nowfound

Dev tools · October 14, 2025

An open source access logs analytics script to block bot attacks

This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…

An open source access logs analytics script to block bot attacks launched on October 14, 2025 with 37 votes, #451 of 8,178 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 1 year on.

Visit github.com ↗Alternativestop 6% of October 2025

In plain words

This open source Python project analyzes web server access logs to identify and block malicious bots, including application-level DDoS attackers and web scrapers. It uses client fingerprinting techniques like JA5 to classify suspicious traffic patterns and enable dynamic blocking. The tool is designed for developers and system administrators managing bot threats and is offered as a proof-of-concept seeking user feedback on features and usability.

written from the facts on this page · September 2026

From the sources

Statistical Automated Bot Protection. Contribute to tempesta-tech/webshield development by creating an account on GitHub.

Automatic detection and blocking bad bots (DDoS, shopping bots, scrappers, booking bots and others) by TLS and HTTP fingerprints or IP based on Tempesta FW access logs stored in the Clickhouse database. The current version 0.1 is experimental and should not be used in production. git clone https://github.com/tempesta-tech/webshield.git cd webshield sudo setup.sh Prepare Before running the application, you need to prepare Tempesta FW: systemctl start tempesta-webshield.service See logs journalctl -f -u tempesta-webshield Run tests To run the tests you need to copy GeoLite2-City.mmdb to tests/ directory. # run all tests with a logging level INFO pytest Format project black . isort . About…from github.com

In the maker’s words, at launch

This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots.…

Does a similar job

all alternatives →
  • Stop AI scrapers from hammering your self-hosted blog (using porn)Dec 2025 · github.com · ▲373

    Alright so if you run a self-hosted blog, you've probably noticed AI companies scraping it for training data. And not just a little (RIP to your server bill). There isn't much you can do about it without cloudflare. These companies ignore robots.txt, and you're competing with teams with more resources than you. It's you vs the MJs of programming, you're not going to win. But there is a solution. Now I'm not going to say it's a great solution...but a solution is a solution. If your website contains content that will trigger their scraper's safeguards, it will get dropped from their data…

  • Spall – WASM-based profiler for JavaScript and C and Odin2023 · gravitymoth.com · ▲83

    [I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…

  • FT
    Free tool to see how much AI bots are costing your siteMay 2026 · botcost.dev · ▲18

    Free tool to analyze your server logs and see exactly which AI bots are costing you bandwidth. Works with Nginx, Apache, Cloudflare, and Vercel. Nothing uploaded.

  • An experimental AntiBot, AntiCrawl reverse proxy for the web2024 · github.com · ▲28

    An experimental AntiBot, AntiCrawl reverse proxy for serving simple static content. - pulkitsharma07/OnlyHumans-Proxy

  • XHR anti bot bypass (xhr.dev)2024 · xhr.dev · ▲19

    I've launched the new product, xhr.dev (https://xhr.dev/) The initial product is a 1 line code integration that does bot detection avoidance via a forward proxy. Ideal customer is someone who gets blocked by anti-bot defences like cloudflare or other captcha challenges. Usually these customers have web scraping use cases. You can view our historical performance on our status page (https://status.xhr.dev). ty v much, john

  • AD

More dev tools this month

the category →
  • /dev/null▲489

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 29d ago · corespeed.io

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, October 2025

the whole month →
  • Our first coding model and new interface for agents

    AI · Oct 2025 · cursor.com

  • Flask▲806

    Notion + Loom, for video collaboration.

    AI · 2025 · flask.do

  • I went down the rabbit hole on a side project and ended up building this: Strange Attractors(https://blog.shashanktomar.com/posts/strange-attractors). It’s built with three.js. Working on it reminded me of the little "maths for fun" exercises I used to do while learning programming in early days. Just trying things out, getting fascinated and geeky, and being surprised by the results. I spent way too much time on this, but it was extreme fun. My favorite part: someone pointed me to the Simone Attractor on Threads. It is a 2D attractor and I asked GPT to extrapolate it to…

    AI · Oct 2025 · blog.shashanktomar.com

  • Orchestra▲793

    A chat-centric workspace for builders and modern teams

    Work · 2025 · orch.so

  • Hey all, I built this. It’s not trying to capture every autistic experience (that’d be impossible). It’s based on my own lived experience as well as that of friends on the spectrum. I'm trying to give people a feel for what masking, decision fatigue, and burnout can look like day-to-day. That’s hard to explain in words, but easier to show through choices and stats. I'm not trying to "define autism". I’ve gotten good feedback here about resilience, meds, and difficulty tuning. I’ll keep tweaking it. If even a few people walk away thinking, "ah, maybe that’s why my coworker struggles in those…

    Life & fun · 2025 · autism-simulator.vercel.app

  • Director▲768

    Lovable for web automation

    AI · 2025 · director.ai