Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Re:Ask HN: Can we collaborate on a IP Address or Regex black... by mjbrownie on Tuesday April 06, 2021 @11:07PM (#26720165)

I usually set up nginx to "default ignore" and only respond to specific paths which I can name... works for api only domains at any rate. just use an explicit subfolder like /api/ ... cuts down on the noise.

    location / {
            return 444;
            access_log off;
    }

    location /a/ {
       ...
    }

[ Parent | on HN ]

Re:Ask HN: Can we collaborate on a IP Address or Regex black... by usernamebias on Tuesday April 06, 2021 @11:11PM (#26720189)

Can't do that when 404's are expected from actual customers. I need to redirect 404 to /

[ Parent | on HN ]

Re:Ask HN: Can we collaborate on a IP Address or Regex black... by mjbrownie on Tuesday April 06, 2021 @11:33PM (#26720313)

yeah depends on your site structure.. you could always stop the logging (or log to a different file) but return a human 404 with links to legit routes etc. the main thing is to remove the noise so you can focus on the more targeted probing.

[ Parent | on HN ]