safety Net
# ********************
# Anything not matching our rules is allowed through with default 0;
default 0; default 0;
# ************************* # -------------------------------------
# Wordpress Theme Detectors # BLOCK known Wordpress Theme Detectors
# ************************* # -------------------------------------
# START WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ### # START WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ###
@ -7713,10 +7758,11 @@ geo $validate_client {
89.36.223.188 1; #www.cuteseotools.net/wordpress-theme-detector 89.36.223.188 1; #www.cuteseotools.net/wordpress-theme-detector
# END WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ### # END WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ###
# **************************************** # ----------------------------------------------
# NIBBLER - SEO testing and reporting tool # BLOCK NIBBLER - SEO testing and reporting tool
# **************************************** # ----------------------------------------------
# See - http://nibbler.silktide.com/ # See - http://nibbler.silktide.com/
# ----------------------------------------------
# START NIBBLER ### DO NOT EDIT THIS LINE AT ALL ### # START NIBBLER ### DO NOT EDIT THIS LINE AT ALL ###
52.201.238.175 1; 52.201.238.175 1;
@ -7728,11 +7774,11 @@ geo $validate_client {
54.242.250.203 1; 54.242.250.203 1;
# END NIBBLER ### DO NOT EDIT THIS LINE AT ALL ### # END NIBBLER ### DO NOT EDIT THIS LINE AT ALL ###
# *********************************************************************************************
# KNOWN BAD IP ADDRESSES # -----------------------------------------
# Source: https://github.com/mitchellkrogza/Suspicious.Snooping.Sniffing.Hacking.IP.Addresses # BLOCK KNOWN BAD IP ADDRESSES
# A Reliable Daily Updated List Included Below of Known Bad IP Addresses, Snoopers and Sniffers # Top known bad IP Adresses from abuseIPDB
# ********************************************************************************************* # -----------------------------------------
# START KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ### # START KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ###
193.32.163.89 1; 193.32.163.89 1;
@ -17736,11 +17782,9 @@ geo $validate_client {
46.101.115.65 1; 46.101.115.65 1;
# END KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ### # END KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ###
# **************** # --------------------------
# Google IP Ranges # WHITELIST Google IP Ranges
# **************** # --------------------------
# For Safety Sake all Google's Known IP Ranges are all white listed
# START GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
108.177.0.0/17 0; 108.177.0.0/17 0;
@ -17768,11 +17812,9 @@ geo $validate_client {
74.125.0.0/16 0; 74.125.0.0/16 0;
# END GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ************** # ------------------------
# Bing IP Ranges # WHITELIST Bing IP Ranges
# ************** # ------------------------
# For Safety Sake all Bing's Known IP Ranges are all white listed
# START BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
131.253.21.0/24 0; 131.253.21.0/24 0;
@ -17796,11 +17838,9 @@ geo $validate_client {
40.96.0.0/12 0; 40.96.0.0/12 0;
# END BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ******************** # ------------------------------
# Cloudflare IP Ranges # WHITELIST Cloudflare IP Ranges
# ******************** # ------------------------------
# For Safety Sake all Cloudflare's Known IP Ranges are all white listed
# START CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
103.21.244.0/22 0; 103.21.244.0/22 0;
@ -17827,75 +17867,91 @@ geo $validate_client {
2c0f:f248::/32 0; 2c0f:f248::/32 0;
# END CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ************************************************* # -------------------------------------------------
# Blacklist IP addresses and IP Ranges Customizable # BLACKLIST IP addresses and IP Ranges Customizable
# ************************************************* # -------------------------------------------------
# --------------------------------------------------------------------------------------
# BLACKLIST all your IP addresses and Ranges using the new include file below. # BLACKLIST all your IP addresses and Ranges using the new include file below.
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# Custom Blacklisted IP addresses are automatically now included for you. # Custom Blacklisted IP addresses are automatically now included for you.
# Read Comments inside blacklist-ips.conf for customization tips. # Read Comments inside blacklist-ips.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# Anything added to blacklist-ips.conf will over-ride anything whitelisted above
# --------------------------------------------------------------------------------------
# ******************************************************************** # --------------------------------------------------------------------
# START BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ******************************************************************** # --------------------------------------------------------------------
include /etc/nginx/bots.d/blacklist-ips.conf; include /etc/nginx/bots.d/blacklist-ips.conf;
# ****************************************************************** # ------------------------------------------------------------------
# END BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ****************************************************************** # ------------------------------------------------------------------
# ----------------------------------------------
# Whitelist all your OWN IP addresses and Ranges
# ----------------------------------------------
# *********************************** # --------------------------------------------------------------------------------------
# Whitelist all your OWN IP addresses
# ***********************************
# WHITELIST all your own IP addresses using the include file below. # WHITELIST all your own IP addresses using the include file below.
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# whitelisted IP addresses are automatically now included for you. # whitelisted IP addresses are automatically now included for you.
# Read Comments inside whitelist-ips.conf for customization tips. # Read Comments inside whitelist-ips.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# whitelist-ips.conf reigns supreme !!!
# Whatever you add to whitelist-ips.conf will be whitelisted FULL STOP
# Anything blacklisted above this line will be over-ridden by whitelist-ips.conf
# --------------------------------------------------------------------------------------
# ************************************************************************** # --------------------------------------------------------------------------
# START WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************** # --------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-ips.conf; include /etc/nginx/bots.d/whitelist-ips.conf;
# ************************************************************************ # ------------------------------------------------------------------------
# END WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
} }
# --------------------------------------------------------------------------------------
# WHITELIST your own IPs from the DDOS Filter # WHITELIST your own IPs from the DDOS Filter
# Add your own IP addresses and ranges into the custom include file whitelist-ips.conf # Add your own IP addresses and ranges into the custom include file whitelist-ips.conf
# to spare them from the rate limiting DDOS filter. # to spare them from the rate limiting DDOS filter.
# This section includes the same / single whitelist-ips.conf file so you only # This section includes the same / single whitelist-ips.conf file so you only
# need to edit that include file and have it include here for you too. # need to edit that include file and have it include here for you too.
# --------------------------------------------------------------------------------------
geo $ratelimited { geo $ratelimited {
default 1; default 1;
# *************************************************************************** # ---------------------------------------------------------------------------
# START WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *************************************************************************** # ---------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-ips.conf; include /etc/nginx/bots.d/whitelist-ips.conf;
# ************************************************************************* # -------------------------------------------------------------------------
# END WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************* # -------------------------------------------------------------------------
} }
# ***************************************** # ======================================================================
# MAP BAD BOTS TO OUR RATE LIMITER FUNCTION # END SECTION 3 - WHITELISTING AND BLACKLISTING IP ADDRESSESE AND RANGES
# ***************************************** # ======================================================================
# ============================================
# BEGIN SECTION 4 - ACTIVATE BLOCKER FUNCTIONS
# ============================================
# --------------------------------------------
# 1. MAP BAD BOTS TO OUR RATE LIMITER FUNCTION
# --------------------------------------------
map $bad_bot $bot_iplimit { map $bad_bot $bot_iplimit {
0 ""; 0 "";
@ -17903,30 +17959,31 @@ geo $ratelimited {
2 $binary_remote_addr; 2 $binary_remote_addr;
} }
# *********************** # --------------------------
# SET RATE LIMITING ZONES # 2. SET RATE LIMITING ZONES
# *********************** # --------------------------
# BAD BOT RATE LIMITING ZONE # BAD BOT RATE LIMITING ZONE
# limits for Zone $bad_bot = 1 # Rate limiting will only take effect if on any User-Agents with a value of 2
# Nothing Set - you can set a different zone limiter here if you like
# We issue a 444 response instead to all bad bots.
# limits for Zone $bad_bot = 2
# this rate limiting will only take effect if you change any of the bots and change
# their block value from 1 to 2.
limit_conn_zone $bot_iplimit zone=bot2_connlimit:16m; limit_conn_zone $bot_iplimit zone=bot2_connlimit:16m;
limit_req_zone $bot_iplimit zone=bot2_reqlimitip:16m rate=6r/m burst=1; limit_req_zone $bot_iplimit zone=bot2_reqlimitip:16m rate=6r/m burst=1;
### *** MAKE SURE TO ADD to your nginx.conf *** # ==========================================
### server_names_hash_bucket_size 64; # END SECTION 4 - ACTIVATE BLOCKER FUNCTIONS
### server_names_hash_max_size 4096; # ==========================================
### limit_req_zone $binary_remote_addr zone=flood:50m rate=90r/s;
### limit_conn_zone $binary_remote_addr zone=addr:50m;
### to allow it to load this large set of domains into memory and to set the rate limiting zones for the DDOS filter.
### THE END of the Long and Winding Road # =====================
# END BLOCKER FUNCTIONS
# =====================
### Also check out my Ultimate Apache Bad Bot Blocker on Github ### --------------------------------------------
### https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker ### HELP SUPPORT THIS PROJECT - Send Me a Coffee
### https://ko-fi.com/mitchellkrog
### --------------------------------------------
### FOR APACHE SERVERS
### ---------------------------------------------
### Check out the Ultimate Apache Bad Bot Blocker
### ---------------------------------------------

View file

@ -1,2 +1,2 @@
35.202.145.110 1; 35.192.136.167 1;
127.0.0.1 1; 127.0.0.1 1;

View file

@ -39,10 +39,11 @@
# More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)" # More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)"
# If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block. # If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block.
if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) { # UNCOMMENT THE NEXT 4 LINES TO ACTIVATE THE SUPER WHITELIST
#if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) {
#set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s) #set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s)
set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s) #set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s)
} #}
# -------------- # --------------
# BLOCK BAD BOTS # BLOCK BAD BOTS

View file

@ -1,2 +1,2 @@
35.202.145.110 0; 35.192.136.167 0;
127.0.0.1 0; 127.0.0.1 0;

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1632 ### Version: V4.2019.06.1633
### Updated: Wed Jun 26 17:03:38 SAST 2019 ### Updated: Thu Jun 27 09:10:20 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -1,2 +1,2 @@
35.202.145.110 1; 35.192.136.167 1;
127.0.0.1 1; 127.0.0.1 1;

View file

@ -39,10 +39,11 @@
# More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)" # More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)"
# If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block. # If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block.
if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) { # UNCOMMENT THE NEXT 4 LINES TO ACTIVATE THE SUPER WHITELIST
#if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) {
#set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s) #set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s)
set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s) #set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s)
} #}
# -------------- # --------------
# BLOCK BAD BOTS # BLOCK BAD BOTS

View file

@ -1,2 +1,2 @@
35.202.145.110 0; 35.192.136.167 0;
127.0.0.1 0; 127.0.0.1 0;

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1632 ### Version: V4.2019.06.1633
### Updated: Wed Jun 26 17:03:38 SAST 2019 ### Updated: Thu Jun 27 09:10:20 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -1,2 +1,2 @@
35.202.145.110 1; 35.192.136.167 1;
127.0.0.1 1; 127.0.0.1 1;

View file

@ -39,10 +39,11 @@
# More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)" # More IP's can be added example > "(127.0.0.1)|(192.168.0.1)|(192.168.1.1)"
# If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block. # If you even blacklisted 127.0.0.1 or your own IP by giving it a value of 1 in any of the includes, this will over-ride that block.
if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) { # UNCOMMENT THE NEXT 4 LINES TO ACTIVATE THE SUPER WHITELIST
#if ($remote_addr ~ "(127.0.0.1)|(192.168.0.1)" ) {
#set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s) #set $bad_bot '0'; #Uncommenting this line will disable bad_bots functionality for specified IP(s)
set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s) #set $validate_client '0'; #Uncommenting this line will disable validate_client ip blocking functionality for specified IP(s)
} #}
# -------------- # --------------
# BLOCK BAD BOTS # BLOCK BAD BOTS

View file

@ -1,2 +1,2 @@
35.202.145.110 0; 35.192.136.167 0;
127.0.0.1 0; 127.0.0.1 0;

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1632 ### Version: V4.2019.06.1633
### Updated: Wed Jun 26 17:03:38 SAST 2019 ### Updated: Thu Jun 27 09:10:20 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

File diff suppressed because it is too large Load diff

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1633 ### Version: V4.2019.06.1634
### Updated: Thu Jun 27 09:10:20 SAST 2019 ### Updated: Thu Jun 27 10:50:24 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -1,2 +1,2 @@
35.202.145.110 1; 35.192.136.167 1;
127.0.0.1 1; 127.0.0.1 1;

View file

@ -1,50 +1,50 @@
ADmantX AhrefsBot
ASPSeek Asterias
Attach BackDoorBot
backlink-check Backlink-Ceck
CCBot Battleztar Bazinga
Dispatch Blow
DomainAppender Brandprotect
Drip com.plumanalytics
EirGrabber Cosmos
EroCrawler DIIbot
GermCrawler DomainStatsBot
Intelliseek ExtLinksBot
internetVista monitor Gigablast
IRLbot HEADMasterSEO
Jetty Jorgee
JustView Larbin
lwp-request Lftp
Magnet LinqiaScrapeBot
Metauri Lmspider
MSFrontPage Microsoft URL Control
Navroad Mojeek
Net Vampire Needle
NetMechanic
Nimbostratus Nimbostratus
Pimonster PageAnalyzer
POE-Component-Client-HTTP PageScorer
PxBroker PECL::HTTP
Rankivabot plumanalytics
Screaming ProPowerBot
SEOlyticsCrawler Psbot
SEOprofiler RankFlex
Siphon ScanAlert
SISTRIX scan.lol
ScoutJet
Searchestate
SEOkicks
SiteLockSpider
SiteSnagger
Snoopy
Sogou web spider Sogou web spider
Spammen sysscan
Sqworm Teleport
Sucuri
tAkeOut
Thumbor
Toata
Twice
URLy.Warning URLy.Warning
Voil VidibleScraper
WebBandit WebLeacher
WebEnhancer WebWhacker
Web Enhancer WebZIP
WebGo IS WISENutbot
WebPix x22Mozilla
WebSauger Xaldon WebSpider
WiseGuys Robot
WPScan

View file

@ -1,250 +1,250 @@
360Spider 404checker
404enemy ADmantX
80legs
Abonti
AfD-Verbotsverfahren
AhrefsBot AhrefsBot
AIBOT AiHitBot
Alexibot Aipbot
Alligator Alligator
AllSubmitter
Apexoo
archive.org_bot archive.org_bot
Asterias Asterias
Attach
autoemailspider
BacklinkCrawler BacklinkCrawler
Bandit BackStreet
Barkrowler Badass
Battleztar Bazinga
BBBike BBBike
BDFetch BDCbot
Bigfoot BetaBot
Blackboard Bitacle
Black Hole BLEXBot
BlowFish
Boardreader Boardreader
Brandprotect
Brandwatch Brandwatch
Buddy
BuiltBotTough BuiltBotTough
Bullseye
BunnySlippers BunnySlippers
CATExplorador Calculon
CazoodleBot CazoodleBot
CCBot CCBot
CheeseBot CheeseBot
CherryPicker CherryPicker
ChinaClaw
Chlooe Chlooe
Claritybot Cliqzbot
Cloud mapping
coccocbot-web coccocbot-web
Cogentbot Cogentbot
com.plumanalytics cognitiveseo
Copier Copier
Crescent Craftbot
CSHttp crawl.sogou.com
Curious Curious
DBLBot DatabaseDriverMysqli
demandbase-bot demandbase-bot
Devil Deusu
Digincore
DIIbot DIIbot
Disco
Discoverybot Discoverybot
Dispatch DomainStatsBot
DomainAppender
DomainCrawler
Dotbot
Download Wonder Download Wonder
Dragonfly
Drip
DSearch DSearch
DTS Agent Ebingbong
EasyDL
ECCP/1.0 ECCP/1.0
Ecxi
EMail Siphon
EroCrawler
evc-batch evc-batch
Exabot
ExtLinksBot
Extractor
Extreme Picture Finder
Ezooms
FHscan
Fimap Fimap
Firefox/7.0
FlashGet FlashGet
Flunky FyberSpider
FrontPage
Genieo Genieo
Getintent
GetRight GetRight
GetWeb
G-i-g-a-b-o-t G-i-g-a-b-o-t
Go-Ahead-Got-It Go!Zilla
GoZilla
Grabber
GrabNet
GrapeFX GrapeFX
GrapeshotCrawler
Haansoft Haansoft
Harvest HaosouSpider
HEADMasterSEO HEADMasterSEO
HMView HTTP::Lite
HTMLparser
Humanlinks Humanlinks
IDBot IDBot
InfoTekies Id-search
IndeedBot
Indy Library
instabid instabid
internetVista monitor internetVista monitor
ips-agent Iria
IRLbot Iskanie
IstellaBot
JamesBOT JamesBOT
Jbrofuzz JetCar
Jetty Jetty
JOC Web Spider JOC Web Spider
Joomla Joomla
Jorgee Jorgee
JustView
Jyxobot
Kenjin Spider Kenjin Spider
LeechFTP Kozmosbot
Larbin
LibWeb LibWeb
Lightspeedsystems Libwhisker
Likse
Linkdexbot
LinkpadBot LinkpadBot
LinkScan
LinksManager
LinkWalker
LinqiaMetadataDownloaderBot
LinqiaScrapeBot
Lipperhey Spider Lipperhey Spider
LWP::Simple
lwp-trivial
Magnet Magnet
magpie-crawler Mag-Net
Majestic SEO Mail.RU_Bot
MarkMonitor Majestic12
MarkWatch MarkWatch
Masscan Masscan
Mass Downloader
Mata Hari Mata Hari
meanpathbot MauiBot
MeanPath Bot
Mediatoolkitbot Mediatoolkitbot
mediawords MIDown tool
MFC_Tear_Sample
Microsoft Data Access
Microsoft URL Control
MIIxpc MIIxpc
Morfeus Fucking Scanner MSFrontPage
MSIECrawler
muhstik-scan muhstik-scan
Musobot Musobot
Nameprotect
NearSite
Nessus Nessus
NetAnts Netcraft
NetLyzer NetLyzer
NetMechanic
NetSpider NetSpider
Nettrack Nettrack
Netvibes Nibbler
NetZIP NICErsPRO
NextGenSearchBot Nikto
Niki-bot Ninja
NimbleCrawler NPbot
Octopus
Offline Explorer
Offline Navigator Offline Navigator
OnCrawl OpenLinkProfiler
Openfind
Openvas
OutclicksBot OutclicksBot
OutfoxBot OutfoxBot
PageAnalyzer PageAnalyzer
PageScorer PageGrabber
page scorer
Pandalytics
Panscient Panscient
Papa Foto Papa Foto
pcBrowser Pavuk
PECL::HTTP
PeoplePal
PHPCrawl
Picscout Picscout
Picsearch Picsearch
PictureFinder
Pi-Monster Pi-Monster
plumanalytics Pixray
Pockey Pockey
ProPowerBot ProWebWalker
Psbot Psbot
Pump Pump
Quick-Crawler PyCurl
RankFlex RankActiveLinkBot
RankingBot2
Rankivabot Rankivabot
RedesScrapy
ReGet ReGet
RepoMonkey
RocketCrawler RocketCrawler
Rogerbot
s1z.ru s1z.ru
ScanAlert SalesIntelligent
SBIder
Scanbot
scan.lol scan.lol
Scrapy Scrapy
Searchestate
SEOkicks SEOkicks
SEOlyticsCrawler SEOlyticsCrawler
Seomoz Seomoz
SeoSiteCheckup
SEOstats SEOstats
serpstatbot serpstatbot
Shodan sexsearcher
Sitebeam SISTRIX
SiteExplorer Siteimprove
SlySearch Sitevigil
SmartDownload
SMTBot
Snake Snake
Snoopy
SocialRankIOBot
Sociscraper Sociscraper
sogouspider sogouspider
Sosospider Sogou web spider
Spanner Sottopop
Spinn3r Spammen
SpankBot
sp_auditbot
spyfu
Sqlmap
Sqlworm
Sqworm Sqworm
Steeler Steeler
Stripper Stripper
Sucker
SuperHTTP SuperHTTP
Surfbot Swiftbot
Suzuran sysscan
Szukacz Szukacz
T8Abot T0PHackTeam
tAkeOut
Teleport Teleport
TeleportPro TeleportPro
TheNomad Toata
Toweyabot
Tracemyfile Tracemyfile
Trendiction
Trendictionbot
trendiction.com
True_Robot True_Robot
Turnitin Turnitin
TurnitinBot TurnitinBot
Twice Twice
UnisterBot Typhoeus
Upflow
URLy Warning URLy Warning
VB Project
VCI VCI
VeriCiteCrawler
VidibleScraper VidibleScraper
Virusdie Virusdie
VoidEYE
Voil Voil
Voltron WallpapersHD
WASALive-Bot WBSearchBot
WebAuto WebAuto
Web Auto Web Auto
Web Collage WebBandit
WEBDAV
Web Enhancer Web Enhancer
WebFetch
Web Fetch Web Fetch
Web Fuck
WebGo IS WebGo IS
WebLeacher
WebmasterWorldForumBot WebmasterWorldForumBot
webmeup-crawler WebReaper
WebPix
WebSauger
WebsiteExtractor WebsiteExtractor
WebsiteQuester WebsiteQuester
Website Quester
Webster
WebSucker WebSucker
Web Sucker
WebWhacker WebWhacker
WebZIP WeSEE
Whacker
Who.is Bot Who.is Bot
Widow
WinHTTrack
WiseGuys Robot WiseGuys Robot
Wonderbot
WPScan WPScan
WWW-Collector-E
WWW-Mechanize WWW-Mechanize
WWWOFFLE WWWOFFLE
x09Mozilla x09Mozilla
x22Mozilla
Xaldon WebSpider Xaldon WebSpider
Xaldon_WebSpider Xaldon_WebSpider
xpymep1.exe YoudaoBot
Zauba Zauba
zauba.io
Zermelo Zermelo
Zeus zgrab
ZmEu ZmEu
ZyBorg

View file

@ -1,250 +1,250 @@
404checker 360Spider
404enemy 80legs
Aboundex
Aboundexbot Aboundexbot
Acunetix AiHitBot
Alligator
Anarchie Anarchie
Apexoo Apexoo
archive.org_bot archive.org_bot
autoemailspider
BackDoorBot BackDoorBot
backlink-check BackStreet
BacklinkCrawler BackWeb
Battleztar Bazinga Badass
Bandit
Barkrowler
BDCbot
BDFetch
BetaBot
Bigfoot Bigfoot
Blackboard Bitacle
Black Hole Black Hole
BlackWidow BlackWidow
BLEXBot BLEXBot
Blow Blow
Bolt Boardreader
BotALot
Brandprotect
Brandwatch Brandwatch
Buddy BuiltBotTough
BuiltWith Bullseye
BuzzSumo CazoodleBot
Calculon
CCBot CCBot
Cegbfeieh CheTeam
ChinaClaw
Cliqzbot Cliqzbot
Cloud mapping Cloud mapping
Cogentbot com.plumanalytics
CopyRightCheck CopyRightCheck
Copyscape
Cosmos Cosmos
Craftbot CSHttp
crawl.sogou.com Curious
CrazyWebCrawler
Crescent
CrunchBot
Custo
demandbase-bot demandbase-bot
Demon DigitalPebble
Devil
Digincore
Disco
Discobot Discobot
Dispatch DittoSpyder
DomainStatsBot DomainAppender
Download Wonder DomainSigmaCrawler
Dotbot
Dragonfly Dragonfly
DTS Agent EasyDL
Ebingbong Ebingbong
eCatch ECCP/1.0
EirGrabber EirGrabber
EMail Siphon
EroCrawler EroCrawler
Evil Exabot
Express WebPictures
ExtLinksBot ExtLinksBot
Extreme Picture Finder Extreme Picture Finder
facebookscraper EyeNetIE
FemtosearchBot FDM
Firefox/7.0 FHscan
Freeuploader FlashGet
Flunky
FrontPage
FyberSpider FyberSpider
GalaxyBot GalaxyBot
Getintent GetWeb
GetRight
Gigablast Gigablast
Gigabot
G-i-g-a-b-o-t G-i-g-a-b-o-t
Gotit Gotit
GoZilla
Go!Zilla
Grabber Grabber
Grafula Grafula
GrapeshotCrawler GrapeshotCrawler
Haansoft GT::WWW
HaosouSpider HaosouSpider
Harvest Harvest
Havij
Heritrix Heritrix
HTMLparser Hloader
HTTrack
HybridBot HybridBot
Iblog Iblog
IlseBot IlseBot
Image Fetch
Image Sucker
Indy Library Indy Library
InfoNaviRobot
InfoTekies InfoTekies
Intelliseek InterGET
internetVista monitor internetVista monitor
Iria Iskanie
JamesBOT JamesBOT
Jbrofuzz
JennyBot JennyBot
JetCar Jetty
Joomla
Kenjin Spider
Kozmosbot Kozmosbot
Lanshanbot
Larbin Larbin
LeechFTP
LexiBot
Libwhisker
Lightspeedsystems
Likse
LinkScan
LinksManager LinksManager
LinqiaMetadataDownloaderBot LinkWalker
LinqiaRSSBot LinqiaRSSBot
Magnet Litemage_walker
LNSpiderguy
lwp-trivial
Mag-Net Mag-Net
Mail.RU_Bot Mail.RU_Bot
Majestic SEO Majestic12
MarkMonitor
MarkWatch MarkWatch
Mass Downloader Mata Hari
MauiBot MauiBot
mediawords meanpathbot
MeanPath Bot
Mediatoolkitbot
MegaIndex.ru
MFC_Tear_Sample MFC_Tear_Sample
MIIxpc Microsoft Data Access
Mister PiX Mister PiX
Mojeek
Mr.4x3
MSFrontPage MSFrontPage
MSIECrawler
muhstik-scan muhstik-scan
Musobot Musobot
Name Intelligence Name Intelligence
NearSite NearSite
netEstate NE Crawler Needle
Nessus
Netcraft
NetLyzer NetLyzer
NetMechanic
NetSpider NetSpider
Netvibes
NetZIP NetZIP
NICErsPRO NextGenSearchBot
NimbleCrawler Nimbostratus
Nmap
NPbot NPbot
Nutch Nutch
Octopus Octopus
Offline Explorer OnCrawl
OpenLinkProfiler
Openvas Openvas
OpenVAS OpenVAS
OrangeSpider OrangeBot
OutclicksBot
OutfoxBot OutfoxBot
PageAnalyzer PageAnalyzer
Page Analyzer
page scorer page scorer
Pandalytics Pandalytics
Panscient
Papa Foto Papa Foto
PeoplePal
Picscout
Picsearch
Pimonster Pimonster
Pi-Monster PleaseCrawl
ProPowerBot plumanalytics
Probethenet
ProWebWalker ProWebWalker
Psbot Psbot
PyCurl Pump
PxBroker
QueryN Metasearch QueryN Metasearch
RankFlex RankFlex
RankingBot RankingBot
RankingBot2
Rankivabot
RankurBot
RealDownload RealDownload
Reaper Reaper
RebelMouse
Ripper Ripper
SBIder RocketCrawler
SalesIntelligent
ScanAlert ScanAlert
Scanbot Scanbot
scan.lol scan.lol
Scrapy
Screaming Screaming
Searchestate
Semrush Semrush
SemrushBot
SEOkicks-Robot
SEOlyticsCrawler SEOlyticsCrawler
Seomoz
SEOprofiler
seoscanners
SeoSiteCheckup
serpstatbot serpstatbot
Siphon sexsearcher
SISTRIX
Sitebeam Sitebeam
SiteExplorer
SiteSnagger SiteSnagger
Site Sucker
Sitevigil
SlySearch SlySearch
SmartDownload
SMTBot SMTBot
Snapbot
SocialRankIOBot SocialRankIOBot
Sociscraper Sottopop
Spanner SpaceBison
Spbot
Spinn3r Spinn3r
spyfu spyfu
Sqlmap Stripper
Sucker Sucker
Sucuri
SuperHTTP SuperHTTP
Surfbot
SurveyBot SurveyBot
Swiftbot T8Abot
sysscan Telesoft
Szukacz Telesphorep
Teleport The Intraformant
TeleportPro
TheNomad
Thumbor
TightTwatBot TightTwatBot
Titan Titan
Toweyabot Toata
Trendiction
Trendictionbot Trendictionbot
trendiction.com trendiction.com
True_Robot True_Robot
Turingos
TwengaBot TwengaBot
Twice Twice
UnisterBot UnisterBot
Upflow Upflow
URLy.Warning URLy.Warning
Vagabondo
VB Project VB Project
VCI
VidibleScraper
Virusdie
Voil Voil
Wallpapers/3.0
WallpapersHD WallpapersHD
WEBDAV WASALive-Bot
WebFetch Webalta
WebAuto
WebBandit
WebEnhancer
WebFuck
Web Fuck Web Fuck
WebGo IS WebGo IS
WebImageCollector
WebmasterWorldForumBot
webmeup-crawler webmeup-crawler
WebPix
Web Pix Web Pix
WebSauger Webshag
WebsiteExtractor
WebsiteQuester WebsiteQuester
Website Quester
Webster Webster
WebSucker
Web Sucker Web Sucker
WebZIP WebWhacker
Whack WeSEE
Whacker Widow
Whatweb WinHTTrack
Who.is Bot WiseGuys Robot
WISENutbot WISENutbot
Wonderbot Wonderbot
Woobot Wprecon
WPScan WPScan
WWW-Collector-E WWW-Collector-E
WWWOFFLE WWW-Mechanize
x09Mozilla Xaldon WebSpider
Xaldon_WebSpider
xpymep1.exe
YoudaoBot
Zade Zade
zauba.io Zauba
Zeus Zermelo
zgrab zgrab
Zitebot Zitebot
ZumBot
ZyBorg

View file

@ -1,100 +1,100 @@
24videos.tv 00it.com
7search.com 2kata.ru
adbetclickin.pink 4kepics.com
adultfullhd.com 83net.jp
alif-ba-ta.com acc.eu.org
apiallgeniusinfo-a.akamaihd.net afftrack001.com
aproposde.com alltheviews.com
atmagroup.ru anal-acrobats.hol.es
autochoixspinelli.com apple.com-webbrowsing-security.review
avon-novosib.ru asseenontv.ru
azlex.uz atovh.local-finders.com
bag77.ru ausergrubhof.info
bard-real.com.ua beauty-b0x.pl
blackcurranthumidifiers.site bestsexyblog.com
blog.f00kclan.de bitcoins-live.ru
buypuppies.ca bkgr.se
canacopegdl.com blogporn.in
cfacarrosserie74.com brainboosting.club
chatroulette.si brothers-smaller.ru
chlooe.com businesn.men
compliance-george.top buy-forum.ru
compliance-mary.top calstaterealty.us
counterbot.com candcstuccoandstone.com
dailyfinancefix.com cartierlovestore.xyz
delta-line.men chelyabinsk.xrus.org
design-lands.ru custodieva.ru
devochki.top damedingel.ya.ru
drev.biz dangphoto.trade
drugstoreforyou.com destinationrealestate.com
ekto.ee dnepr-avtospar.com.ua
eralph.tk doctissimo.fr
europages.com.ru dostavka-v-krym.com
freecamdollars.com easycommerce.cf
freshmac.space eldiariodeguadalajara.com
gael-s.ru eropornosex.ru
gagrasector.ru erotiktreff24.info
ggiaro.com fatfasts-4tmz.com
golfresa.lucania.se fettefrauen.net
gotorussia.com fishingwholesale.us
gourcy.altervista.org foxjuegos.com
ico.re free-video-tool.com
images-graphics-pics.com garciniaxt.us
imguramx.pw gazporno.com
interior-stickers.ru globatur.ru
iomoio.net graphicwe.org
itag.pw gz2.bbsoldes.fr
jagg.info hamptonoaks.ca
lsex.xyz healgastro.com
lsp-awak-perikanan.com heatpower.ru
mediaoffers.click hkladys.com
medicineseasybuy.com hotdl.in
mensandals.xyz kchaxton.com
minet.club kosynka-games.ru
mixx.com letmacworkfaster.site
montredemarque.nl liupis.com
myplaycity.com loadopia.com
okmusic.jp lovi-moment.com.ua
panchro.co.uk make-money-online.com
pinstake.com makemoneyonline.com
pliks.pl manimpotence.com
njkmznnb.ru
nudo.ca
ochistka-stokov.ru
onlineslotmaschine.com
paleohub.info
pk-services.ru
pornogad.com
pornophoto.xyz pornophoto.xyz
pregnant.guru pornoslive.net
rabot.host.sk questionmarque.ch
rangoman.date quit-smoking.ga
ranksonic.org rankings-analytics.com
scanner-john.top reyel1985.webnode.fr
seoheap.com ric.info
sergiorossistore.online samara.rosfirm.ru
sethrollins.net serialsway.ucoz.ru
social-search.me ship-marvel.co.ua
solicita.info slimcdn.com
sprttrack.com social-fun.ru
ssconstruction.co songplanet.ru
stuff-about-money.com space4updating.win
szamponrevita.pl staff.prairiesouth.ca
tehngr.ru stard.shop
tizanidine4mg.blogspot.com sygraem.com
tizanidineonline.blogspot.com the-usa-games.blogspot.com
toondinsey.com token-lab.org
traffmonster.info toolsky.com
ufa.xrus.org tuckpointingmasonrysystems.com
vancleefreplica.pw uptime-alpha.net
vchulkax.com usiad.net
viddyoze.com video-production.com
villacoloniale.com wesharepics.site
voloomoney.com whatzmyip.net
vriel.batcave.net wiosenny-bon-1500.pl
vucms.com yginekologa.com
wallpapers-best.com zeikopay.com
warningzscaler.heraeus.com zetmaster.ru
website-audit.com.ua zhacker.net
westvilletowingservices.co.za zixizop.net.ru
whipme.yopoint.in zvetki.ru
writingservices17.blogspot.ru
wwwadultcheck.com
xn----7sbaaabaei0cc8aj5bj0bncejx.xn--p1ai
yellowads.men
youtuhe.com
zocaparj.kz
zrelaya.pw

File diff suppressed because it is too large Load diff

View file

@ -1,250 +1,250 @@
1adult.com 00webcams.com
1-free-share-buttons.com 100searchengines.com
28n2gl3wfyb0.ru 101flag.ru
2itech.ru 11235813.webzdarma.cz
2rich4bitches.com 3w24.com
4inn.ru 4senses.co
51.la 4ureyesonly.com
6hopping.com 98oi.ru
7xc4n.com abcdeg.xyz
991mostfm.co.id adminshop.com
acgs.tk aibolita.com
acortarurl.es aihelen.net
adbetclickin.pink air-edem.ru
akuhni.by airmaxshoes-2016.com
alevinefesleri.com alice.it
aliexpresscashback.club allwomen.info
alldubai.biz alphacarolinas.com
allstatesugarbowl.org alt-servis.ru
amanda-porn.ga amyfoxfitness.com
amigobulls.com android4fun.org
anonymous-redirect.com angry-fermi-7633.arukascloud.io
antons-transporte.de apidiamondatanet-a.akamaihd.net
apiholdingmypage-a.akamaihd.net apilinkswiftco-a.akamaihd.net
apiluckyleapnet-a.akamaihd.net apps-analytics.net
apiportalmorecom-a.akamaihd.net autobudpostach.club
apple.com-cleaner.systems bankofthewext.com
arendas.net best-way.men
as5000.com bestwrinklecreamnow.com
atout-energie-69.com bif-ru.info
audiobangout.com bigpictures.club
auto4style.ru bio-optomarket.ru
avek.ru bitcoins-live.ru
baksman.com
big-cash.net
bizfly.info
blagovest-med.ru blagovest-med.ru
bloke.com bluesalt.co
boltalko.xyz boeuklad.com
b-styles.xyz bombla.org
bumskontakte.org btc4u.ru
cacheimages.com budilneg.xyz
cam-kontakte.org buyessaynow.biz
cand.jp buyhoverboard.com
canyougethighofftizanidine.blogspot.com buynorxx.com
capacitacionyaprendizaje.com bzero1jewelry.net
carina-sy.de c1.onedmp.com
carsplate.com carapics.com
cascadelink.org casablancamanor.co.za
cayado.snn.gr celebsopics.com
cejewelry.xyz centrdebut.ru
cerev.info cercacamion.it
cheap-pills-norx.com chatroulette.video
cheapwebsitehoster.com cialiswithoutadoctor.net
checktext.org clickso.com
chinajerseyswholesalecoupons.com clips.ua.ac.be
collegerentals.com compliance-andrew.top
compliance-jessica.top compliance-elena.top
compliance-josh.top contextualyield.com
craftinsta.ru counciltally.com
danschawbel.com cracksplanet.com
darmebel.com.ua crazyboost.pro
delfin-aqua.com.ua creditmoney.com.ua
dinosaurus.site customerpromos-a.akamaihd.net
discovertreasure-a.akamaihd.net cv.wallhade.co
discovertreasurenow.com dailyfinancefix.com
dkvorota.ru darkbooks.org
dogsrun.net data1.scopich.com
domoysshop.ru day-news.info
dostavka-v-ukrainu.ru ddpills.com
deda-moroza-zakaz.ru
delitime.info
detki-opt.ru
detskie-zabavi.ru
detsky-nabytek.info
divatraffic.com
dmmspy.com
dms-sw.ru
dneprsvet.com.ua
downloadmefiranaratb1972.xpg.com.br downloadmefiranaratb1972.xpg.com.br
droidlook.net dpihatinh.gov.vn
eandsgallery.com draniki.org
easyshoppermac.com drunkmoms.net
ebooknovel.club dverimegapolis.ru
enge-fotzen.info dynainbox.com
erot.co dyt.net
erotik0049.com eduserver.net
exoclick.com ee77ee.com
eyessurgery.ru ekosmetyki.net.pl
fefo.gdn electrik-avenue.com
ferieboligkbh.dk emediate.eu
filmgo.ru epngo.bz
findthe.pet europeanwatches.ru
flashbannernow.com everypony.ru
flauntyoursite.com evogarage.com
florida-tourism.net faz99.com
forodvd.com femmesdenudees.com
forpackningsutveckling.se fickenbumsen.net
fototravel.eu fivedwld.cf
free411games.com flprog.com
freecamdollars.com forexgb.ru
gamerscorps.com forms-mtm.ru
getoutofdebtfree.org forsex.info
global-ics.co.za foto-telok.net
gnuetella.com gallerylisting.com
graphicwe.org gameonasia.com
gsasearchengineranker.site gameplexcity.com
harmonyglen.us gamerextra.com
havepussy.com gazoblok.net.ua
headpress.ru globalsurfari.com
hermesreplica.win gsasearchengineranker.pw
hitsbox.info hasshe.com
homeandhealth.ru healmytrauma.info
hotkeys.com hermesbirkinhandbagoutlets.com
ido3.com hermesbracelets.xyz
imabase.com hetmanship.xyz
hkdiiohi.skyrock.com
hol.es
hopeonthestreet.co.uk
hotshoppymac.com
hully.altervista.org
hunterboots.online
hunthillfarmtrust.org
iamsport.org
ilovevitaly.com
imagerydatabase.com imagerydatabase.com
imgata.com indianmedicaltourismshop.com
imperia31.ru iphantom.com
interfucks.net javcoast.com
jav-fetish.com jerseywholesalechinabiz.com
javxxx18.com jillepille.com
jerseyswholesalechinalimited.com juliaworld.net
jobmarket.com.ua kanimage.com
johannesburgsingles.co.za karachev-city.ru
kakadu-interior.com.ua
kemerovo.zrus.org
kichenaid.ru kichenaid.ru
kochanelli.com kmgamex.cf
kollesa.ru liky.co.ua
konkursowo-24.pl ljusihus.se
kosmetyki.tm.pl lostaruban.com
kreativperlen.ch m292.info
kredit-blog.ru magnetic-bracelets.ru
ku6.com matb3aa.com
kvartira-sutochno.com mediafresh.online
labelwater.se medi-fitt.hu
lancheck.net middlerush-a.akamaihd.net
lashstudia.ru mikrobiologies.ru
lazymanyoga.com miniads.ca
ledpolice.ru miniature.io
lignofix.ua mir-limuzinov.ru
linerdrilling.com mistr-x.org
link.ac mobile.ok.ru
livingroomdecor.info mojpregled.com
lockerz.com monclercoats.xyz
lsex.xyz monitorwebsitespeed.com
lyrics.home-task.com myftpupload.com
machicon-ueno.info myiptest.com
mansiondelrio.co nastydollars.com
mediawhirl.net ok.ru
meduza-consult.ru olympescort.com
megaapteka.ru onlinewritingjobs17.blogspot.ru
mister-shop.com ooo-gotovie.ru
mncrftpcs.com openmultipleurl.com
mobsfun.net orel-reshka.net
monarchfind-a.akamaihd.net orenburg-gsm.ru
moviemail-online.co.uk osoznanie-narkotikam.net
mturkcontent.com oxford-book.com.ua
myanyone.net pagesense.com
mycaf.it pattersonsweb.com
naval.jislaaik.com pcboa.se
newyorkhotelsmotels.info pdns.download
nextbackgroundcheck.gq photochki.com
ngps1.ru pio.polytopesexempt.com
nordstar.pro pixell.club
normalegal.ru pojdelo.weebly.com
novatech.vn polimga.pw
nullrefer.com popander.mobi
okmusic.jp pornogad.com
panchro.xyz porno-video-chati.ru
pawli.eu praisong.net
pipki.r.acdnpro.com proekt-gaz.ru
pixshark.com psoriasis-file.trade
pokemongooo.ml remedyotc.com
pornobrazzers.biz remybutler.fr
poshiv-chehol.ru rewardit.com
pozdravleniya-c.ru rp9.ru
pricheski-video.com sa-live.com
princevc.com sbdl.no
pronorm.fr scrapinghub.com
prosmibank.ru seminarygeorgia59.ga
psvita.ru sendearnings.com
purchasepillsnorx.com seoexperimenty.ru
rankings-analytics.com seorankinglinks.xyz
recordpage-a.akamaihd.net service.adtech.fr
reeyanaturopathy.com sextracker.de
remont-fridge-tv.ru soc-econom-problems.ru
risparmiocasa.bz.it socialmonkee.com
roma-kukareku.livejournal.com social-s-ggg.xyz
ryetaw.com social-s-hhh.xyz
scanner-barak.top soft-terminal.ru
scanner-jessica.top sotkal.lark.ru
scanner-mary.top space-worry.ml
schoolfiles.net speechfoodie.com
searchaddis.com startufa.ru
searchinterneat-a.akamaihd.net sterva.cc
seksotur.ru stevemonsen.com
seo-platform.com superlist.biz
servicecenter.co.ua suralink.com
s-forum.biz surffoundation.nl
shitmovs.com surintech.ac.th
sildenafilcitratemed.com svnuppsalaorebro.se
skladvaz.ru sweepstakes.rewardit.com
skyway24.ru taxi-v-eisk.ru
smsactivator.ru tds-advert002.info
sofit-dmd.ru telefonsexsofort.tk
space4updating.win templates.franklinfire.co
spylog.com thaismartloan.com
styro.ru
summerlinhomes411.info
svolze.com
swimpool.ca
tasteidea.com
teguh.info
tfxiq.com
thebluffs.com thebluffs.com
titelhelden.eu thecoolimages.net
tizanidineduringpregnancy.blogspot.com tizanidinehydrochloride4mgstreetvalue.blogspot.com
tizanidinehcl2mgsideeffects.blogspot.com tizanidinerecreationaluse.blogspot.com
toondinsey.com tizanidinevssoma.blogspot.com
topmira.com tootoo.to
torrent-newgames.com toys.erolove.in
toursmaps.com tripper.de
trafficjunky.com tuckpointingmasonrysystems.com
trafficmania.com turbo-suslik.org
trion.od.ua tvand.ru
truck-land.life tv-spoty.info
try-rx.com twojebook.pl
ttsq.fr txxx.com
tupper-posuda.ru vacuumscleaner.com
twincitiescarservice.com viel.su
ugogo.info
umg-stroy.ru
ural-buldozer.ru
viagengrarx.com
videochat.life
vikistars.com vikistars.com
vipms.ru visa-pasport.ru
vipromoffers.com visitcambridge.org
vpnhowto.info vladhistory.com
vpnmouse.com vvpg.ru
vykup-avto-krasnodar.ru watchinf.com
watch-movies.ru watch-movies.ru
website-datenbank.de webadvance.club
wholesalenfljerseys.us.com wesharepics.info
womama.ru wtsindia.in
workle.website wttavern.com
wpthemedetector.co.uk x-lime.net
xn--80adaggc5bdhlfamsfdij4p7b.xn--p1ai xn--80adaggc5bdhlfamsfdij4p7b.xn--p1ai
xn----itbeirbjbi7bc6bh2d.xn--p1ai xn----8sbhefaln6acifdaon5c6f4axh.xn--p1ai
x-porno.video xsion.net
x-stars.ru xxx-treker.ru
xxxkaz.org yougotanewdomain.com
yourserverisdown.com yourads.website
zapiszto.pl yurgorod.ru
zarepta.com yur-p.ru
zastenchivosti.net zoosexart.com
zigarettenonlinekaufen.tumblr.com zvezdagedon.ru
zvetki.ru

View file

@ -1,129 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html><!DOCTYPE html>
<html>
<head>
<title>Welcome to the Nginx</title>
</head>
<body>
<div align=center>
<h1>Welcome to the Nginx Ultimate Bad Bot Blocker</h1>
<p>This is merely used for testing !!!</p>
</body>
</html>

View file

@ -1,2 +1,2 @@
35.202.145.110 0; 35.192.136.167 0;
127.0.0.1 0; 127.0.0.1 0;

Binary file not shown.

Binary file not shown.

View file

@ -4,7 +4,7 @@
### PLEASE READ CONFIGURATION INSTRUCTIONS BELOW THOROUGHLY :exclamation: ### PLEASE READ CONFIGURATION INSTRUCTIONS BELOW THOROUGHLY :exclamation:
_______________ _______________
#### Version: V4.2019.06.1633 #### Version: V4.2019.06.1634
#### Bad Referrer Count: 6713 #### Bad Referrer Count: 6713
#### Bad Bot Count: 556 #### Bad Bot Count: 556
____________________ ____________________

View file

@ -4,7 +4,7 @@
### PLEASE READ CONFIGURATION INSTRUCTIONS BELOW THOROUGHLY :exclamation: ### PLEASE READ CONFIGURATION INSTRUCTIONS BELOW THOROUGHLY :exclamation:
_______________ _______________
#### Version: V4.2019.06.1633 #### Version: V4.2019.06.1634
#### Bad Referrer Count: 6713 #### Bad Referrer Count: 6713
#### Bad Bot Count: 556 #### Bad Bot Count: 556
____________________ ____________________

View file

@ -11,7 +11,7 @@
##### The Ultimate Nginx Bad Bot, User-Agent, Spam Referrer Blocker, Adware, Malware and Ransomware Blocker, Clickjacking Blocker, Click Re-Directing Blocker, SEO Companies and Bad IP Blocker with Anti DDOS System, Nginx Rate Limiting and Wordpress Theme Detector Blocking. Stop and Block all kinds of bad internet traffic from ever reaching your web sites. [PLEASE SEE: Definition of Bad Bots](#define-bad-bots) ##### The Ultimate Nginx Bad Bot, User-Agent, Spam Referrer Blocker, Adware, Malware and Ransomware Blocker, Clickjacking Blocker, Click Re-Directing Blocker, SEO Companies and Bad IP Blocker with Anti DDOS System, Nginx Rate Limiting and Wordpress Theme Detector Blocking. Stop and Block all kinds of bad internet traffic from ever reaching your web sites. [PLEASE SEE: Definition of Bad Bots](#define-bad-bots)
_______________ _______________
#### Version: V4.2019.06.1633 #### Version: V4.2019.06.1634
#### Bad Referrer Count: 6713 #### Bad Referrer Count: 6713
#### Bad Bot Count: 556 #### Bad Bot Count: 556
____________________ ____________________

View file

@ -3,7 +3,7 @@
# EASY CONFIGURATION INSTRUCTIONS FOR STOPPING GOOGLE ANALYTICS "GHOST" SPAM # EASY CONFIGURATION INSTRUCTIONS FOR STOPPING GOOGLE ANALYTICS "GHOST" SPAM
_______________ _______________
#### Version: V4.2019.06.1633 #### Version: V4.2019.06.1634
#### Bad Referrer Count: 6713 #### Bad Referrer Count: 6713
#### Bad Bot Count: 556 #### Bad Bot Count: 556
____________________ ____________________

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1633 ### Version: V4.2019.06.1634
### Updated: Thu Jun 27 09:10:20 SAST 2019 ### Updated: Thu Jun 27 10:50:24 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -1,22 +1,21 @@
### ********************************** ### -----------------------------------------------------------
### THE ULTIMATE NGINX BAD BOT BLOCKER ### THE NGINX ULTIMATE BAD BOT, BAD IP AND BAD REFERRER BLOCKER
### ********************************** ### -----------------------------------------------------------
### !!!!!!!!!!!!!
### TEST TEMPLATE
### THIS VERSION IS USED FOR TESTING ANY POTENTIAL BREAKING CHANGES
### !!!!!!!!!!!!!
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V3.2019.06.1633 ### Version: V3.2019.06.1634
### Updated: Thu Jun 27 09:10:21 SAST 2019 ### Updated: Thu Jun 27 10:50:26 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################
### VERSION INFORMATION ## ### VERSION INFORMATION ##
### --------------------------------------------
### HELP SUPPORT THIS PROJECT - Send Me a Coffee
### https://ko-fi.com/mitchellkrog
### --------------------------------------------
############################################################################## ##############################################################################
# _ __ _ # # _ __ _ #
# / |/ /__ _(_)__ __ __ # # / |/ /__ _(_)__ __ __ #
@ -34,12 +33,16 @@
### and also has rate limiting functionality for bad bots who you only want to rate limit ### and also has rate limiting functionality for bad bots who you only want to rate limit
### and not actually block out entirely. It is very powerful and also very flexible. ### and not actually block out entirely. It is very powerful and also very flexible.
### --------------------------------------------------------------------------
### Created By: https://github.com/mitchellkrogza/ ### Created By: https://github.com/mitchellkrogza/
### Repo Url: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker ### Repo Url: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
### Copyright Mitchell Krog - <mitchellkrog@gmail.com> ### Copyright Mitchell Krog - <mitchellkrog@gmail.com>
### Contributors: Stuart Cardall - https://github.com/itoffshore ### Contributors: Stuart Cardall - https://github.com/itoffshore
### --------------------------------------------------------------------------
### --------------------------------------------------------------------------
### Tested on: nginx/1.10.3 up to latest Mainstream Version (Ubuntu 16.04) ### Tested on: nginx/1.10.3 up to latest Mainstream Version (Ubuntu 16.04)
### --------------------------------------------------------------------------
### This list was developed and is in use on a live Nginx server running some very busy web sites. ### This list was developed and is in use on a live Nginx server running some very busy web sites.
### It was built from the ground up using real data from daily logs and is updated almost daily. ### It was built from the ground up using real data from daily logs and is updated almost daily.
@ -47,9 +50,9 @@
### spam referrers, rogue IP address, scanners, scrapers and domain hijacking sites are extensively checked ### spam referrers, rogue IP address, scanners, scrapers and domain hijacking sites are extensively checked
### before they are added. It is monitored extensively for any false positives. ### before they are added. It is monitored extensively for any false positives.
### ********* ### ---------
### Features: ### Features:
### ********* ### ---------
### Clear formatting for Ease of Maintenance. ### Clear formatting for Ease of Maintenance.
### Alphabetically ordered lists for Ease of Maintenance. ### Alphabetically ordered lists for Ease of Maintenance.
### Extensive Commenting for Ease of Reference. ### Extensive Commenting for Ease of Reference.
@ -60,40 +63,38 @@
### IP range blocking / whitelisting. ### IP range blocking / whitelisting.
### Rate Limiting Functions. ### Rate Limiting Functions.
### ************ ### ------------
### INSTALLATION ### INSTALLATION
### ************ ### ------------
### PLEASE use the install, setup and update scripts provided for you to ease your installation. ### PLEASE use the install, setup and update scripts provided for you to ease your installation.
### This Auto Installation procedure is documented in the README.md and AUTO-CONFIGURATION.md files. ### This Auto Installation procedure is documented in the README.md and AUTO-CONFIGURATION.md files.
### Installation, Setup and Update Scripts Contributed by Stuart Cardall - https://github.com/itoffshore ### Installation, Setup and Update Scripts Contributed by Stuart Cardall - https://github.com/itoffshore
### There are also manual configuration instructions provided for those not wishing to do an auto install. ### There are also manual configuration instructions provided for those not wishing to do an auto install.
### *********************************************** ### -----------------------------------------------
### !!!!! PLEASE READ INLINE NOTES ON TESTING !!!!! ### !!!!! PLEASE READ INLINE NOTES ON TESTING !!!!!
### *********************************************** ### -----------------------------------------------
### Note that: ### SETTINGS:
### ---------------------------------------------
### 0 = allowed - no limits ### 0 = allowed - no limits
### 1 = allowed or rate limited less restrictive ### 1 = allowed or rate limited less restrictive
### 2 = rate limited more ### 2 = rate limited more
### 3 = block completely ### 3 = block completely
### ---------------------------------------------
### ************************************************************ ### ------------------------------------------------------------
### CONTRIBUTING / PULL REQUESTS / ADDING YOUR OWN BAD REFERRERS ### CONTRIBUTING / PULL REQUESTS / ADDING YOUR OWN BAD REFERRERS
### ************************************************************ ### ------------------------------------------------------------
### For contributing, corrections or adding bots or referrers to this repo, ### For contributing, corrections or adding bots or referrers to this repo,
### Send a Pull Request (PR) on any of the .list files in the _generator_lists folder ### Send a Pull Request (PR) on any of the .list files in the _generator_lists folder
### All Pull Requests will be checked for accuracy before being merged. ### All Pull Requests will be checked for accuracy before being merged.
# ********************************* # -----------------------
# FIRST BLOCK BY USER-AGENT STRINGS
# *********************************
# ***********************
# !!!!! PLEASE TEST !!!!! # !!!!! PLEASE TEST !!!!!
# *********************** # -----------------------
# ALWAYS test any User-Agent Strings you add here to make sure you have it right # ALWAYS test any User-Agent Strings you add here to make sure you have it right
# Use a Chrome Extension called "User-Agent Switcher for Chrome" where you can create your # Use a Chrome Extension called "User-Agent Switcher for Chrome" where you can create your
@ -104,36 +105,46 @@
# curl -I http://www.yourdomain.com -A "GoogleBot" ---- GIVES YOU: HTTP/1.1 200 OK (Meaning web page was served to Client) # curl -I http://www.yourdomain.com -A "GoogleBot" ---- GIVES YOU: HTTP/1.1 200 OK (Meaning web page was served to Client)
# curl -I http://www.yourdomain.com -A "80legs" ---- GIVES YOU: curl: (52) Empty reply from server (Meaning Nginx gave a 444 Dropped Connection) # curl -I http://www.yourdomain.com -A "80legs" ---- GIVES YOU: curl: (52) Empty reply from server (Meaning Nginx gave a 444 Dropped Connection)
# In this section we allow/disallow specific User Agents / Bots.
# ********************************************************************* # =======================
# Now we map all good and bad user agents to a variable called $bad_bot # START BLOCKER FUNCTIONS
# ********************************************************************* # =======================
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# DO NOT EDIT ANYTHING BELOW THIS LINE !!!
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# =============================
# BEGIN SECTION 1 - USER-AGENTS
# =============================
# ALLOW / BLOCK User Agents / Bots
# -------------------------------------------------------------------
# Map all GOOD and BAD UA (User Agents) to a variable called $bad_bot
# -------------------------------------------------------------------
map $http_user_agent $bad_bot { map $http_user_agent $bad_bot {
default 0; default 0;
# *********************************************** # -----------------------------------------------------------------------------------
# Include your Own Custom List of Bad User Agents
# ***********************************************
# Use the include file below to further customize your own list of additional user-agents you wish to permanently block
# This include file allows whitelisting and blacklisting of anything specified below it, meaning you can over-ride anything in this blocker to your liking.
# ***********************************************************************************
# START CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *********************************************************************************** # -----------------------------------------------------------------------------------
# Include your Own Custom List of Bad User Agents
# Use the include file below to further customize your own list of additional user-agents you wish to permanently block
# This include file allows whitelisting and blacklisting of anything specified below it.
# This include file alows you to over-ride any Bad / Good UA (Bot) declared in this blocker to your liking.
include /etc/nginx/bots.d/blacklist-user-agents.conf; include /etc/nginx/bots.d/blacklist-user-agents.conf;
# ********************************************************************************* # ---------------------------------------------------------------------------------
# END CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BLACKLISTED USER AGENTS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************************* # ---------------------------------------------------------------------------------
# ********************************************* # --------------------------------------------------
# Bad User-Agent Strings That We Block Outright # BAD UA (User-Agent) Strings That We Block Outright
# ********************************************* # --------------------------------------------------
# START BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)360Spider(?:\b|)" 3; "~*(?:\b)360Spider(?:\b|)" 3;
@ -694,9 +705,16 @@ map $http_user_agent $bad_bot {
"~*(?:\b)ZyBorg(?:\b|)" 3; "~*(?:\b)ZyBorg(?:\b|)" 3;
# END BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END BAD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# *********************************************** # --------------------------------------------
# Allow Good User-Agent Strings We Know and Trust # GOOD UA User-Agent Strings We Know and Trust
# *********************************************** # --------------------------------------------
# -----------------------------------------------------------------------
# You can over-ride these in /etc/nginx/bots.d/blacklist-user-agents.conf
# by adding the same UA line there and chaning its value of 1
# If you think GoogleBot is bad you would simply add them to
# blacklist-user-agents.conf with a value of 1
# -----------------------------------------------------------------------
# START GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)adidxbot(?:\b|)" 0; "~*(?:\b)adidxbot(?:\b|)" 0;
@ -733,12 +751,13 @@ map $http_user_agent $bad_bot {
"~*(?:\b)yahoo(?:\b|)" 0; "~*(?:\b)yahoo(?:\b|)" 0;
# END GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END GOOD BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# *************************************************** # --------------------------------------------------------
# User-Agent Strings Allowed Through but Rate Limited # GOOD UA User-Agent Rate Limiting 1 - Disabled by Default
# *************************************************** # --------------------------------------------------------
# Some people block libwww-perl, it used widely in many valid (non rogue) agents # TO ACTIVATE THIS RATE LIMITING Uncomment these two lines in blockbots.conf
# I allow libwww-perl as I use it for monitoring systems with Munin but it is rate limited #limit_conn bot1_connlimit 100;
#limit_req zone=bot1_reqlimitip burst=50;
# START ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)jetmon(?:\b|)" 1; "~*(?:\b)jetmon(?:\b|)" 1;
@ -749,9 +768,14 @@ map $http_user_agent $bad_bot {
"~*(?:\b)Wget/1.15(?:\b|)" 1; "~*(?:\b)Wget/1.15(?:\b|)" 1;
# END ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # END ALLOWED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
# ************************************************************** # -------------------------------------------------------
# Rate Limited User-Agents who get a bit aggressive on bandwidth # GOOD UA User-Agent Rate Limiting 2 - Enabled by Default
# ************************************************************** # -------------------------------------------------------
# -----------------------------------------------------------------------
# You can over-ride these in /etc/nginx/bots.d/blacklist-user-agents.conf
# by adding the same UA line there and chaning its value of 1
# -----------------------------------------------------------------------
# START LIMITED BOTS ### DO NOT EDIT THIS LINE AT ALL ### # START LIMITED BOTS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)Alexa(?:\b|)" 2; "~*(?:\b)Alexa(?:\b|)" 2;
@ -775,162 +799,185 @@ map $http_user_agent $bad_bot {
} }
# ===========================
# END SECTION 1 - USER-AGENTS
# ===========================
# ***************************************** # =======================================
# SECOND BLOCK BY REFERRER STRINGS AND URLS # BEGIN SECTION 2 - REFERRERS AND DOMAINS
# ***************************************** # =======================================
# ***************** # ----------------
# PLEASE TEST !!!! # PLEASE TEST !!!!
# ***************** # ----------------
# ------------------------------------------------------------------------------------------------------------------------------
# ALWAYS test referrers that you add. This is done manually as follows # ALWAYS test referrers that you add. This is done manually as follows
# ------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://anything.adcash.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://anything.adcash.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://www.goodwebsite.com/not-adcash --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://www.goodwebsite.com/not-adcash --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://www.betterwebsite.com/not/adcash --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://www.betterwebsite.com/not/adcash --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://www.google.com --- GIVES YOU: full html output of the web page # curl -I http://www.yourdomain.com -e http://www.google.com --- GIVES YOU: full html output of the web page
# curl -I http://www.yourdomain.com -e http://www.microsoft.com --- GIVES YOU: full html output of the web page # curl -I http://www.yourdomain.com -e http://www.microsoft.com --- GIVES YOU: full html output of the web page
# ------------------------------------------------------------------------------------------------------------------------------
# Because of case-insensitive matching any combination of capitilization in the names will all produce a positive hit # Because of case-insensitive matching any combination of capitilization in the names will all produce a positive hit
# make sure you always test thoroughly and monitor logs. This section below also does NOT check for a preceding www. # make sure you always test thoroughly and monitor logs. This section below also does NOT check for a preceding www.
# and it also does not care if the referrer request was sent with http https or even ftp. # and it also does not care if the referrer request was sent with http https or even ftp.
# ------------------------------------------------------------------------------------------------------------------------------
# *********************************************************************** # ----------------------------------------------------------------
# Now we map all bad referrer words below to a variable called $bad_words # Map all BAD referrer words below to a variable called $bad_words
# *********************************************************************** # ----------------------------------------------------------------
# --------------------------------
# START Bad Referrer Word Scanning
# --------------------------------
map $http_referer $bad_words { map $http_referer $bad_words {
default 0; default 0;
# ************************** # -------------------------------------------------------------------------------------------
# Bad Referrer Word Scanning
# **************************
# These are Words and Terms often found tagged onto domains or within url query strings. # These are Words and Terms often found tagged onto domains or within url query strings.
# Create and Customize Your Own Bad Referrer Words Here using the new Include File Method # Create and Customize Your Own Bad Referrer Words Here using the new Include File Method
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# customized list of bad referrer words are automatically now included for you # customized list of bad referrer words are automatically now included for you
# Read Comments inside bad-referrer-words.conf for customization tips. # Read Comments inside bad-referrer-words.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# BE VERY CAREFUL using the bad-referrer-words.conf file - please read the comment and # BE VERY CAREFUL using this bad-referrer-words.conf file - please read the comments and
# examples inside the include file for detailed explanations into how seriously this can # examples inside the include file for detailed explanations into how seriously this can
# affect your own site from serving assets or other innocent sites from accessing your site # affect your own site from serving assets or other innocent sites from accessing your site
# For safety sake the whitelist-domains.conf file is also loaded here before the bad-referrer-words.conf file. # For safety sake the whitelist-domains.conf file is also loaded here before the
# bad-referrer-words.conf file is loaded.
# -------------------------------------------------------------------------------------------
# ************************************************************************ # ------------------------------------------------------------------------
# START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-domains.conf; include /etc/nginx/bots.d/whitelist-domains.conf;
# ********************************************************************** # ----------------------------------------------------------------------
# END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************** # ----------------------------------------------------------------------
# ****************************************************************************** # ------------------------------------------------------------------------------
# START CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ****************************************************************************** # ------------------------------------------------------------------------------
include /etc/nginx/bots.d/bad-referrer-words.conf; include /etc/nginx/bots.d/bad-referrer-words.conf;
# **************************************************************************** # ----------------------------------------------------------------------------
# END CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BAD REFERRER WORDS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# **************************************************************************** # ----------------------------------------------------------------------------
} }
# --------------------------------
# END Bad Referrer Word Scanning
# --------------------------------
# *************************
# Bad Referrer Domain Names
# *************************
# Now a list of bad referrer urls these domains or any combination of them ie .com .net # ----------------------------------------
# will be blocked out. Doesn't matter if the protocol is http, https or even ftp # START Good and Bad Referrer Domain Names
# ----------------------------------------
# -------------------------------------------------------------------------------------
# Good and Bad referrer urls Doesn't matter if the protocol is http, https or even ftp
# -------------------------------------------------------------------------------------
# ----------------------
# This section includes: # This section includes:
# ********************** # ----------------------
# --------------------------------------------------------------------------------
# Blocking of SEO company Semalt.com (now merged into this one section) # Blocking of SEO company Semalt.com (now merged into this one section)
# MIRAI Botnet Domains Used for Mass Attacks # MIRAI Botnet Domains Used for Mass Attacks
# Other known bad SEO companies and Ad Hijacking Sites # Other known bad SEO companies and Ad Hijacking Sites
# Sites linked to malware, adware, clickjacking and ransomware # Sites linked to malware, adware, clickjacking and ransomware
# Domain names and referrers used in referrer spam and seo hijacking
# Whitelisting of your own GOOD domains / referrers
# Whitelisting of any other GOOD domains / referrers you want explicitly NOT block
# --------------------------------------------------------------------------------
# ***************** # ----------------
# PLEASE TEST !!!! # PLEASE TEST !!!!
# ***************** # ----------------
# ------------------------------------------------------------------------------------------------------------------------------------
# ALWAYS test referrers that you add. This is done manually as follows # ALWAYS test referrers that you add. This is done manually as follows
# ------------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------------
# Because of case-insensitive matching any combination of capitilization will all produce a positive hit - make sure you always test. # Because of case-insensitive matching any combination of capitilization will all produce a positive hit - make sure you always test.
# ------------------------------------------------------------------------------------------------------------------------------------
# For Example any of the following variations below of 8gold.com will be detected and blocked # For Example any of the following variations below of 8gold.com will be detected and blocked
# ------------------------------------------------------------------------------------------------------------------------------------
# curl -I http://www.yourdomain.com -e http://NOT-8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://NOT-8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e http://this.is.not8gOlD.net --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e http://this.is.not8gOlD.net --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e ftp://8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e ftp://8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e ftp://www.weare8gold.NET --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e ftp://www.weare8gold.NET --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e https://subdomain.8gold.com --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e https://subdomain.8gold.com --- GIVES YOU: curl: (52) Empty reply from server
# curl -I http://www.yourdomain.com -e https://NOT8GolD.org --- GIVES YOU: curl: (52) Empty reply from server # curl -I http://www.yourdomain.com -e https://NOT8GolD.org --- GIVES YOU: curl: (52) Empty reply from server
# ------------------------------------------------------------------------------------------------------------------------------------
# So if you see a bad referrer from wearegoogle.com and you want to block them just add # So if you see a bad referrer from wearegoogle.com and you want to block them just add
# them as "~*wearegoogle.com" don't ever go and do something like "~*google(-|.)" you will # them as "~*wearegoogle.com" don't ever go and do something like "~*google(-|.)" you will
# kill all your SEO in a week. # kill all your SEO in a week.
# ------------------------------------------------------------------------------------------------------------------------------------
# To add your own custom bad referrers use the custom include file # To add your own custom bad referrers use the custom include file
# /etc/nginx/bots.d/custom-bad-referrers.conf # /etc/nginx/bots.d/custom-bad-referrers.conf
# Or send a Pull Request to add it to the global blacklist for other users. # Or send a Pull Request to add it to the global blacklist for other users.
# In the bad referrers section I also include sites that hotlink images without permission. # In the bad referrers section I also include sites that hotlink images without permission.
# ------------------------------------------------------------------------------------------------------------------------------------
# *********************************************************************** # --------------------------------------------------------------------
# Now we map all good & bad referrer urls to variable called #bad_referer # Map all good & bad referrer DOMAINS to a variable called bad_referer
# *********************************************************************** # --------------------------------------------------------------------
map $http_referer $bad_referer { map $http_referer $bad_referer {
hostnames; hostnames;
default 0; default 0;
# ************************************* # --------------------------------------------
# GOOD REFERRERS - Spared from Checking # GOOD REFERRER DOMAINS - Spared from Checking
# ************************************* # --------------------------------------------
# ---------------------------------------------------------------------------------------
# Add all your own web site domain names and server names in this section # Add all your own web site domain names and server names in this section
# WHITELIST Your Own Domain Names Here using the new Include File Method # WHITELIST Your Own Domain Names Here using the new Include File Method
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# whitelisted domain names are automatically now included for you. # whitelisted domain names are automatically now included for you.
# Read Comments inside whitelist-domains.conf for customization tips. # Read Comments inside whitelist-domains.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# ---------------------------------------------------------------------------------------
# ************************************************************************ # ------------------------------------------------------------------------
# START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-domains.conf; include /etc/nginx/bots.d/whitelist-domains.conf;
# ********************************************************************** # ----------------------------------------------------------------------
# END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED DOMAINS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ********************************************************************** # ----------------------------------------------------------------------
# *********************************** # -----------------------------------
# CUSTOM BAD REFERRERS - Add your Own # CUSTOM BAD REFERRERS - Add your Own
# *********************************** # -----------------------------------
# Add any extra bad referrers in the following include file to have them # Add any extra bad referrers in the following include file to have them
# permanently included and blocked - avoid duplicates in your custom file # permanently included and blocked - avoid duplicates in your custom file
# custom-bad-referrers.conf is BOTH a BLACKLIST AND WHITELIST
# custom-bad-referrers.conf ALLOWS complete over-riding of anything
# If you think google.com is bad you would simply add them to
# custom-bad-referrers.conf with a value of 1
# ************************************************************************* # -------------------------------------------------------------------------
# START CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************* # -------------------------------------------------------------------------
include /etc/nginx/bots.d/custom-bad-referrers.conf; include /etc/nginx/bots.d/custom-bad-referrers.conf;
# *********************************************************************** # -----------------------------------------------------------------------
# END CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END CUSTOM BAD REFERRERS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *********************************************************************** # -----------------------------------------------------------------------
# START BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ### # START BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ###
"~*(?:\b)000free\.us(?:\b|)" 1; "~*(?:\b)000free\.us(?:\b|)" 1;
@ -7650,26 +7697,24 @@ map $http_referer $bad_referer {
# END BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ### # END BAD REFERRERS ### DO NOT EDIT THIS LINE AT ALL ###
} }
# =====================================
# END SECTION 2 - REFERRERS AND DOMAINS
# =====================================
# *********************************************** # ========================================================================
# WHITELISTING AND BLACKLISTING IP ADDRESS RANGES # BEGIN SECTION 3 - WHITELISTING AND BLACKLISTING IP ADDRESSESE AND RANGES
# *********************************************** # ========================================================================
# Geo directive to deny and also whitelist certain ip addresses # --------------------------------------------------------------------------------------
# Map all GOOD and BAD IP Addresses and Ranges to a variable called geo $validate_client
# --------------------------------------------------------------------------------------
geo $validate_client { geo $validate_client {
# ********************
# First Our Safety Net
# ********************
# Anything not matching our rules is allowed through with default 0;
default 0; default 0;
# ************************* # -------------------------------------
# Wordpress Theme Detectors # BLOCK known Wordpress Theme Detectors
# ************************* # -------------------------------------
# START WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ### # START WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ###
@ -7713,10 +7758,11 @@ geo $validate_client {
89.36.223.188 1; #www.cuteseotools.net/wordpress-theme-detector 89.36.223.188 1; #www.cuteseotools.net/wordpress-theme-detector
# END WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ### # END WP THEME DETECTORS ### DO NOT EDIT THIS LINE AT ALL ###
# **************************************** # ----------------------------------------------
# NIBBLER - SEO testing and reporting tool # BLOCK NIBBLER - SEO testing and reporting tool
# **************************************** # ----------------------------------------------
# See - http://nibbler.silktide.com/ # See - http://nibbler.silktide.com/
# ----------------------------------------------
# START NIBBLER ### DO NOT EDIT THIS LINE AT ALL ### # START NIBBLER ### DO NOT EDIT THIS LINE AT ALL ###
52.201.238.175 1; 52.201.238.175 1;
@ -7728,11 +7774,11 @@ geo $validate_client {
54.242.250.203 1; 54.242.250.203 1;
# END NIBBLER ### DO NOT EDIT THIS LINE AT ALL ### # END NIBBLER ### DO NOT EDIT THIS LINE AT ALL ###
# *********************************************************************************************
# KNOWN BAD IP ADDRESSES # -----------------------------------------
# Source: https://github.com/mitchellkrogza/Suspicious.Snooping.Sniffing.Hacking.IP.Addresses # BLOCK KNOWN BAD IP ADDRESSES
# A Reliable Daily Updated List Included Below of Known Bad IP Addresses, Snoopers and Sniffers # Top known bad IP Adresses from abuseIPDB
# ********************************************************************************************* # -----------------------------------------
# START KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ### # START KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ###
193.32.163.89 1; 193.32.163.89 1;
@ -17736,11 +17782,9 @@ geo $validate_client {
46.101.115.65 1; 46.101.115.65 1;
# END KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ### # END KNOWN BAD IP ADDRESSES ### DO NOT EDIT THIS LINE AT ALL ###
# **************** # --------------------------
# Google IP Ranges # WHITELIST Google IP Ranges
# **************** # --------------------------
# For Safety Sake all Google's Known IP Ranges are all white listed
# START GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
108.177.0.0/17 0; 108.177.0.0/17 0;
@ -17768,11 +17812,9 @@ geo $validate_client {
74.125.0.0/16 0; 74.125.0.0/16 0;
# END GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END GOOGLE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ************** # ------------------------
# Bing IP Ranges # WHITELIST Bing IP Ranges
# ************** # ------------------------
# For Safety Sake all Bing's Known IP Ranges are all white listed
# START BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
131.253.21.0/24 0; 131.253.21.0/24 0;
@ -17796,11 +17838,9 @@ geo $validate_client {
40.96.0.0/12 0; 40.96.0.0/12 0;
# END BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END BING IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ******************** # ------------------------------
# Cloudflare IP Ranges # WHITELIST Cloudflare IP Ranges
# ******************** # ------------------------------
# For Safety Sake all Cloudflare's Known IP Ranges are all white listed
# START CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # START CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
103.21.244.0/22 0; 103.21.244.0/22 0;
@ -17827,75 +17867,91 @@ geo $validate_client {
2c0f:f248::/32 0; 2c0f:f248::/32 0;
# END CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ### # END CLOUDFLARE IP RANGES ### DO NOT EDIT THIS LINE AT ALL ###
# ************************************************* # -------------------------------------------------
# Blacklist IP addresses and IP Ranges Customizable # BLACKLIST IP addresses and IP Ranges Customizable
# ************************************************* # -------------------------------------------------
# --------------------------------------------------------------------------------------
# BLACKLIST all your IP addresses and Ranges using the new include file below. # BLACKLIST all your IP addresses and Ranges using the new include file below.
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# Custom Blacklisted IP addresses are automatically now included for you. # Custom Blacklisted IP addresses are automatically now included for you.
# Read Comments inside blacklist-ips.conf for customization tips. # Read Comments inside blacklist-ips.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# Anything added to blacklist-ips.conf will over-ride anything whitelisted above
# --------------------------------------------------------------------------------------
# ******************************************************************** # --------------------------------------------------------------------
# START BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ******************************************************************** # --------------------------------------------------------------------
include /etc/nginx/bots.d/blacklist-ips.conf; include /etc/nginx/bots.d/blacklist-ips.conf;
# ****************************************************************** # ------------------------------------------------------------------
# END BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END BLACKLISTED IPS ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ****************************************************************** # ------------------------------------------------------------------
# ----------------------------------------------
# Whitelist all your OWN IP addresses and Ranges
# ----------------------------------------------
# *********************************** # --------------------------------------------------------------------------------------
# Whitelist all your OWN IP addresses
# ***********************************
# WHITELIST all your own IP addresses using the include file below. # WHITELIST all your own IP addresses using the include file below.
# New Method Uses the include file below so that when pulling future updates your # New Method Uses the include file below so that when pulling future updates your
# whitelisted IP addresses are automatically now included for you. # whitelisted IP addresses are automatically now included for you.
# Read Comments inside whitelist-ips.conf for customization tips. # Read Comments inside whitelist-ips.conf for customization tips.
# Updating the main globalblacklist.conf file will not touch your custom include files # Updating the main globalblacklist.conf file will not touch your custom include files
# whitelist-ips.conf reigns supreme !!!
# Whatever you add to whitelist-ips.conf will be whitelisted FULL STOP
# Anything blacklisted above this line will be over-ridden by whitelist-ips.conf
# --------------------------------------------------------------------------------------
# ************************************************************************** # --------------------------------------------------------------------------
# START WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************** # --------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-ips.conf; include /etc/nginx/bots.d/whitelist-ips.conf;
# ************************************************************************ # ------------------------------------------------------------------------
# END WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED IP RANGES ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************ # ------------------------------------------------------------------------
} }
# --------------------------------------------------------------------------------------
# WHITELIST your own IPs from the DDOS Filter # WHITELIST your own IPs from the DDOS Filter
# Add your own IP addresses and ranges into the custom include file whitelist-ips.conf # Add your own IP addresses and ranges into the custom include file whitelist-ips.conf
# to spare them from the rate limiting DDOS filter. # to spare them from the rate limiting DDOS filter.
# This section includes the same / single whitelist-ips.conf file so you only # This section includes the same / single whitelist-ips.conf file so you only
# need to edit that include file and have it include here for you too. # need to edit that include file and have it include here for you too.
# --------------------------------------------------------------------------------------
geo $ratelimited { geo $ratelimited {
default 1; default 1;
# *************************************************************************** # ---------------------------------------------------------------------------
# START WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # START WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# *************************************************************************** # ---------------------------------------------------------------------------
include /etc/nginx/bots.d/whitelist-ips.conf; include /etc/nginx/bots.d/whitelist-ips.conf;
# ************************************************************************* # -------------------------------------------------------------------------
# END WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ### # END WHITELISTED IP RANGES2 ### DO NOT EDIT OR REMOVE THIS LINE AT ALL ###
# ************************************************************************* # -------------------------------------------------------------------------
} }
# ***************************************** # ======================================================================
# MAP BAD BOTS TO OUR RATE LIMITER FUNCTION # END SECTION 3 - WHITELISTING AND BLACKLISTING IP ADDRESSESE AND RANGES
# ***************************************** # ======================================================================
# ============================================
# BEGIN SECTION 4 - ACTIVATE BLOCKER FUNCTIONS
# ============================================
# --------------------------------------------
# 1. MAP BAD BOTS TO OUR RATE LIMITER FUNCTION
# --------------------------------------------
map $bad_bot $bot_iplimit { map $bad_bot $bot_iplimit {
0 ""; 0 "";
@ -17903,30 +17959,31 @@ geo $ratelimited {
2 $binary_remote_addr; 2 $binary_remote_addr;
} }
# *********************** # --------------------------
# SET RATE LIMITING ZONES # 2. SET RATE LIMITING ZONES
# *********************** # --------------------------
# BAD BOT RATE LIMITING ZONE # BAD BOT RATE LIMITING ZONE
# limits for Zone $bad_bot = 1 # Rate limiting will only take effect if on any User-Agents with a value of 2
# Nothing Set - you can set a different zone limiter here if you like
# We issue a 444 response instead to all bad bots.
# limits for Zone $bad_bot = 2
# this rate limiting will only take effect if you change any of the bots and change
# their block value from 1 to 2.
limit_conn_zone $bot_iplimit zone=bot2_connlimit:16m; limit_conn_zone $bot_iplimit zone=bot2_connlimit:16m;
limit_req_zone $bot_iplimit zone=bot2_reqlimitip:16m rate=6r/m burst=1; limit_req_zone $bot_iplimit zone=bot2_reqlimitip:16m rate=6r/m burst=1;
### *** MAKE SURE TO ADD to your nginx.conf *** # ==========================================
### server_names_hash_bucket_size 64; # END SECTION 4 - ACTIVATE BLOCKER FUNCTIONS
### server_names_hash_max_size 4096; # ==========================================
### limit_req_zone $binary_remote_addr zone=flood:50m rate=90r/s;
### limit_conn_zone $binary_remote_addr zone=addr:50m;
### to allow it to load this large set of domains into memory and to set the rate limiting zones for the DDOS filter.
### THE END of the Long and Winding Road # =====================
# END BLOCKER FUNCTIONS
# =====================
### Also check out my Ultimate Apache Bad Bot Blocker on Github ### --------------------------------------------
### https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker ### HELP SUPPORT THIS PROJECT - Send Me a Coffee
### https://ko-fi.com/mitchellkrog
### --------------------------------------------
### FOR APACHE SERVERS
### ---------------------------------------------
### Check out the Ultimate Apache Bad Bot Blocker
### ---------------------------------------------

View file

@ -4,8 +4,8 @@
### VERSION INFORMATION # ### VERSION INFORMATION #
################################################### ###################################################
### Version: V4.2019.06.1633 ### Version: V4.2019.06.1634
### Updated: Thu Jun 27 09:10:20 SAST 2019 ### Updated: Thu Jun 27 10:50:24 SAST 2019
### Bad Referrer Count: 6713 ### Bad Referrer Count: 6713
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################

View file

@ -6,8 +6,8 @@
### Version Information # ### Version Information #
################################################### ###################################################
### Version: V4.2019.06.1633 ### Version: V4.2019.06.1634
### Updated: Thu Jun 27 09:10:22 SAST 2019 ### Updated: Thu Jun 27 10:50:27 SAST 2019
### Bad Bot Count: 556 ### Bad Bot Count: 556
################################################### ###################################################
### Version Information ## ### Version Information ##