Finally setup Nepenthes and caught my first bot
Finally setup Nepenthes and caught my first bot
Finally deployed Nepenthes and changed my bot route from returning 444 (which is Nginx for "close connection and waste no more resources on this shit) to redirecting to my Nepenthes tarpit.
I set the corpus text to the episode transcripts from Star Trek Voyager's "The Thaw" (the one with the psychotic fear clown) and "Bride of Chaotica". So the output is a random mix of two sets of ridiculous plotlines.
I grabbed this bit of the log about 10 minutes ago, but the stupid bot is still thrashing around in the tarpit. Love it.
Edit: Once again Lemmy World has stopped sending federation activity to my instance so if you reply something witty and I don't do the Lemmy equivalent of a high-five, that's why; I didn't get it.
nginx
# Initial hit to webroot. Will it take the bait?
2025-12-05T19:50:56-05:00 WAF-01 tarpit.mydomain.xyz, PROXY_IP_REDACTED, 74.7.228.29, TLSv1.3, "GET", "/", "-", 200, 891, "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
# Bait taken and hooked!
2025-12-05T19:51:31-05:00 WAF-01 tarpit.mydomain.xyz, PROXY_IP_REDACTED, 74.7.242.37, TLSv1.3, "GET", "/analyzing", "-", 200, 951, -, "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
2025-12-05T19:51:32-05:00 WAF-01 tarpit.mydomain.xyz, PROXY_IP_REDACTED, 74.7.242.37, TLSv1.3, "GET", "/glandular", "-", 200, 789, -, "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
2025-12-05T19:51:35-05:00 WAF-01 tarpit.mydomain.xyz, PROXY_IP_REDACTED, 74.7.242.37, TLSv1.3, "GET", "/mdse", "-", 200, 810, -, "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"