Blocking for URLs NOT on your site

Created on 29 February 2024, 9 months ago

A lot of "Page Not Found"

I get a lot of IP addresses looking for pages, or URL destinations, that aren't on my site or structure, by anonymous visitors. They are almost all looking with malicious intent.

Proposed resolution / Feature Request

So I was thinking (uh oh 😲 )... and I don't know if this can, or should be done: a blocking option what will block any URL location "Page Not Found" that is NOT in the site structure. So I guess it would have to index all the URL destinations on the site and, if it isn't a URL location listed, by anonymous, they get blocked. ?? It would be proving a negative / NOT. And I guess a means to allow for whitelisting.

It's just a thought.

PS... also, I'm starting to see spam/comment content which is obviously AI generated. A new frontier. So I don't even know if this NOT thing would be worth perusing given that AI analysis might be on the horizon - ?? - where Autoban can detect things better. ???

BTW, I love this module and use it everyday! Thank You for it!

✨ Feature request
Status

Active

Version

1.9

Component

Miscellaneous

Created by

πŸ‡ΊπŸ‡ΈUnited States corE

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @corE
  • πŸ‡ΊπŸ‡ΈUnited States corE
  • πŸ‡ΊπŸ‡¦Ukraine goodboy Kharkiv, Ukraine

    @corE, hello, thanks for using the Autoban.
    if I understood correctly, you're receiving requests like /wp_admin or /erwefdsfsd/sfsfsf . But if you have (for example) Articles pages (/articles) on your site it's ok for you receiving 404 error for requests like /articles/some_deleted_article.

    Yes, I think it can be solved using some like Pattern Whitelist. So, if we put "/articles/" pattern to the list the /articles/some_deleted_article won't be banned. May be the best way is using pathauto patterns for generating list for this.

    Thanks for the idea, I'll think about implementing it.

  • πŸ‡ͺπŸ‡¨Ecuador jwilson3

    Note there is a module called Drupal Perimeter Defence β†’ that does something very similar to what you want. Might be worth a look, and a comparison about what differs to make sure efforts are not duplicated and feature sets don't overlap too much.

  • πŸ‡¨πŸ‡¦Canada netgeek123

    @goodboy

    What if you could have a whitelist that you can put Pathauto tokens into. Then all other URL's that do not exist would be subject to penalty?

    Unless that is what you're saying. ha!

Production build 0.71.5 2024