submitted 2 years ago* (last edited 2 years ago) by to c/linux@lemmy.ml
 

I was reading the reddit thread on Claude AI crawlers effectively DDOSing Linux Mint forums https://libreddit.lunar.icu/r/linux/comments/1ceco4f/claude_ai_name_and_shame/

and I wanted to block all ai crawlers from my selfhosted stuff.

I don't trust crawlers to respect the Robots.txt but you can get one here: https://darkvisitors.com/

Since I use Caddy as a Server, I generated a directive that blocks them based on their useragent. The content of the regex basically comes from darkvisitors.

Sidenote - there is a module for blocking crawlers as well, but it seemed overkill for me https://github.com/Xumeiquer/nobots

For anybody who is interested, here is the block_ai_crawlers.conf I wrote.

(blockAiCrawlers) {
  @blockAiCrawlers {
    header_regexp User-Agent "(?i)(Bytespider|CCBot|Diffbot|FacebookBot|Google-Extended|GPTBot|omgili|anthropic-ai|Claude-Web|ClaudeBot|cohere-ai)"
  }
  handle @blockAiCrawlers {
    abort
  }
}

# Usage:
# 1. Place this file next to your Caddyfile
# 2. Edit your Caddyfile as in the example below
#
# ```
# import block_ai_crawlers.conf
#
# www.mywebsite.com {
#   import blockAiCrawlers
#   reverse_proxy * localhost:3000
# }
# ```

all 19 comments

sorted by: hot top controversial new old
[–] 66 points 2 years ago (7 children)
  • [–] 9 points 2 years ago

    Suggestion at the end:

      <a class="boom" href="https://boom .arielaw.ar">hehe</a>
    

    Wouldn't it destroy GoogleBot (and other search engine) those making your site delisted from Search?

  • source
  • parent
  • [–] 7 points 2 years ago

    This is one of the best things I've ever read.

    I'd love to see a robots.txt do a couple safe listings, then a zip bomb, then a safe listing. It would be fun to see how many log entries from an IP look like get a, get b, get zip bomb.... no more requests.

  • source
  • parent
  • [–] 26 points 2 years ago (2 children)
  • [–] 3 points 2 years ago

    From your recommendation, I found a related project pandoras_pot that I am able to run in a Docker container, and seems to run more efficiently on my Pi home server. I now use it in my Caddyfile to redirect a number of fake subdomains and paths that are likely to be found by a malicious bot (of course all are excluded in my robots.txt for bots that actually respect it). Thanks for the recommendation!

  • source
  • parent
  • [–] 19 points 2 years ago (3 children)

    We should do more than block them, they need to be teergrubed.

  • source
  • hideshow 6 child comments
  • [–] [S] 12 points 2 years ago* (last edited 2 years ago)

    Thats an easy modification. Just redirect or reverse proxy to the tarpit instead of abort .

    I was even thinking about an infinitely linked data-poisoned html document, but there seemed to be no ready made project that can generate one at the moment. (No published data-poisoning techniques for plain text at all afaik. But there is one for images.)

    Ultimately I decided to just abort the connection as I don't want my servers to waste traffic or CPU cycles.

  • source
  • parent
  • [–] 4 points 2 years ago

    Huh, looks like the post in r/linux got removed for not being relevant.
    What a joke.

  • source