Seems all accesses are being without user access header, isn't?
These are bad bots, wasting you bandwidth and machine resources.
You are using nginx?
I did the following, in file '/etc/nginx/conf.d/vhosts/domain.com.conf', change before "location / {" directive, including the following:
if ($http_user_agent = "") { return 444; }
...like in the following:
server {
listen 11.22.33.44:80;
server_name domain.com www.domain.com;
(...)
if ($http_user_agent = "") { return 444; }
location / {
(...)
}
You need to change the /etc/nginx/conf.d/vhosts/domain.com.ssl.conf files too, if you use ssl.
Regards,
Netino
Topic: How to stop malicious scans (Read 142 times)
