FireHol [1] and lists_vpn [2] are useful for nginx geo files. Be sure to use iprange [3] to aggregate cidr ranges, IP's or lists get big fast The IP ranges can be used in conjunction with rate limiting and/or firewall ipsets and/or blackhole routing tables depending on what type of abuse your site is receiving.
replyLLM's can help you implement iprange into IP list building scripts to keep the lists smaller and more efficient.
[1] - https://github.com/firehol/blocklist-ipsets/
Thanks. I will definitely explore these in production.
replyYou're welcome.
replyBefore pushing such things to production consider first testing in dev/qa then staging or some canary environment. I use those IP's to determine who gets into a moderator review queue so worst case it just makes more work for me. Consider using those in conjunction with whatever rate limiting capabilities your web server provides first so it is not a hard block in the unlikely event a real customer shows up on one of them.