Integration with abuseipdb.com about nginx-ultimate-bad-bot-blocker HOT 3 CLOSED

That's what I thought.

I started writing it with a free API key and that returns 10k IPs, all with a confidence level of 100%.

I then got a paid key and set it up on 2 servers at 75% confidence which returns approximately 77k results.
When I checked the logs this morning, I found that verified bingbot IPs had been blocked several times.
Their confidence level is in the 80s, so I've set confidence back to 90 and 63k results to err on the safe side.

My bash knowledge is nonexistent but running the script is quick and hardly uses any resources. I tried to add a bit of a fallback if there's no response from the API, but I think it will fail/cause issues if it returns anything other than the plain text list of IPs (As I found out when I requested the json response by mistake).

Hopefully, someone else will find it useful.

from nginx-ultimate-bad-bot-blocker.

I got this working:
https://github.com/robwent/abuseipdb-bad-bot-blocker

I get the feeling it's already integrated at some level as there are a lot of duplicate IPs after running it.

GitHub

GitHub - robwent/abuseipdb-bad-bot-blocker

Contribute to robwent/abuseipdb-bad-bot-blocker development by creating an account on GitHub.

from nginx-ultimate-bad-bot-blocker.

Hi @robwent abuse ipdb is already included in the daily updates but limited to the 1000 top IP's only without any API key or subscription. So this script you referenced, when used with a subscription to Abuse IPDB, would give you much more IP's but YES you will get many duplicate [warn] notices from Nginx but they are merely [warn] notices and are simply to be ignored as they do not affect Nginx operations in any way whatsoever.

from nginx-ultimate-bad-bot-blocker.