| I don't distinguish actually. There are two things I do normally: - Block Bad Bots. There's a simple text file called `bad_bots.txt`
- Block Bad ASNs. There's a simple text file called `bad_asns.txt` There's also another for blocking IP(s) and IP-ranges called `bad_ips.txt` but it's often more effective to block an much larger range of IPs (At the ASN level). To give you an concrete idea, here's some examples: $ cat etc/caddy/waf/bad_asns.txt
# CHINANET-BACKBONE No.31,Jin-rong Street, CN
# Why: DDoS
4134 # CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN
# Why: DDoS
4837 # CHINAMOBILE-CN China Mobile Communications Group Co., Ltd., CN
# Why: DDoS
9808 # FACEBOOK, US
# Why: Bad Bots
32934 # Alibaba, CN
# Why: Bad Bots
45102 # Why: Bad Bots
28573 |