Dev tools · alternatives · 2026
24 alternatives to An open source access logs analytics script to block bot attacks
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
This open source Python project analyzes web server access logs to identify and block malicious bots, including application-level DDoS attackers and web scrapers. It uses client fingerprinting techniques like JA5 to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Alright so if you run a self-hosted blog, you've probably noticed AI companies scraping it for training data. And not just a little (RIP to your server bill). There isn't much you can do about it without cloudflare. These companies ignore robots.txt, and you're competing with teams with more resources than you. It's you vs the MJs of programming, you're not going to win. But there is a solution. Now I'm not going to say it's a great solution...but a solution is a solution. If your website contains content that will trigger their scraper's safeguards, it will get dropped from their data…
Dec 2025 · github.com · its alternatives →
- 2
Knock-Knock.net is a live honeypot dashboard showing real-time bot attacks by protocol, source country, ISP, username, password, and IP across SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP services.
Feb 2026 · knock-knock.net · its alternatives →
- 3
[I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…
2023 · gravitymoth.com · its alternatives →
- 4WW
2019 · wehatecaptchas.com · its alternatives →
- 5
Anomaly Detection on Dynamic (time-evolving) Graphs in Real-time and Streaming manner. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies. - Stream-AD/MIDAS
2020 · github.com · its alternatives →
- 6
- 7
Detect adblockers without Javascript by abusing early hints - Mechazawa/103-early-anti-adblock
2024 · github.com · its alternatives →
- 8
Your AI agent is burning 6x more tokens than it needs to just to browse the web. We built OpenBrowser MCP to fix that. Most browser MCPs give the LLM dozens of tools: click, scroll, type, extract, navigate. Each call dumps the entire page accessibility tree into the context window. One Wikipedia page? 124K+ tokens. Every. Single. Call. OpenBrowser works differently. It exposes one tool. Your agent writes Python code, and OpenBrowser executes it in a persistent runtime with full browser access. The agent controls what comes back. No bloated page dumps. No wasted tokens. Just the data your…
Apr 2026 · openbrowser.me · its alternatives →
- 9FT
Free tool to analyze your server logs and see exactly which AI bots are costing you bandwidth. Works with Nginx, Apache, Cloudflare, and Vercel. Nothing uploaded.
May 2026 · botcost.dev · its alternatives →
- 10
An experimental AntiBot, AntiCrawl reverse proxy for serving simple static content. - pulkitsharma07/OnlyHumans-Proxy
2024 · github.com · its alternatives →
- 11
I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…
2024 · github.com · its alternatives →
- 12
I've launched the new product, xhr.dev (https://xhr.dev/) The initial product is a 1 line code integration that does bot detection avoidance via a forward proxy. Ideal customer is someone who gets blocked by anti-bot defences like cloudflare or other captcha challenges. Usually these customers have web scraping use cases. You can view our historical performance on our status page (https://status.xhr.dev). ty v much, john
2024 · xhr.dev · its alternatives →
- 13
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 14
the tcpkit was designed to make network packets programable with Lua script - git-hulk/tcpkit
2018 · github.com · its alternatives →
- 15
Hi HN, I built Ayder — a single-binary, HTTP-native durable event log written in C. The wedge is simple: curl is the client (no JVM, no ZooKeeper, no thick client libs). There’s a 2-minute demo that starts with an unclean SIGKILL, then restarts and verifies offsets + data are still there. Numbers (3-node Raft, real network, sync-majority writes, 64B payload): ~50K msg/s sustained (wrk2 @ 50K req/s), client P99 ~3.46ms. Crash recovery after SIGKILL is ~40–50s with ~8M offsets. Repo link has the video, benchmarks, and quick start. I’m looking for a few early design partners (any…
Jan 2026 · github.com · its alternatives →
- 16
Hey Xinwei and Zecheng here, we are the authors of TraceRoot (https://github.com/traceroot-ai/traceroot). TraceRoot (https://traceroot.ai) is an open-source debugging platform that helps engineers fix production issues faster by combining structured traces, logs, source code contexts and discussions in Github PRs, issues and Slack channels, etc. with AI Agents. At the heart are our lightweight Python (https://github.com/traceroot-ai/traceroot-sdk) and TypeScript (https://github.com/traceroot-ai/traceroot-sdk-ts) SDKs -…
2025 · github.com · its alternatives →
- 17AD
2017 · pixel.shodan.me · its alternatives →
- 18
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 19
I started using Claude Code (claude --dangerously-skip-permissions) and Codex (codex --yolo) and realized I had no reliable way to know what they actually did. The agent's own output tells you a story, but it's the agent's story. logira records exec, file, and network events at the OS level via eBPF, scoped per run. Events are saved locally in JSONL and SQLite. It ships with default detection rules for credential access, persistence changes, suspicious exec patterns, and more. Observe-only – it never blocks. https://github.com/melonattacker/logira
Mar 2026 · github.com · its alternatives →
- 20
The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io - pingooio/pingoo
2025 · github.com · its alternatives →
- 21
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 22
Lightweight open-source DDoS traffic monitor. Stdout output, no account required - Flowtriq/ftagent-lite
May 2026 · github.com · its alternatives →
- 23
Proves vulnerabilities before reporting them.
Aug 2026 · dashboard-seven-self-13.vercel.app · its alternatives →
- 24
CrawlerCheck▲16Since the last Show HN 7 months ago, I've shipped some major updates: • Operators Directory – browse 160+ crawlers by company (Google, OpenAI, Anthropic, etc.). See all their bots, safety stats, and official docs in one place. • Enhanced crawler profiles with "Blocking Impact" analysis and common use cases • Added 25+ new AI crawlers including latest models and scrapers • Bulk robots.txt generator – generate allow/block rules for all filtered bots in one click • RFC 9309 strict compliance – mimics Googlebot's exact "Longest Match" logic The tool now helps answer "who owns CCBot?" or…
2025 · crawlercheck.com · its alternatives →
Also compare
- Stop AI scrapers from hammering your self-hosted blog (using porn) alternatives
- Knock-Knock.net – Visualizing the bots knocking on my server's door alternatives
- Spall – WASM-based profiler for JavaScript and C and Odin alternatives
- wehatecaptchas – we’ll keep the bots out without annoying your users alternatives
- Fast Real-Time Anomaly Detection in Dynamic Graphs alternatives
- JetOctopus alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →