htpw
apache-ultimate-bad-bot-blocker
| htpw | apache-ultimate-bad-bot-blocker | |
|---|---|---|
| 1 | 3 | |
| 49 | 751 | |
| - | - | |
| 0.0 | 9.5 | |
| over 1 year ago | 4 days ago | |
| C | ||
| - | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
htpw
-
htpw: htaccess to protect Wordpress
You can see the project on GitHub: https://github.com/drego85/htpw
apache-ultimate-bad-bot-blocker
-
Ahrefs Saved US$400M in 3 Years by Not Going to the Cloud
I found Ahrefs a bit too aggressive. Thankfully they seem to honor Robots.txt so it's not much of a problem, but across the wide range of sites I'm responsible for, the Ahrefs bots really stood out as being a problem. Out of curiosity, I just double checked and the only hits from them in the logs are "GET /robots.txt" which is what I would expect.
I recently found a regularly update place for bot stuff:
https://github.com/mitchellkrogza/apache-ultimate-bad-bot-bl...
I don't think I'd call Ahrefs a "Bad Bot" but they are on that list. I'd call any bot ignoring robots.txt bad though.
- My VM gets thousands of hits from vulnerability crawlers (bots) each day. Is that normal?
-
Added a Google Recaptcha to the Checkout page due to bot-fraud attempts, now it hinders legitimate customers
Most malicious bots are well known and blocking them is often simple. Use the popular Bad Bot Blocker software https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker
What are some alternatives?
htshells - Self contained htaccess shells and attacks
nginx-ultimate-bad-bot-blocker - Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
hugo-apache-headers - This is a Hugo module that can be included to create a .htaccess for apache
infinite-fake-website - Lure SEO spammers down a hole with no bottom
lamp-setup - LAMP server setup
apache-ultimate-bad-bot-bl
wpscan - WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]