[1oooqooq]

it's called not having a vibecoded app that falls to pieces on public endpoints even before ngix ratelimit can kick in

[mattl]

Nobody is talking about a vibe coded app. I want to block AI scrapers entirely.

[1oooqooq]

point is, why do you care if your site can handle the traffic?

there's no (malicious) bot detection that won't impact a portion of real users. accept that fact and just let it be.

poisoning data in ways that's obvious to the false positive user is a much better option.

[mattl]

I really doubt any legit user is using a weird user agent and an IP address in the same AS as an AI slop crawler

[1oooqooq]

You'd be surprised. Your users too, but you wouldn't know because they will not be able to tell you.