mitchellkrogza/nginx-ultimate-bad-bot-blocker
Some data may be outdated — see provenance labels.
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders observed · 2026-09-22
Health v2 · maintenance only
75/100
- Activity 96
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3741
- days_rel: n/a
- days_push: 29
- n_releases_24m: 0
Adoption not part of the score
4792 stars · 525 forks observed · 2026-09-22
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
A drop-in Nginx configuration package that blocks bad bots, spam referrers, vulnerability scanners, malware, adware, and fake Googlebots, with anti-DDOS rate limiting and a Fail2Ban jail for repeat offenders. It ships generated blocklists (7,000+ bad referrers, 700 bad user-agents) and is maintained as a regularly updated release.
Use cases
- block bad bots from my nginx site
- stop referrer spam in nginx access logs
- block fake googlebot user agents
- protect wordpress from theme detector scanners
- add anti-ddos rate limiting to nginx
- ban repeat offender IPs with fail2ban
- block vulnerability scanners hitting my server
When to choose
- you run Nginx and want a maintained, ready-made blocklist config without writing your own rules
- you need to cut down bot traffic, spam referrers, and scanner noise at the web server level
- you want Fail2Ban integration for repeat offenders
When to avoid
- you use Apache, Caddy, or a CDN/WAF instead of Nginx
- you need per-application, dynamic bot detection rather than static blocklists
- you cannot safely include large generated config files in your Nginx setup
Facets
plugin · maturity active
security rate-limiting middleware security web-development self-hosted self-hosted bot-blocking referrer-spam anti-ddos fail2ban nginx-config user-agent-filtering nginx linux web-server
1 source
- readme: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker · fetched 2026-09-22 · 6f3ac08d81de
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| mitchellkrogza/nginx-ultimate-bad-bot-blocker | main | 75 |
For agents
markdown · JSON · MCP: product_card(name="mitchellkrogza/nginx-ultimate-bad-bot-blocker")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem