// Archive
Tag: rate-limiting
Auto-Ban Abusive Clients in NGINX with the error-abuse module
A single misbehaving scraper can fire 40,000 requests an hour at a 404 it will never stop hitting, and your access log…
How to defend your webserver against vibe-coded AI exploit scanners and bots
Half of all web traffic is bots, and a growing slice are vibe-coded AI scanners written by a chatbot prompt. Here is the five-layer defense in depth that stops them: rate limiting, WAF, TLS hardening, request validation, access control, PHP and Docker hardening, plus the patching that does the most work.
NGINX Rate Limiting: Protect Your Server from Bots, Scrapers and Brute Force
NGINX rate limiting with limit_req_zone stops credential stuffing, scrapers, and DDoS floods before they reach your application. This guide covers burst handling, per-endpoint limits, IP whitelisting, WordPress-specific config, and Redis-backed cross-server limiting.